Bugtraq: by date

52 messages starting Nov 02 18 and ending Nov 29 18
Date index | Thread index | Author index


Friday, 02 November

Disclose Vulnerability alphan yavaş

Sunday, 04 November

[SECURITY] [DSA 4330-1] chromium-browser security update Michael Gilbert
[SECURITY] [DSA 4331-1] curl security update Alessandro Ghedini
[SECURITY] [DSA 4332-1] ruby2.3 security update Salvatore Bonaccorso
[SECURITY] [DSA 4334-1] mupdf security update Moritz Muehlenhoff
[SECURITY] [DSA 4333-1] icecast2 security update Moritz Muehlenhoff

Monday, 05 November

Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings. Hakan Bayır
KL-001-2018-009 : Dell OpenManage Network Manager Multiple Vulnerabilities KoreLogic Disclosures
[slackware-security] mariadb (SSA:2018-309-01) Slackware Security Team

Wednesday, 07 November

[security bulletin] MFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code Execution cyber-psrt

Sunday, 11 November

[SECURITY] [DSA 4335-1] nginx security update Moritz Muehlenhoff
WP User Manager v2.0.8 - Time-Based SQL Injection Socket_0x03
NEW VMSA-2018-0027 VMware ESXi, Workstation, and Fusion updates address uninitialized stack memory usage VMware Security Response Center
PeepSo v1.11.2 - Time-Based SQL Injection Socket_0x03
PeepSo v1.11.2 (WordPress Plugin) - XSS Vulnerability in Members Socket_0x03
[SECURITY] [DSA 4336-1] ghostscript security update Salvatore Bonaccorso
[SECURITY] [DSA 4337-1] thunderbird security update Moritz Muehlenhoff
[SECURITY] [DSA 4338-1] qemu security update Moritz Muehlenhoff

Tuesday, 13 November

[slackware-security] libtiff (SSA:2018-316-01) Slackware Security Team
[security bulletin] MFSBGN03823 rev.1 - Micro Focus Service Manager, unauthorized disclosure of data cyber-psrt
[security bulletin] MFSBGN03830 rev.1 - Service Manager, unauthorized disclosure of information cyber-psrt
[security bulletin] MFSBGN03831 rev. - Service Management Automation, remote disclosure of information cyber-psrt

Wednesday, 14 November

[SECURITY] [DSA 4339-1] ceph security update Moritz Muehlenhoff
Custom Frontend Login Registration Form (WP Plugin) - Multiple XSS Vulnerabilities Socket_0x03

Thursday, 15 November

AST-2018-010: Asterisk Security Team
AST-2018-010: Remote crash vulnerability DNS SRV and NAPTR lookups Asterisk Security Team

Monday, 19 November

Remote Code Execution Vulnerability in ELBA5 Electronic Banking Florian Bogner
[CVE-2018-3635] Executable installers are vulnerable^WEVIL (case 59): arbitrary code execution WITH escalation of privilege via Intel Rapid Storage Technology User Interface and Driver Stefan Kanthak
D-LINK Central WifiManager CWM-100 FTP Server PORT Bounce Scan CVE-2018-15516 apparitionsec
D-LINK Central WifiManager CWM-100 Trojan File SYSTEM Privilege Escalation CVE-2018-15515 apparitionsec
D-LINK Central WifiManager CWM-100 Server Side Request Forgery CVE-2018-15517 apparitionsec
[SECURITY] [DSA 4340-1] chromium-browser security update Michael Gilbert
Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API. Murat Aydemir
Escalation of privilege with Intel Rapid Storage User Interface Stefan Kanthak
[SECURITY] [DSA 4341-1] mariadb-10.1 security update Salvatore Bonaccorso
ACM CCS 2019 - Call for Papers m.manulis

Wednesday, 21 November

SEC Consult SA-20181114-0 :: Denial of Service in Microsoft Skype for Business SEC Consult Vulnerability Lab
SEC Consult SA-20181116-0 :: Multiple critical vulnerabilities in Miss Marple Enterprise Edition SEC Consult Vulnerability Lab
SEC Consult SA-20181121-0 :: Signature Bypass / Authentication Bypass in Governikus Autent SDK SEC Consult Vulnerability Lab
[SECURITY] [DSA 4339-2] ceph regression update Salvatore Bonaccorso
WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0008 Michael Catanzaro

Thursday, 22 November

[slackware-security] openssl (SSA:2018-325-01) Slackware Security Team
Cory Support v1.0 - Time-Based SQL Injection in Signin Socket_0x03

Monday, 26 November

[SECURITY] [DSA 4343-1] liblivemedia security update Moritz Muehlenhoff
[SECURITY] [DSA 4344-1] roundcube security update Salvatore Bonaccorso

Tuesday, 27 November

[SECURITY] [DSA 4345-1] samba security update Salvatore Bonaccorso
Avahi 0.7 missing link-local checks in Legacy Unicast Responses cause information disclosure and makes DDoS with mDNS traffic reflection possible Krzysztof Burghardt
[CORE-2018-0011] - Cisco WebEx Meetings Elevation of Privilege Vulnerability advisories
FreeBSD Security Advisory FreeBSD-SA-18:13.nfs FreeBSD Security Advisories
[SECURITY] [DSA 4346-1] ghostscript security update Salvatore Bonaccorso

Thursday, 29 November

[slackware-security] samba (SSA:2018-333-01) Slackware Security Team
[SECURITY] [DSA 4347-1] perl security update Salvatore Bonaccorso