Bugtraq: by date

113 messages starting Jan 01 14 and ending Jan 31 14
Date index | Thread index | Author index

Wednesday, 01 January

[SECURITY] [DSA 2831-1] puppet security update Luciano Bello
[SECURITY] [DSA 2832-1] memcached security update Salvatore Bonaccorso
[SECURITY] [DSA 2833-1] openssl security update Moritz Muehlenhoff
CFP - IEEE Co-sponsored CyberSec2014 - Lebanon Section The Third International Conference on Cyber Security, Cyber Warfare, and Digital Forensic
[SECURITY] [DSA 2834-1] typo3-src security update Salvatore Bonaccorso
[CVE-2013-6480] Libcloud doesn't send scrub_data query parameter when destroying a DigitalOcean node Tomaz Muraus

Thursday, 02 January

Path Traversal in eduTrac High-Tech Bridge Security Research
[security bulletin] HPSBMU02895 SSRT101253 rev.1 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of Arbitrary Code security-alert

Monday, 06 January

[SECURITY] [DSA 2835-1] asterisk security update Moritz Muehlenhoff
[SECURITY] [DSA 2836-1] devscripts security update Raphael Geissert
Open-Xchange Security Advisory 2014-01-06 Martin Braun

Tuesday, 07 January

[HITB-Announce] HITB Magazine Issue 10 Out Now Hafez Kamal
AusCERT2014 Call for Presentations and Tutorials AusCERT
SPAMINA EMAIL FIREWALL 3.3.1.1 - Directory Traversal - sisco . barrera
[SECURITY] [DSA 2837-1] openssl security update Moritz Muehlenhoff

Wednesday, 08 January

[SECURITY] [DSA 2838-1] libxfont security update Moritz Muehlenhoff
Multiple Vulnerabilities in Horizon QCMS High-Tech Bridge Security Research
Improper Authentication in Burden High-Tech Bridge Security Research
[SECURITY] [DSA 2839-1] spice security update Salvatore Bonaccorso

Thursday, 09 January

nullcon Blackshield Awards 2014 nullcon

Friday, 10 January

[CVE-2013-7204] CSRF in Conceptronic IP Camera (CIPCAMPTIWL) Felipe Molina

Monday, 13 January

Updated [CVE-2014-0031] CloudStack ListNetworkACL API discloses ACLs for other users David Nalley
Updated [CVE-2013-6398] CloudStack Virtual Router stop/start modifies firewall rules allowing additional access David Nalley
[SECURITY] [DSA 2840-1] srtp security update Salvatore Bonaccorso
[CVE -2014-1201] Lorex security DVR ActiveX control buffer overflow Pedro Ribeiro
Cisco Security Advisory: Undocumented Test Interface in Cisco Small Business Devices Cisco Systems Product Security Incident Response Team
[SECURITY] [DSA 2841-1] movabletype-opensource security update Moritz Muehlenhoff
CISTI'2014: List of Workshops ML
NETGEAR WNR1000v3 Password Recovery Vulnerability c1ph04mail
[ MDVSA-2014:001 ] kernel security
[SECURITY] [DSA 2842-1] libspring-java security update Moritz Muehlenhoff

Tuesday, 14 January

[SECURITY] [DSA 2843-1] graphviz security update Salvatore Bonaccorso
[security bulletin] HPSBUX02960 SSRT101419 rev.1 - HP-UX Running NTP, Remote Denial of Service (DoS) security-alert
[CVE-2014-0647] Insecure Data Storage of User Data Elements in Starbucks v2.6.1 iOS mobile application Daniel Wood
[slackware-security] php (SSA:2014-013-03) Slackware Security Team
[slackware-security] samba (SSA:2014-013-04) Slackware Security Team
[slackware-security] libXfont (SSA:2014-013-01) Slackware Security Team

Wednesday, 15 January

CVE-2013-6430 Possible XSS when using Spring MVC Pivotal Security Team
FreeBSD Security Advisory FreeBSD-SA-14:03.openssl FreeBSD Security Advisories
FreeBSD Security Advisory FreeBSD-SA-14:04.bind FreeBSD Security Advisories
FreeBSD Security Advisory FreeBSD-SA-14:02.ntpd FreeBSD Security Advisories
[CVE-2014-1238] Cross Site Scripting(XSS) in q-pulse application ali . hussein
CVE-2013-6429 Fix for XML External Entity (XXE) injection (CVE-2013-4152) in Spring Framework was incomplete Pivotal Security Team
FreeBSD Security Advisory FreeBSD-SA-14:01.bsnmpd FreeBSD Security Advisories
[SECURITY] [DSA 2844-1] djvulibre security update Raphael Geissert
Online OWASP Security Challenges Ivan Buetler
[slackware-security] openssl (SSA:2014-013-02) Slackware Security Team
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Access Control System Cisco Systems Product Security Incident Response Team

Thursday, 16 January

CVE-2013-4200 - Plone URL redirection / Forwarding of cookie data (session hijack) in certain browsers Alexandre Herzog
[HITB-Announce] #HITB2014AMS Call for Papers - FINAL CALL Hafez Kamal
SQL Injection in Sexy Polling Joomla Extension High-Tech Bridge Security Research
[ MDVSA-2014:002 ] bind security
[ MDVSA-2014:003 ] nrpe security
[ MDVSA-2014:005 ] ejabberd security
[ MDVSA-2014:006 ] libxslt security
[ MDVSA-2014:004 ] nagios security

