bugtraq

Re: [SECURITY] [DSA 4628-1] php7.0 security update

Sun, 17 Jan 2021 01:35:11 GMT

2021/01/17 -- Timesportsall

Re: BugTraq Shutdown

Sun, 17 Jan 2021 01:31:39 GMT

2021/01/17 -- tommypickle

On Second Thought...

Sun, 17 Jan 2021 01:27:54 GMT

2021/01/17 -- alias

BugTraq Shutdown

Fri, 15 Jan 2021 19:10:22 GMT

2021/01/15 -- alias

Defense in depth -- the Microsoft way (part 62): Windows shipped with end-of-life components

Tue, 25 Feb 2020 10:04:45 GMT

2020/02/25 -- Stefan Kanthak

Local information disclosure in OpenSMTPD (CVE-2020-8793)

Tue, 25 Feb 2020 10:03:47 GMT

2020/02/25 -- Qualys Security Advisory

LPE and RCE in OpenSMTPD's default install (CVE-2020-8794)

Tue, 25 Feb 2020 09:58:45 GMT

2020/02/25 -- Qualys Security Advisory

[SECURITY] [DSA 4633-1] curl security update

Tue, 25 Feb 2020 09:53:32 GMT

2020/02/25 -- Alessandro Ghedini

Cisco Unified Contact Center Express Privilege Escalation Vulnerability (CVE-2019-1888)

Tue, 25 Feb 2020 09:48:46 GMT

2020/02/25 -- Jamie R

[TZO-22-2020] Qihoo360 | GDATA | Rising | Command Generic Malformed Archive Bypass

Mon, 24 Feb 2020 15:55:02 GMT

2020/02/24 -- Thierry Zoller

[TZO-16-2020] - F-SECURE Generic Malformed Container bypass (GZIP)

Mon, 24 Feb 2020 09:58:40 GMT

2020/02/24 -- Thierry Zoller

[slackware-security] proftpd (SSA:2020-051-01)

Fri, 21 Feb 2020 06:20:14 GMT

2020/02/21 -- Slackware Security Team

[SECURITY] [DSA 4628-1] php7.0 security update

Wed, 19 Feb 2020 13:57:10 GMT

2020/02/19 -- Moritz Muehlenhoff

[SECURITY] [DSA 4629-1] python-django security update

Wed, 19 Feb 2020 13:53:08 GMT

2020/02/19 -- Sebastien Delafond

[TZO-18-2020] - Bitdefender Malformed Archive bypass (GZIP)

Tue, 18 Feb 2020 16:20:13 GMT

2020/02/18 -- Thierry Zoller

[TZO-17-2020] - Kaspersky Generic Archive Bypass (ZIP FLNMLEN)

Tue, 18 Feb 2020 08:06:13 GMT

2020/02/18 -- Thierry Zoller

[SECURITY] [DSA 4626-1] php7.3 security update

Tue, 18 Feb 2020 08:01:13 GMT

2020/02/18 -- Moritz Muehlenhoff

[SECURITY] [DSA 4627-1] webkit2gtk security update

Tue, 18 Feb 2020 07:57:14 GMT

2020/02/18 -- Moritz Muehlenhoff

[SECURITY] [DSA 4620-1] firefox-esr security update

Mon, 17 Feb 2020 04:50:50 GMT

2020/02/17 -- Moritz Muehlenhoff

Web Application Firewall bypass via Bluecoat device

Mon, 17 Feb 2020 04:48:50 GMT

2020/02/17 -- RedTimmy Security

[SECURITY] [DSA 4621-1] openjdk-8 security update

Mon, 17 Feb 2020 04:45:50 GMT

2020/02/17 -- Moritz Muehlenhoff

[slackware-security] libarchive (SSA:2020-043-01)

Mon, 17 Feb 2020 04:45:50 GMT

2020/02/17 -- Slackware Security Team

[TZO-15-2020] - F-SECURE Generic Malformed Container bypass (RAR)

Mon, 17 Feb 2020 04:43:08 GMT

2020/02/17 -- Thierry Zoller

WebKitGTK and WPE WebKit Security Advisory WSA-2020-0002

Mon, 17 Feb 2020 04:41:09 GMT

2020/02/17 -- Carlos Alberto Lopez Perez

CVE-2020-0728: Windows Modules Installer Service Information Disclosure Vulnerability

Mon, 17 Feb 2020 04:35:51 GMT

2020/02/17 -- Imre Rad

[SECURITY] [DSA 4624-1] evince security update

Mon, 17 Feb 2020 04:31:08 GMT

2020/02/17 -- Salvatore Bonaccorso

[SECURITY] [DSA 4625-1] thunderbird security update

Mon, 17 Feb 2020 04:26:08 GMT

2020/02/17 -- Moritz Muehlenhoff

[TZO-13-2020] - AVIRA Generic AV Bypass (ZIP GPFLAG)

