Bugtraq: by date

59 messages starting Feb 01 17 and ending Feb 28 17
Date index | Thread index | Author index


Wednesday, 01 February

[SECURITY] [DSA 3779-1] wordpress security update Sebastien Delafond
ESA-2017-003: EMC Network Configuration Manager (NCM) Multiple Vulnerabilities EMC Product Security Response Center
Cisco Security Advisory: Cisco Prime Home Authentication Bypass Vulnerability Cisco Systems Product Security Incident Response Team
[security bulletin] HPSBST03588 rev 1. - HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS, Remote Arbitrary Command Execution security-alert
Ghostscript 9.20 Filename Command Execution hyp3rlinx

Thursday, 02 February

[FOXMOLE SA 2016-07-05] ZoneMinder - Multiple Issues FOXMOLE Advisories

Sunday, 05 February

ZoneMinder - multiple vulnerabilities john
[SECURITY] [DSA 3781-1] svgsalamander security update Moritz Muehlenhoff

Monday, 06 February

Teleopti WFM <= 7.1.0 Multiple Vulnerabilities Graph-X
[security bulletin] HPESBUX03699 SSRT110304 rev.1 - HP-UX BIND, Multiple Remote Denial of Service (DoS) HPE Product Security Response Team

Tuesday, 07 February

SEC Consult SA-20170207 :: Path Traversal, Backdoor accounts & KNX group address password bypass in JUNG Smart Visu server SEC Consult Vulnerability Lab
ESA-2017-001: EMC Isilon InsightIQ Authentication Bypass Vulnerability EMC Product Security Response Center

Monday, 13 February

Cisco Security Advisory: Cisco AnyConnect Secure Mobility Client for Windows SBL Privileges Escalation Vulnerability Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Cisco ASA Clientless SSL VPN CIFS Heap Overflow Vulnerability Cisco Systems Product Security Incident Response Team
Authentication bypass vulnerability in Western Digital My Cloud Securify B.V.
[SECURITY] [DSA 3782-1] openjdk-7 security update Moritz Muehlenhoff
TP-Link C2 and C20i vulnerable to command injection (authenticated root RCE), DoS, improper firewall rules Pierre Kim
[SECURITY] [DSA 3783-1] php5 security update Luciano Bello
[SECURITY] [DSA 3784-1] viewvc security update Sebastien Delafond
[security bulletin] HPESBNS03702 rev.1 - HPE NonStop OSS Core Utilities with Bash Shell, Local Arbitrary Command Execution, Elevation of Privilege security-alert
WebKitGTK+ Security Advisory WSA-2017-0002 Carlos Alberto Lopez Perez
[security bulletin] HPESBHF03704 rev.1 - HPE OfficeConnect Network Switches, Local Unauthorized Data Modification security-alert
[slackware-security] openssl (SSA:2017-041-02) Slackware Security Team
[slackware-security] php (SSA:2017-041-03) Slackware Security Team
[slackware-security] tcpdump (SSA:2017-041-04) Slackware Security Team
[security bulletin] HPSBMU03692 rev.1 - HPE Matrix Operating Environment, Multiple Remote Vulnerabilities security-alert
[security bulletin] HPESBGN03698 rev.1 - HPE DDMi using OpenSSL, Remote Arbitrary Code Execution, Bypass Security Restrictions, Denial of Service (DoS) security-alert

Tuesday, 14 February

[SECURITY] [DSA 3786-1] vim security update Moritz Muehlenhoff
[SECURITY] [DSA 3787-1] tomcat7 security update Moritz Muehlenhoff
[SECURITY] [DSA 3788-1] tomcat8 security update Moritz Muehlenhoff
[security bulletin] HPSBMU03691 rev.1 - HPE Insight Control, Multiple Remote Vulnerabilities security-alert
[security bulletin] HPESBGN03697 rev.1 - HPE Business Service Management (BSM), Remote Disclosure of Information security-alert
Cisco Security Response: Cisco Smart Install Protocol Misuse Cisco Systems Product Security Incident Response Team
[security bulletin] HPESBHF03703 rev.1 - HPE Network Products including Comware v7 and VCX using OpenSSL, Remote Unauthorized Disclosure of Information security-alert

Wednesday, 15 February

CVE-2017-5586: Remote code execution in OpenText Documentum D2 Andrey B. Panfilov
Advisory X41-2017-002: Multiple Vulnerabilities in ytnef X41 D-Sec GmbH Advisories
CVE-2017-5585: SQL injection in OpenText Documentum Content Server 7.3 (PostgreSQL builds only) Andrey B. Panfilov
Cisco Security Advisory: Cisco UCS Director Privilege Escalation Vulnerability Cisco Systems Product Security Incident Response Team
KL-001-2017-001 : Trendmicro InterScan Arbitrary File Write KoreLogic Disclosures
KL-001-2017-003 : Trendmicro InterScan Remote Root Access Vulnerability KoreLogic Disclosures

Thursday, 16 February

[SYSS-2017-001] Simplessus Files: SQL Injection adrian . vollmer
[SYSS-2017-004] Simplessus Files: Path Traversal adrian . vollmer
[SECURITY] [DSA 3790-1] spice security update Salvatore Bonaccorso

Monday, 20 February

PDFMate PDF Converter Pro 1.7.5.0 - Buffer Overflow Vulnerability Vulnerability Lab

Tuesday, 21 February

APPLE-SA-2017-02-21-2 Logic Pro X 10.3.1 Apple Product Security
[security bulletin] HPESBHF03709 rev.1 - HPE Network products including Comware, IMC, and VCX running OpenSSL, Remote Denial of Service (DoS), Disclosure of Sensitive Information security-alert

Wednesday, 22 February

[SECURITY] [DSA 3788-2] tomcat8 regression update Salvatore Bonaccorso
[SECURITY] [DSA 3791-1] linux security update Salvatore Bonaccorso
FreeBSD Security Advisory FreeBSD-SA-17:02.openssl FreeBSD Security Advisories

Thursday, 23 February

Air Transfer 1.2.1 & 1.0.14 - Multiple XSS Web Vulnerabilities Vulnerability Lab
Advisory X41-2017-004: Multiple Vulnerabilities in tnef X41 D-Sec GmbH Advisories
[SECURITY] [DSA 3792-1] libreoffice security update Moritz Muehlenhoff

Monday, 27 February

[SECURITY] [DSA 3795-1] bind9 security update Michael Gilbert

Tuesday, 28 February

Advisory X41-2017-001: Multiple Vulnerabilities in X.org X41 D-Sec GmbH Advisories
Multiple persistent Cross-Site Scripting vulnerabilities in osTicket Securify B.V.
Analytics Stats Counter Statistics WordPress Plugin unauthenticated PHP Object injection vulnerability Summer of Pwnage
Admin Custom Login WordPress plugin affected by persistent Cross-Site Scripting via Logo URL field Summer of Pwnage
Admin Custom Login WordPress plugin custom login page affected by persistent Cross-Site Scripting Summer of Pwnage
Cross-Site Request Forgery in File Manager WordPress plugin Summer of Pwnage