Bugtraq: by date

79 messages starting Sep 02 16 and ending Sep 30 16
Date index | Thread index | Author index


Friday, 02 September

FormatFactory 3.9.0 - (.task) Stack Overflow Vulnerability Vulnerability Lab

Sunday, 04 September

Google Nexus 5X Bootloader Unauthorized Memory Dumping via USB Roee Hay

Monday, 05 September

[SECURITY] [DSA 3659-1] linux security update Salvatore Bonaccorso
Unauthenticated Arbitrary Directory Dump in BMC BladeLogic Server Automation ZeroDay

Tuesday, 06 September

[SECURITY] [DSA 3661-1] charybdis security update Moritz Muehlenhoff
[CVE-2016-6484] Infoblox Network Automation CRLF Injection/ HTTP splitting alex_haynes
Infoblox Cross-site scripting vulnerabilities alex_haynes
CVE-2016-6920 ffmpeg exr file Heap Overflow unlimitsec

Wednesday, 07 September

CVE-2016-4264 Adobe ColdFusion <= 11 XXE Vulnerability Dawid Golunski

Thursday, 08 September

Picosmos Shows v1.6.0 - Stack Buffer Overflow Vulnerability Vulnerability Lab
PHPHolidays CMS v3.00.50 - Cross Site Scripting Web Vulnerability Vulnerability Lab

Friday, 09 September

[slackware-security] php (SSA:2016-252-01) Slackware Security Team
AST-2016-007: RTP Resource Exhaustion Asterisk Security Team

Tuesday, 13 September

Open-Xchange Security Advisory 2016-09-13 Martin Heiland
Open-Xchange Security Advisory 2016-09-13 (2) Martin Heiland
Multiple DoS vulnerabilities in libosip2-4.1.0 bshastry
[ANNOUNCE][CVE-2016-6802] Apache Shiro 1.3.2 released Brian Demers
ESA-2016-104: EMC ViPR SRM Multiple Vulnerabilities EMC Product Security Response Center
ESA-2016-108: EMC Documentum D2 Authentication Bypass Vulnerability EMC Product Security Response Center
[security bulletin] HPSBGN03572 rev.1 - HPE Performance Center, Remote User Validation Failure security-alert
[security bulletin] HPSBST03640 rev.1 - HP XP7 Command View Advance Edition Suite (CVAE) using Replication Manager (RepMgr) and Device Manager (DevMgr), Local Access Restriction Bypass security-alert

Wednesday, 14 September

[SECURITY] [DSA 3666-1] mysql-5.5 security update Salvatore Bonaccorso
APPLE-SA-2016-09-14-1 iOS 10.0.1 Apple Product Security

Thursday, 15 September

Insecure transmission of data in Android applications developed with Adobe AIR [CVE-2016-6936] research
Cisco EPC 3925 Multiple Vulnerabilities msg
ESA-2016-094: RSA BSAFE® Micro Edition Suite Multiple Vulnerabilities EMC Product Security Response Center

Friday, 16 September

[SECURITY] [DSA 3669-1] tomcat7 security update Moritz Muehlenhoff
[slackware-security] curl (SSA:2016-259-01) Slackware Security Team
[SECURITY] CVE-2016-5017: Buffer overflow vulnerability in ZooKeeper C cli shell Flavio Junqueira

Monday, 19 September

[SECURITY] CVE-2016-5017: Buffer overflow vulnerability in ZooKeeper C cli shell Flavio Junqueira
Call for Papers - WorldCIST'17 - 5th World Conference on Information Systems and Technologies (Published by Springer) ML
ESA-2016-065: EMC Avamar Data Store and Avamar Virtual Edition Multiple Vulnerabilities EMC Product Security Response Center
ESA-2016-096: EMC Celerra, VNX1, VNX2 and VNXe SMB NTLM Authentication Weak Nonce Vulnerability EMC Product Security Response Center

Tuesday, 20 September

ESA-2016-093: RSA® Adaptive Authentication (On-Premise) Cross-Site Scripting Vulnerability EMC Product Security Response Center
APPLE-SA-2016-09-20-2 Safari 10 Apple Product Security
APPLE-SA-2016-09-20-3 iOS 10 Apple Product Security
APPLE-SA-2016-09-20-4 macOS Server 5.2 Apple Product Security
APPLE-SA-2016-09-20-5 watchOS 3 Apple Product Security
APPLE-SA-2016-09-20-6 tvOS 10 Apple Product Security

