Bugtraq: by author

79 messages starting Sep 06 16 and ending Sep 05 16
Date index | Thread index | Author index


alex_haynes

[CVE-2016-6484] Infoblox Network Automation CRLF Injection/ HTTP splitting alex_haynes (Sep 06)
Infoblox Cross-site scripting vulnerabilities alex_haynes (Sep 06)

Apple Product Security

APPLE-SA-2016-09-20-4 macOS Server 5.2 Apple Product Security (Sep 20)
APPLE-SA-2016-09-20-5 watchOS 3 Apple Product Security (Sep 20)
APPLE-SA-2016-09-20-2 Safari 10 Apple Product Security (Sep 20)
APPLE-SA-2016-09-20-6 tvOS 10 Apple Product Security (Sep 20)
APPLE-SA-2016-09-14-1 iOS 10.0.1 Apple Product Security (Sep 14)
APPLE-SA-2016-09-20-3 iOS 10 Apple Product Security (Sep 20)

Asterisk Security Team

AST-2016-007: RTP Resource Exhaustion Asterisk Security Team (Sep 09)

Brian Demers

[ANNOUNCE][CVE-2016-6802] Apache Shiro 1.3.2 released Brian Demers (Sep 13)

bshastry

Multiple DoS vulnerabilities in libosip2-4.1.0 bshastry (Sep 13)

cfpbrussels2017

Recon Europe 2017 Call For Papers - January 27 - 29, 2017 - Brussels, Belgium cfpbrussels2017 (Sep 23)

Cisco Systems Product Security Incident Response Team

Cisco Security Advisory: Cisco Cloud Services Platform 2100 Remote Command Execution Vulnerability Cisco Systems Product Security Incident Response Team (Sep 21)
Cisco Security Advisory: Cisco IOS and IOS XE Software AAA Login Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 28)
Cisco Security Advisory: Cisco IOS and IOS XE Software Multicast Routing Denial of Service Vulnerabilities Cisco Systems Product Security Incident Response Team (Sep 28)
Cisco Security Advisory: Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Fragmentation Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 28)
Cisco Security Advisory: Cisco IOS Software Common Industrial Protocol Request Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 28)
Cisco Security Advisory: Cisco Cloud Services Platform 2100 Command Injection Vulnerability Cisco Systems Product Security Incident Response Team (Sep 21)
Cisco Security Advisory: Cisco IOS XE Software NAT Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 28)
Cisco Security Advisory: Cisco IOS and IOS XE Software Smart Install Memory Leak Vulnerability Cisco Systems Product Security Incident Response Team (Sep 28)
Cisco Security Advisory: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016 Cisco Systems Product Security Incident Response Team (Sep 28)

Dawid Golunski

CVE-2016-4264 Adobe ColdFusion <= 11 XXE Vulnerability Dawid Golunski (Sep 07)

EMC Product Security Response Center

ESA-2016-065: EMC Avamar Data Store and Avamar Virtual Edition Multiple Vulnerabilities EMC Product Security Response Center (Sep 19)
ESA-2016-094: RSA BSAFE® Micro Edition Suite Multiple Vulnerabilities EMC Product Security Response Center (Sep 15)
ESA-2016-104: EMC ViPR SRM Multiple Vulnerabilities EMC Product Security Response Center (Sep 13)
ESA-2016-108: EMC Documentum D2 Authentication Bypass Vulnerability EMC Product Security Response Center (Sep 13)
ESA-2016-096: EMC Celerra, VNX1, VNX2 and VNXe SMB NTLM Authentication Weak Nonce Vulnerability EMC Product Security Response Center (Sep 19)
ESA-2016-127: EMC ViPR SRM Stored Cross-Site Scripting Vulnerability EMC Product Security Response Center (Sep 27)
ESA-2016-093: RSA® Adaptive Authentication (On-Premise) Cross-Site Scripting Vulnerability EMC Product Security Response Center (Sep 20)
ESA-2016-097: RSA Identity Governance and Lifecycle Information Disclosure Vulnerability EMC Product Security Response Center (Sep 23)

Flavio Junqueira

[SECURITY] CVE-2016-5017: Buffer overflow vulnerability in ZooKeeper C cli shell Flavio Junqueira (Sep 19)
[SECURITY] CVE-2016-5017: Buffer overflow vulnerability in ZooKeeper C cli shell Flavio Junqueira (Sep 16)

Florian Weimer

[SECURITY] [DSA 3680-1] bind9 security update Florian Weimer (Sep 27)
[SECURITY] [DSA 3679-1] jackrabbit security update Florian Weimer (Sep 27)
[SECURITY] [DSA 3678-1] python-django security update Florian Weimer (Sep 26)

Jamie R

Fwd: BT Wifi Extenders - Cross Site Scripting leading to disclosure of PSK Jamie R (Sep 22)

Larry W. Cashdollar

Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Larry W. Cashdollar (Sep 22)

Martin Heiland

Open-Xchange Security Advisory 2016-09-13 (2) Martin Heiland (Sep 13)
Open-Xchange Security Advisory 2016-09-13 Martin Heiland (Sep 13)

Matteo Beccati

[REVIVE-SA-2016-002] Revive Adserver - Multiple vulnerabilities Matteo Beccati (Sep 28)

matthias . deeg

[SYSS-2016-060] Logitech M520 - Insufficient Verification of Data Authenticity (CWE-345) matthias . deeg (Sep 30)