Friday, 17 January

[security bulletin] HPSBUX02961 SSRT101420 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) security-alert
Open-Xchange Security Advisory 2014-01-17 Martin Braun

Monday, 20 January

[ MDVSA-2014:007 ] openssl security
[ MDVSA-2014:008 ] openjpeg security
[ MDVSA-2014:010 ] memcached security
[ MDVSA-2014:009 ] librsvg security
[SECURITY] [DSA 2845-1] mysql-5.1 security update Moritz Muehlenhoff
Ammyy Admin - Hidden hard-coded option and Access Control vulnerability. bhadresh . k . patel
[SECURITY] [DSA 2831-2] puppet regression update Salvatore Bonaccorso
SI6 Networks' IPv6 Toolkit v1.5.2 released! Fernando Gont
[SECURITY] [DSA 2846-1] libvirt security update Moritz Muehlenhoff

Tuesday, 21 January

Secunia Research: OpenPNE PHP Object Injection Vulnerability Secunia Research
[ MDVSA-2014:011 ] java-1.7.0-openjdk security
[ MDVSA-2014:012 ] nss security
[SECURITY] [DSA 2847-1] drupal7 security update Salvatore Bonaccorso
[ MDVSA-2014:013 ] libxfont security

Wednesday, 22 January

[ MDVSA-2014:014 ] php security
[FFRRA-20131213] Crafted ICMP ECHO REQUEST can cause denial of service on Juniper SSG20 research-feedback
SEC Consult SA-20140122-0 :: Critical vulnerabilities in T-Mobile HOME NET Router LTE (Huawei B593u-12) SEC Consult Vulnerability Lab
[ MDVSA-2014:015 ] cups security
[ MDVSA-2014:016 ] spice security
[ MDVSA-2014:017 ] net-snmp security
[ MDVSA-2014:018 ] net-snmp security
[ MDVSA-2014:019 ] elinks security
Cisco Security Advisory: Cisco TelePresence Video Communication Server SIP Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Cisco TelePresence ISDN Gateway D-Channel Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Cisco TelePresence System Software Command Execution Vulnerability Cisco Systems Product Security Incident Response Team
[ MDVSA-2014:020 ] x11-server security

Thursday, 23 January

CISTI'2014: CFP - Doctoral Symposium ML
CONFidence 2014- Call for Papers Andrzej Targosz
APPLE-SA-2014-01-22-1 iTunes 11.1.4 Apple Product Security
Reflected cross-site scripting (XSS) vulnerability in Mediatrix Web Management Interface login page tudor . enache
SQL Injection in JV Comment Joomla Extension High-Tech Bridge Security Research
Cross-Site Scripting (XSS) in Komento Joomla Extension High-Tech Bridge Security Research

Friday, 24 January

[SECURITY] [DSA 2848-1] mysql-5.5 security update Salvatore Bonaccorso
[CVE-2014-1607.] Cross Site Scripting(XSS) in Drupal Event calendar module ali . hussein
[CVE-2013-6235] - Multiple Reflected XSS vulnerabilities in JAMon v2.7 Christian Catalano
[SECURITY] [DSA 2826-2] denyhosts regression update Yves-Alexis Perez
[CVE-2014-1664] GoToMeeting Information Disclosure via Logging Output (Android) cjlacayo
[CTF] nullcon HackIM 2014 will start at 24-01-2014, when the clock will strike at 11:59 (+5:30 GMT) nullcon
Security Vulnerabilities in Apache Cordova / PhoneGap mgeorgiev

Monday, 27 January

[ MDVSA-2014:022 ] augeas security
[ MDVSA-2014:021 ] perl-Proc-Daemon security
[ MDVSA-2014:023 ] hplip security
[ MDVSA-2014:024 ] graphviz security

Tuesday, 28 January

Multiple Vulnerabilities in Eventum High-Tech Bridge Security Research
DC4420 - London DEFCON - January meet - Tuesday 28th January 2014 Major Malfunction
Mozilla Bug Bounty #5 - WireTap Remote Web Vulnerability Vulnerability Lab

Wednesday, 29 January

Vulnerabilities within Mura CMS / Sitecore MCS / SmarterMail Mark Litchfield
[slackware-security] mozilla-nss (SSA:2014-028-02) Slackware Security Team
SiteCore XML Control Script Insertion Mark Litchfield

Thursday, 30 January

[slackware-security] bind (SSA:2014-028-01) Slackware Security Team
SimplyShare v1.4 iOS - Multiple Web Vulnerabilities Vulnerability Lab
Ektron CMS Take Over - Hijacking Accounts Mark Litchfield

Friday, 31 January

Joomla! JomSocial component < 3.1.0.1 - Remote code execution Matias Fontanini
[SECURITY] [DSA 2849-1] curl security update Florian Weimer
[SE-2013-01] Security vulnerabilities in Oracle Java Cloud Service Security Explorations

Previous period

Next period