Wednesday, 21 September

Cisco Security Advisory: Cisco Cloud Services Platform 2100 Command Injection Vulnerability Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Cisco Cloud Services Platform 2100 Remote Command Execution Vulnerability Cisco Systems Product Security Incident Response Team

Thursday, 22 September

[SECURITY] [DSA 3672-1] irssi security update Salvatore Bonaccorso
[slackware-security] pidgin (SSA:2016-265-01) Slackware Security Team
[security bulletin] HPSBGN03645 rev.2 - HPE Helion OpenStack Glance, Remote Access Restriction Bypass, Unauthorized Access security-alert
Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Larry W. Cashdollar
[security bulletin] HPSBHF03646 rev.1 - HPE Comware 7 (CW7) Network Products running NTP, Multiple Remote Vulnerabilities security-alert
[slackware-security] irssi (SSA:2016-265-03) Slackware Security Team
IE11 is not following CORS specification for local files Ricardo Iramar dos Santos
Fwd: BT Wifi Extenders - Cross Site Scripting leading to disclosure of PSK Jamie R
[SECURITY] [DSA 3673-1] openssl security update Moritz Muehlenhoff

Friday, 23 September

[SECURITY] [DSA 3674-1] firefox-esr security update Moritz Muehlenhoff
Recon Europe 2017 Call For Papers - January 27 - 29, 2017 - Brussels, Belgium cfpbrussels2017
ESA-2016-097: RSA Identity Governance and Lifecycle Information Disclosure Vulnerability EMC Product Security Response Center

Monday, 26 September

[slackware-security] php (SSA:2016-267-01) Slackware Security Team
OS-S Security Advisory 2016-19: Epson WorkForce multi-function printers do not use signed firmware images and allow unauthorized malicious firmware-updates (CVSS 10) Ralf Spenneberg
[security bulletin] HPSBGN03648 rev.1 - HPE LoadRunner and Performance Center, Remote Denial of Service (DoS) security-alert
[slackware-security] openssl (SSA:2016-270-01) Slackware Security Team
[SECURITY] [DSA 3678-1] python-django security update Florian Weimer
[security bulletin] HPSBHF03655 rev.1 - HPE iMC PLAT Network Products running Apache Axis2, Multiple Remote Vulnerabilities security-alert
[security bulletin] HPSBHF03654 rev.1 - HPE iMC PLAT Network Products using SSL/TLS, Multiple Remote Vulnerabilities security-alert
[security bulletin] HPSBHF03652 rev.1 - HPE iMC PLAT Network Products running Apache Commons FileUpload, Remote Denial of Service (DoS) security-alert

Tuesday, 27 September

[SECURITY] [DSA 3679-1] jackrabbit security update Florian Weimer
ESA-2016-127: EMC ViPR SRM Stored Cross-Site Scripting Vulnerability EMC Product Security Response Center
[SECURITY] [DSA 3680-1] bind9 security update Florian Weimer

Wednesday, 28 September

[slackware-security] bind (SSA:2016-271-01) Slackware Security Team
Cisco Security Advisory: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016 Cisco Systems Product Security Incident Response Team
Multiple vulnerabilities found in the Dlink DWR-932B (backdoor, backdoor accounts, weak WPS, RCE ...) Pierre Kim
[REVIVE-SA-2016-002] Revive Adserver - Multiple vulnerabilities Matteo Beccati
Cisco Security Advisory: Cisco IOS and IOS XE Software AAA Login Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Cisco IOS Software Common Industrial Protocol Request Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Cisco IOS XE Software NAT Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Fragmentation Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Cisco IOS and IOS XE Software Multicast Routing Denial of Service Vulnerabilities Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Cisco IOS and IOS XE Software Smart Install Memory Leak Vulnerability Cisco Systems Product Security Incident Response Team

Thursday, 29 September

[security bulletin] HPSBGN03650 rev.1 - HPE Network Automation Software, Local Arbitrary File Modification security-alert
Persistent XSS in Abus Security Center - CVSS 8.0 Tim Schughart
Re: CVE-2016-5019: MyFaces Trinidad view state deserialization security vulnerability Mike Kienenberger

Friday, 30 September

[SYSS-2016-060] Logitech M520 - Insufficient Verification of Data Authenticity (CWE-345) matthias . deeg
Multiple exposures in Sophos UTM Tim Schughart