Mike Kienenberger

Re: CVE-2016-5019: MyFaces Trinidad view state deserialization security vulnerability Mike Kienenberger (Sep 29)

ML

Call for Papers - WorldCIST'17 - 5th World Conference on Information Systems and Technologies (Published by Springer) ML (Sep 19)

Moritz Muehlenhoff

[SECURITY] [DSA 3674-1] firefox-esr security update Moritz Muehlenhoff (Sep 23)
[SECURITY] [DSA 3669-1] tomcat7 security update Moritz Muehlenhoff (Sep 16)
[SECURITY] [DSA 3673-1] openssl security update Moritz Muehlenhoff (Sep 22)
[SECURITY] [DSA 3661-1] charybdis security update Moritz Muehlenhoff (Sep 06)

msg

Cisco EPC 3925 Multiple Vulnerabilities msg (Sep 15)

Pierre Kim

Multiple vulnerabilities found in the Dlink DWR-932B (backdoor, backdoor accounts, weak WPS, RCE ...) Pierre Kim (Sep 28)

Ralf Spenneberg

OS-S Security Advisory 2016-19: Epson WorkForce multi-function printers do not use signed firmware images and allow unauthorized malicious firmware-updates (CVSS 10) Ralf Spenneberg (Sep 26)

research

Insecure transmission of data in Android applications developed with Adobe AIR [CVE-2016-6936] research (Sep 15)

Ricardo Iramar dos Santos

IE11 is not following CORS specification for local files Ricardo Iramar dos Santos (Sep 22)

Roee Hay

Google Nexus 5X Bootloader Unauthorized Memory Dumping via USB Roee Hay (Sep 04)

Salvatore Bonaccorso

[SECURITY] [DSA 3666-1] mysql-5.5 security update Salvatore Bonaccorso (Sep 14)
[SECURITY] [DSA 3672-1] irssi security update Salvatore Bonaccorso (Sep 22)
[SECURITY] [DSA 3659-1] linux security update Salvatore Bonaccorso (Sep 05)

security-alert

[security bulletin] HPSBGN03648 rev.1 - HPE LoadRunner and Performance Center, Remote Denial of Service (DoS) security-alert (Sep 26)
[security bulletin] HPSBGN03650 rev.1 - HPE Network Automation Software, Local Arbitrary File Modification security-alert (Sep 29)
[security bulletin] HPSBHF03655 rev.1 - HPE iMC PLAT Network Products running Apache Axis2, Multiple Remote Vulnerabilities security-alert (Sep 26)
[security bulletin] HPSBHF03646 rev.1 - HPE Comware 7 (CW7) Network Products running NTP, Multiple Remote Vulnerabilities security-alert (Sep 22)
[security bulletin] HPSBST03640 rev.1 - HP XP7 Command View Advance Edition Suite (CVAE) using Replication Manager (RepMgr) and Device Manager (DevMgr), Local Access Restriction Bypass security-alert (Sep 13)
[security bulletin] HPSBHF03654 rev.1 - HPE iMC PLAT Network Products using SSL/TLS, Multiple Remote Vulnerabilities security-alert (Sep 26)
[security bulletin] HPSBHF03652 rev.1 - HPE iMC PLAT Network Products running Apache Commons FileUpload, Remote Denial of Service (DoS) security-alert (Sep 26)
[security bulletin] HPSBGN03645 rev.2 - HPE Helion OpenStack Glance, Remote Access Restriction Bypass, Unauthorized Access security-alert (Sep 22)
[security bulletin] HPSBGN03572 rev.1 - HPE Performance Center, Remote User Validation Failure security-alert (Sep 13)

Slackware Security Team

[slackware-security] irssi (SSA:2016-265-03) Slackware Security Team (Sep 22)
[slackware-security] php (SSA:2016-252-01) Slackware Security Team (Sep 09)
[slackware-security] php (SSA:2016-267-01) Slackware Security Team (Sep 26)
[slackware-security] openssl (SSA:2016-270-01) Slackware Security Team (Sep 26)
[slackware-security] bind (SSA:2016-271-01) Slackware Security Team (Sep 28)
[slackware-security] pidgin (SSA:2016-265-01) Slackware Security Team (Sep 22)
[slackware-security] curl (SSA:2016-259-01) Slackware Security Team (Sep 16)

Tim Schughart

Multiple exposures in Sophos UTM Tim Schughart (Sep 30)
Persistent XSS in Abus Security Center - CVSS 8.0 Tim Schughart (Sep 29)

unlimitsec

CVE-2016-6920 ffmpeg exr file Heap Overflow unlimitsec (Sep 06)

Vulnerability Lab

Picosmos Shows v1.6.0 - Stack Buffer Overflow Vulnerability Vulnerability Lab (Sep 08)
FormatFactory 3.9.0 - (.task) Stack Overflow Vulnerability Vulnerability Lab (Sep 02)
PHPHolidays CMS v3.00.50 - Cross Site Scripting Web Vulnerability Vulnerability Lab (Sep 08)

ZeroDay

Unauthenticated Arbitrary Directory Dump in BMC BladeLogic Server Automation ZeroDay (Sep 05)