Bugtraq: by author

52 messages starting Nov 27 18 and ending Nov 11 18
Date index | Thread index | Author index


advisories

[CORE-2018-0011] - Cisco WebEx Meetings Elevation of Privilege Vulnerability advisories (Nov 27)

Alessandro Ghedini

[SECURITY] [DSA 4331-1] curl security update Alessandro Ghedini (Nov 04)

alphan yavaş

Disclose Vulnerability alphan yavaş (Nov 02)

apparitionsec

D-LINK Central WifiManager CWM-100 Trojan File SYSTEM Privilege Escalation CVE-2018-15515 apparitionsec (Nov 19)
D-LINK Central WifiManager CWM-100 Server Side Request Forgery CVE-2018-15517 apparitionsec (Nov 19)
D-LINK Central WifiManager CWM-100 FTP Server PORT Bounce Scan CVE-2018-15516 apparitionsec (Nov 19)

Asterisk Security Team

AST-2018-010: Remote crash vulnerability DNS SRV and NAPTR lookups Asterisk Security Team (Nov 15)
AST-2018-010: Asterisk Security Team (Nov 15)

cyber-psrt

[security bulletin] MFSBGN03830 rev.1 - Service Manager, unauthorized disclosure of information cyber-psrt (Nov 13)
[security bulletin] MFSBGN03823 rev.1 - Micro Focus Service Manager, unauthorized disclosure of data cyber-psrt (Nov 13)
[security bulletin] MFSBGN03829 rev.1 - Micro Focus Operation Bridge Containerized Suite, Remote Code Execution cyber-psrt (Nov 07)
[security bulletin] MFSBGN03831 rev. - Service Management Automation, remote disclosure of information cyber-psrt (Nov 13)

Florian Bogner

Remote Code Execution Vulnerability in ELBA5 Electronic Banking Florian Bogner (Nov 19)

FreeBSD Security Advisories

FreeBSD Security Advisory FreeBSD-SA-18:13.nfs FreeBSD Security Advisories (Nov 27)

Hakan Bayır

Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings. Hakan Bayır (Nov 05)

KoreLogic Disclosures

KL-001-2018-009 : Dell OpenManage Network Manager Multiple Vulnerabilities KoreLogic Disclosures (Nov 05)

Krzysztof Burghardt

Avahi 0.7 missing link-local checks in Legacy Unicast Responses cause information disclosure and makes DDoS with mDNS traffic reflection possible Krzysztof Burghardt (Nov 27)

Michael Catanzaro

WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0008 Michael Catanzaro (Nov 21)

Michael Gilbert

[SECURITY] [DSA 4330-1] chromium-browser security update Michael Gilbert (Nov 04)
[SECURITY] [DSA 4340-1] chromium-browser security update Michael Gilbert (Nov 19)

m.manulis

ACM CCS 2019 - Call for Papers m.manulis (Nov 19)

Moritz Muehlenhoff

[SECURITY] [DSA 4333-1] icecast2 security update Moritz Muehlenhoff (Nov 04)
[SECURITY] [DSA 4339-1] ceph security update Moritz Muehlenhoff (Nov 14)
[SECURITY] [DSA 4338-1] qemu security update Moritz Muehlenhoff (Nov 11)
[SECURITY] [DSA 4337-1] thunderbird security update Moritz Muehlenhoff (Nov 11)
[SECURITY] [DSA 4343-1] liblivemedia security update Moritz Muehlenhoff (Nov 26)
[SECURITY] [DSA 4334-1] mupdf security update Moritz Muehlenhoff (Nov 04)
[SECURITY] [DSA 4335-1] nginx security update Moritz Muehlenhoff (Nov 11)

Murat Aydemir

Zoho ManageEngine OpManager 12.3 before Build 123223 has XSS via the updateWidget API. Murat Aydemir (Nov 19)

Salvatore Bonaccorso

[SECURITY] [DSA 4344-1] roundcube security update Salvatore Bonaccorso (Nov 26)
[SECURITY] [DSA 4339-2] ceph regression update Salvatore Bonaccorso (Nov 21)
[SECURITY] [DSA 4336-1] ghostscript security update Salvatore Bonaccorso (Nov 11)
[SECURITY] [DSA 4345-1] samba security update Salvatore Bonaccorso (Nov 27)
[SECURITY] [DSA 4332-1] ruby2.3 security update Salvatore Bonaccorso (Nov 04)
[SECURITY] [DSA 4347-1] perl security update Salvatore Bonaccorso (Nov 29)
[SECURITY] [DSA 4341-1] mariadb-10.1 security update Salvatore Bonaccorso (Nov 19)
[SECURITY] [DSA 4346-1] ghostscript security update Salvatore Bonaccorso (Nov 27)

SEC Consult Vulnerability Lab

SEC Consult SA-20181121-0 :: Signature Bypass / Authentication Bypass in Governikus Autent SDK SEC Consult Vulnerability Lab (Nov 21)
SEC Consult SA-20181114-0 :: Denial of Service in Microsoft Skype for Business SEC Consult Vulnerability Lab (Nov 21)
SEC Consult SA-20181116-0 :: Multiple critical vulnerabilities in Miss Marple Enterprise Edition SEC Consult Vulnerability Lab (Nov 21)

Slackware Security Team

[slackware-security] libtiff (SSA:2018-316-01) Slackware Security Team (Nov 13)
[slackware-security] samba (SSA:2018-333-01) Slackware Security Team (Nov 29)
[slackware-security] mariadb (SSA:2018-309-01) Slackware Security Team (Nov 05)
[slackware-security] openssl (SSA:2018-325-01) Slackware Security Team (Nov 22)

Socket_0x03

WP User Manager v2.0.8 - Time-Based SQL Injection Socket_0x03 (Nov 11)
Cory Support v1.0 - Time-Based SQL Injection in Signin Socket_0x03 (Nov 22)
PeepSo v1.11.2 - Time-Based SQL Injection Socket_0x03 (Nov 11)
Custom Frontend Login Registration Form (WP Plugin) - Multiple XSS Vulnerabilities Socket_0x03 (Nov 14)
PeepSo v1.11.2 (WordPress Plugin) - XSS Vulnerability in Members Socket_0x03 (Nov 11)

Stefan Kanthak

Escalation of privilege with Intel Rapid Storage User Interface Stefan Kanthak (Nov 19)
[CVE-2018-3635] Executable installers are vulnerable^WEVIL (case 59): arbitrary code execution WITH escalation of privilege via Intel Rapid Storage Technology User Interface and Driver Stefan Kanthak (Nov 19)

VMware Security Response Center

NEW VMSA-2018-0027 VMware ESXi, Workstation, and Fusion updates address uninitialized stack memory usage VMware Security Response Center (Nov 11)