Bugtraq: by thread
RSS Feed
About List
All Lists
Previous period
85 messages
starting Jul 02 18 and
ending Jul 31 18
Date index |
Thread index |
Author index
- [CVE-2018-8036] DoS (OOM) Vulnerability in Apache PDFBox's AFMParser Andreas Lehmkuehler (Jul 02)
- <Possible follow-ups>
- [CVE-2018-8036] DoS (OOM) Vulnerability in Apache PDFBox's AFMParser Andreas Lehmkuehler (Jul 02)
- [SECURITY] [DSA 4237-1] chromium-browser security update Michael Gilbert (Jul 02)
- [SECURITY] [DSA 4238-1] exiv2 security update Moritz Muehlenhoff (Jul 03)
- [SECURITY] [DSA 4239-1] gosa security update Moritz Muehlenhoff (Jul 03)
- [CVE-2018-3667, CVE-2018-3668] Escalation of priviilege via executable installer of Intel Processor Diagnostic Tool Stefan Kanthak (Jul 04)
- SEC Consult SA-20180704-0 :: Local root jailbreak via network file sharing flaw in all ADB Broadband Gateways / Routers SEC Consult Vulnerability Lab (Jul 04)
- SEC Consult SA-20180704-1 :: Authorization Bypass in all ADB Broadband Gateways / Routers SEC Consult Vulnerability Lab (Jul 04)
- SEC Consult SA-20180704-2 :: Privilege escalation via linux group manipulation in all ADB Broadband Gateways / Routers SEC Consult Vulnerability Lab (Jul 04)
- [SECURITY] [DSA 4240-1] php7.0 security update Moritz Muehlenhoff (Jul 05)
- APPLE-SA-2018-7-05-1 Wi-Fi Update for Boot Camp 6.4.0 Apple Product Security (Jul 05)
- [SECURITY] [DSA 4241-1] libsoup2.4 security update Moritz Muehlenhoff (Jul 05)
- [slackware-security] mozilla-thunderbird (SSA:2018-186-01) Slackware Security Team (Jul 05)
- [SECURITY] [DSA 4242-1] ruby-sprockets security update Salvatore Bonaccorso (Jul 10)
- APPLE-SA-2018-7-9-1 iOS 11.4.1 Apple Product Security (Jul 10)
- APPLE-SA-2018-7-9-4 macOS High Sierra 10.13.6, Security Update 2018-004 Sierra, Security Update 2018-004 El Capitan Apple Product Security (Jul 10)
- APPLE-SA-2018-7-9-5 Safari 11.1.2 Apple Product Security (Jul 10)
- APPLE-SA-2018-7-9-3 tvOS 11.4.1 Apple Product Security (Jul 10)
- APPLE-SA-2018-7-9-6 iCloud for Windows 7.6 Apple Product Security (Jul 10)
- APPLE-SA-2018-7-9-2 watchOS 4.3.2 Apple Product Security (Jul 10)
- APPLE-SA-2018-7-9-7 iTunes 12.8 for Windows Apple Product Security (Jul 10)
- [slackware-security] mozilla-thunderbird (SSA:2018-191-01) Slackware Security Team (Jul 11)
- SEC Consult SA-20180711-0 :: Remote code execution via multiple attack vectors in WAGO e!DISPLAY 7300T SEC Consult Vulnerability Lab (Jul 11)
- Secutech DSL WR RIS 330 - Filter Bypass Vulnerability Vulnerability Lab (Jul 11)
- Intel System CU - Buffer Overflow (Denial of Service) Vulnerability Vulnerability Lab (Jul 11)
- ASUS WRT-AC66U 3.x - Cross Site Scripting Vulnerability Vulnerability Lab (Jul 11)
- Barracuda ADC 5.x - Filter Bypass & Persistent Validation Vulnerability Vulnerability Lab (Jul 11)
- Barracuda ADC 5.x - Client Side Cross Site Scripting Vulnerability Vulnerability Lab (Jul 11)
- AT&T Bizcircle - Persistent Profile Cross Site Scripting Vulnerabilities Vulnerability Lab (Jul 11)
- [SECURITY] [DSA 4243-1] cups security update Luciano Bello (Jul 11)
- [CORE-2018-0006] - QNAP Qcenter Virtual Appliance Multiple Vulnerabilities Core Security Advisories Team (Jul 12)
- [slackware-security] bind (SSA:2018-192-01) Slackware Security Team (Jul 12)
- [slackware-security] curl (SSA:2018-192-02) Slackware Security Team (Jul 12)
- Lenovo SU v5.07 - Buffer Overflow & Arbitrary Code Execution Vulnerability Vulnerability Lab (Jul 12)
- Barracuda ADC v5.x - Multiple Persistent Vulnerabilities Vulnerability Lab (Jul 12)
- [security bulletin] MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities cyber-psrt (Jul 12)
- SEC Consult SA-20180712-0 :: Remote Code Execution & Local File Disclosure in Zeta Producer Desktop CMS SEC Consult Vulnerability Lab (Jul 13)
- Secunia Research: Clam AntiVirus "parsehwp3_paragraph()" Denial of Service Vulnerability Secunia Research (Jul 13)
- Huawei eNSP v1 - Buffer Overflow (DoS) Vulnerability Vulnerability Lab (Jul 16)
- [SECURITY] [DSA 4244-1] thunderbird security update Moritz Muehlenhoff (Jul 16)
- [SECURITY] [DSA 4245-1] imagemagick security update Moritz Muehlenhoff (Jul 16)
- [SECURITY] [DSA 4246-1] mailman security update Salvatore Bonaccorso (Jul 16)
- [SECURITY] [DSA 4247-1] ruby-rack-protection security update Moritz Muehlenhoff (Jul 17)
