Bugtraq: by date

50 messages starting Aug 01 17 and ending Aug 31 17
Date index | Thread index | Author index


Tuesday, 01 August

[SECURITY] [DSA 3923-1] freerdp security update Sebastien Delafond
[CVE-2017-11494] SOL.Connect ISET-mpp meter 1.2.4.2 Authentication Bypass SQL Injection Vulnerability andys3c
[security bulletin] HPESBGN03766 rev.1 - HPE Project and Portfolio Management (PPM), Remote Cross-Site Scripting security-alert

Wednesday, 02 August

[security bulletin] HPESBHF03763 rev.1 - HPE Comware 7, IMC, VCX products using OpenSSL, Remote Denial of Service (DoS) security-alert
CVE-2017-1500 - Relected XSS in IBM WorkLight OAuth Server Web Api gabriele . gristina
[slackware-security] gnupg (SSA:2017-213-01) Slackware Security Team
[SECURITY] [DSA 3924-1] varnish security update Salvatore Bonaccorso

Friday, 04 August

[security bulletin] HPESB3P03767 rev.1 - HPE Proliant ML10 Gen9 servers using Intel Xeon E3-1200M v5 and 6th Generation Intel Core Processors, Unauthorized Write to Filesystem security-alert
SEC Consult SA-20170804-0 :: phpBB Server Side Request Forgery (SSRF) vulnerability SEC Consult Vulnerability Lab
SEC Consult SA-20170804-1 :: Ubiquiti Networks UniFi Cloud Key authenticated command injection SEC Consult Vulnerability Lab

Sunday, 06 August

[SECURITY] [DSA 3925-1] qemu security update Moritz Muehlenhoff
[SECURITY] [DSA 3926-1] chromium-browser security update Michael Gilbert

Monday, 07 August

Re: [oss-security] [CVE-2017-7533] kernel: inotify: a race between inotify_handle_event() and sys_rename() Brad Spengler
[SECURITY] [DSA 3927-1] linux security update Salvatore Bonaccorso
DefenseCode ThunderScan SAST Advisory: WordPress Easy Modal Plugin Multiple Security Vulnerabilities DefenseCode

Thursday, 10 August

[slackware-security] mozilla-firefox (SSA:2017-221-02) Slackware Security Team
[slackware-security] curl (SSA:2017-221-01) Slackware Security Team
[SECURITY] [DSA 3929-1] libsoup2.4 security update Salvatore Bonaccorso
[SECURITY][ANNOUNCE] Apache Subversion 1.9.7 released Daniel Shahaf
[SECURITY] [DSA 3933-1] pjproject security update Moritz Muehlenhoff
[SECURITY] [DSA 3932-1] subversion security update Sebastien Delafond
[ANN] Apache Struts: S2-049 Security Bulletin update Lukasz Lenart
[security bulletin] HPESB3P03762 rev.1 - HPE C Switch Software using Cisco Prime Data Center Network Manager (DCNM), Remote Code Execution security-alert

Friday, 11 August

[SECURITY] [DSA 3935-1] postgresql-9.4 security update Moritz Muehlenhoff
[SECURITY] [DSA 3936-1] postgresql-9.6 security update Moritz Muehlenhoff

Monday, 14 August

[SECURITY] [DSA 3937-1] zabbix security update Moritz Muehlenhoff
[slackware-security] mercurial (SSA:2017-223-03) Slackware Security Team
[SECURITY] [DSA 3940-1] iortcw security update Moritz Muehlenhoff
[CVE-2017-9767] Quali CloudShell (v7.1.0.6508 Patch 6) Multiple Stored Cross Site Scripting Vulnerability x62x65x6e
CVE-2017-9802: Apache Sling XSS vulnerability Robert Munteanu
[SECURITY] [DSA 3943-1] gajim security update Salvatore Bonaccorso

Wednesday, 16 August

FreeBSD <= 10.3 jail SHM hole WhiteWinterWolf
Microsoft Resnet - DNS Configuration Web Vulnerability Vulnerability Lab
[SECURITY] [DSA 3928-2] firefox-esr security update Moritz Muehlenhoff

Friday, 18 August

[SECURITY] [DSA 3946-1] libmspack security update Sebastien Delafond

Monday, 21 August

[SECURITY] [DSA 3948-1] ioquake3 security update Moritz Muehlenhoff
[SECURITY] [DSA 3950-1] libraw security update Luciano Bello

Tuesday, 22 August

[RT-SA-2015-011] WebClientPrint Processor 2.0: No Validation of TLS Certificates RedTeam Pentesting GmbH
[RT-SA-2015-010] WebClientPrint Processor 2.0: Unauthorised Proxy Modification RedTeam Pentesting GmbH
[RT-SA-2015-009] WebClientPrint Processor 2.0: Remote Code Execution via Updates RedTeam Pentesting GmbH
[RT-SA-2015-008] WebClientPrint Processor 2.0: Remote Code Execution via Print Jobs RedTeam Pentesting GmbH
[SECURITY] [DSA 3951-1] smb4k security update Moritz Muehlenhoff

Thursday, 24 August

[SECURITY] [DSA 3953-1] aodh security update Luciano Bello
[security bulletin] HPESBHF03769 rev.1 - HPE Integrated Lights-out 4 (iLO 4) Multiple Remote Vulnerabilities security-alert
Trend Micro Hosted Email Security (HES) - Email Interception and Direct Object Reference Patrick Webster

Sunday, 27 August

[SECURITY] [DSA 3956-1] connman security update Luciano Bello

Monday, 28 August

[security bulletin] HPESBHF03770 rev.1 - HPE Comware 7 MSR Routers using PHP, Go, Apache Http Server, and Tomcat, Remote Arbitrary Code Execution HPE Product Security Response Team
[SECURITY] [DSA 3957-1] ffmpeg security update Luciano Bello

Thursday, 31 August

[security bulletin] HPESBGN03767 rev.1 - HPE Operations Orchestration, Remote Code Execution security-alert
[security bulletin] HPESBGN03765 rev.2 - HPE LoadRunner and HPE Performance Center, Remote Disclosure of Information security-alert