- Defense in depth -- the Microsoft way (part 55): new software built with 5.5 year old tool shows 20+ year old vulnerabilities Stefan Kanthak (Jul 17)
- [CVE-2018-1000211] Public apps can't revoke OAuth access & refresh tokens in Doorkeeper Justin Bull (Jul 17)
- [slackware-security] mutt (SSA:2018-198-01) Slackware Security Team (Jul 17)
- [SECURITY] [DSA 4249-1] ffmpeg security update Moritz Muehlenhoff (Jul 17)
- [SECURITY] [DSA 4248-1] blender security update Moritz Muehlenhoff (Jul 17)
- [SECURITY] [DSA 4250-1] wordpress security update Sebastien Delafond (Jul 18)
- Defense in depth -- the Microsoft way (part 56): 10+ year old security update installers are susceptiblle to 20+ year old vulnerability Stefan Kanthak (Jul 19)
- Barracuda Cloud Control v3.020 - CS Cross Site Vulnerability Vulnerability Lab (Jul 19)
- GhostMail - (Status Message) Persistent Web Vulnerability Vulnerability Lab (Jul 19)
- Binance v1.5.0 - Insecure File Permission Vulnerability Vulnerability Lab (Jul 19)
- [SECURITY] [DSA 4251-1] vlc security update Moritz Muehlenhoff (Jul 19)
- GhostMail - (filename to link) POST Inject Web Vulnerability Vulnerability Lab (Jul 19)
- [SECURITY] [DSA 4252-1] znc security update Moritz Muehlenhoff (Jul 19)
- [slackware-security] httpd (SSA:2018-199-01) Slackware Security Team (Jul 19)
- Adobe Systems - Arbitrary Code Injection Vulnerability Vulnerability Lab (Jul 20)
- Secunia Research: LibRaw Multiple Denial of Service Vulnerabilities Secunia Research (Jul 20)
- Secunia Research: LibRaw "parse_minolta()" Infinite Loop Denial of Service Vulnerability Secunia Research (Jul 20)
- Secunia Research: Oracle Outside In Technology Multiple Vulnerabilities Secunia Research (Jul 20)
- <Possible follow-ups>
- Secunia Research: Oracle Outside In Technology Multiple Vulnerabilities Secunia Research (Jul 20)
- [slackware-security] php (SSA:2018-201-01) Slackware Security Team (Jul 23)
- Sourcetree - Remote Code Execution vulnerabilities - CVE-2018-11235 Anton Black (Jul 23)
- APPLE-SA-2018-7-23-1 Additional information for APPLE-SA-2018-7-9-4 macOS High Sierra 10.13.6, Security Update 2018-004 Sierra, Security Update 2018-004 El Capitan Apple Product Security (Jul 23)
- APPLE-SA-2018-7-23-2 Additional information for APPLE-SA-2018-06-01-1 macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan Apple Product Security (Jul 23)
- APPLE-SA-2018-7-23-5 Additional information for APPLE-SA-2018-06-01-5 watchOS 4.3.1 Apple Product Security (Jul 23)
- APPLE-SA-2018-7-23-4 Additional information for APPLE-SA-2018-06-01-6 tvOS 11.4 Apple Product Security (Jul 23)
- APPLE-SA-2018-7-23-3 Additional information for APPLE-SA-2018-06-01-4 iOS 11.4 Apple Product Security (Jul 23)
- [SECURITY] [DSA 4253-1] network-manager-vpnc security update Salvatore Bonaccorso (Jul 23)
- FINAL CALL FOR PAPERS - INTEL SECURITY CONFERENCE (iSecCon) 2018 Branco, Rodrigo (Jul 23)
- [SECURITY] [DSA 4254-1] slurm-llnl security update Salvatore Bonaccorso (Jul 25)
- DefenseCode ThunderScan SAST Advisory: WordPress Snazzy Maps Plugin Multiple XSS Security Vulnerabilities Defense Code (Jul 25)
- [SECURITY] [DSA 4255-1] ant security update Salvatore Bonaccorso (Jul 25)
- DefenseCode ThunderScan SAST Advisory: WordPress Gwolle Guestbook Plugin XSS Security Vulnerability Defense Code (Jul 25)
- DefenseCode ThunderScan SAST Advisory: WordPress Strong Testimonials Plugin Multiple XSS Security Vulnerabilities Defense Code (Jul 25)
- [CORE-2018-0009] - SoftNAS Cloud OS Command Injection Core Security Advisories Team (Jul 26)
- [SECURITY] [DSA 4256-1] chromium-browser security update Michael Gilbert (Jul 26)
- [slackware-security] Slackware 14.2 kernel (SSA:2018-208-01) Slackware Security Team (Jul 30)
- [SECURITY] [DSA 4257-1] fuse security update Salvatore Bonaccorso (Jul 30)
- secuvera-SA-2018-03: Command Injection, Broken Access Control and Evil-Twin-Attack in Microsoft Wireless Display Adapter V2 - CVE-2018-8306 Tobias Glemser (Jul 30)
- [SECURITY] [DSA 4258-1] ffmpeg security update Moritz Muehlenhoff (Jul 30)
- [slackware-security] file (SSA:2018-212-01) Slackware Security Team (Jul 31)
- [slackware-security] seamonkey (SSA:2018-212-02) Slackware Security Team (Jul 31)
- [SECURITY] [DSA 4259-1] ruby2.3 security update Moritz Muehlenhoff (Jul 31)