Fri, 14 Feb 2020 11:58:27 GMT

2020/02/14 -- Thierry Zoller

[TZO-11-2020] - ESET Generic Malformed Archive Bypass (BZ2 Checksum)

Fri, 14 Feb 2020 11:58:13 GMT

2020/02/14 -- Thierry Zoller

[SECURITY] [DSA 4623-1] postgresql-11 security update

Fri, 14 Feb 2020 11:53:28 GMT

2020/02/14 -- Moritz Muehlenhoff

[EnumJavaLibs]_ Remote Java classpath enumerator

Fri, 14 Feb 2020 11:52:28 GMT

2020/02/14 -- RedTimmy Security

[slackware-security] mozilla-firefox (SSA:2020-042-01)

Fri, 14 Feb 2020 11:47:28 GMT

2020/02/14 -- Slackware Security Team

[SECURITY] [DSA 4622-1] postgresql-9.6 security update

Fri, 14 Feb 2020 11:44:12 GMT

2020/02/14 -- Moritz Muehlenhoff

[slackware-security] mozilla-thunderbird (SSA:2020-042-02)

Fri, 14 Feb 2020 11:39:27 GMT

2020/02/14 -- Slackware Security Team

[SECURITY] [DSA 4618-1] libexif security update

Mon, 10 Feb 2020 17:01:59 GMT

2020/02/10 -- Salvatore Bonaccorso

[SECURITY] [DSA 4619-1] libxmlrpc3-java security update

Mon, 10 Feb 2020 16:57:56 GMT

2020/02/10 -- Salvatore Bonaccorso

xglance-bin exploit (CVE-2014-2630)

Mon, 10 Feb 2020 16:53:57 GMT

2020/02/10 -- redazione

[SECURITY] [DSA 4617-1] qtbase-opensource-src security update

Tue, 04 Feb 2020 11:01:56 GMT

2020/02/04 -- Moritz Muehlenhoff

[SECURITY] [DSA 4612-1] prosody-modules security update

Mon, 03 Feb 2020 09:35:21 GMT

2020/02/03 -- Moritz Muehlenhoff

[slackware-security] sudo (SSA:2020-031-01)

Mon, 03 Feb 2020 09:31:36 GMT

2020/02/03 -- Slackware Security Team

[SECURITY] [DSA 4613-1] libidn2 security update

Mon, 03 Feb 2020 09:28:22 GMT

2020/02/03 -- Salvatore Bonaccorso

[SECURITY] [DSA 4614-1] sudo security update

Mon, 03 Feb 2020 09:25:36 GMT

2020/02/03 -- Salvatore Bonaccorso

[SECURITY] [DSA 4615-1] spamassassin security update

Mon, 03 Feb 2020 09:21:19 GMT

2020/02/03 -- Salvatore Bonaccorso

[SECURITY] [DSA 4616-1] qemu security update

Mon, 03 Feb 2020 09:17:35 GMT

2020/02/03 -- Moritz Muehlenhoff

Executable installers are vulnerable^WEVIL (case 58): Intel® Processor Identification Utility - Windows* Version - arbitrary code execution with escalation of privilege

Fri, 31 Jan 2020 10:07:42 GMT

2020/01/31 -- Stefan Kanthak

[CVE-2019-20358] CVE-2019-9491 in Trend Micro Anti-Threat Toolkit (ATTK) was NOT properly FIXED

Thu, 30 Jan 2020 13:11:44 GMT

2020/01/30 -- Stefan Kanthak

[SECURITY] [DSA 4610-1] webkit2gtk security update

Thu, 30 Jan 2020 07:18:23 GMT

2020/01/30 -- Moritz Muehlenhoff

APPLE-SA-2020-1-29-1 iCloud for Windows 7.17

Thu, 30 Jan 2020 07:14:14 GMT

2020/01/30 -- Apple Product Security

APPLE-SA-2020-1-29-2 iCloud for Windows 10.9.2

Thu, 30 Jan 2020 07:09:23 GMT

2020/01/30 -- Apple Product Security

[SECURITY] [DSA 4611-1] opensmtpd security update

Thu, 30 Jan 2020 07:06:13 GMT

2020/01/30 -- Moritz Muehlenhoff

FreeBSD Security Advisory FreeBSD-SA-20:02.ipsec

Wed, 29 Jan 2020 09:58:09 GMT

2020/01/29 -- FreeBSD Security Advisories

FreeBSD Security Advisory FreeBSD-SA-20:01.libfetch

Wed, 29 Jan 2020 09:53:10 GMT

2020/01/29 -- FreeBSD Security Advisories

APPLE-SA-2020-1-28-3 watchOS 6.1.2

Wed, 29 Jan 2020 09:51:59 GMT

2020/01/29 -- Apple Product Security

APPLE-SA-2020-1-28-1 iOS 13.3.1 and iPadOS 13.3.1

Wed, 29 Jan 2020 09:43:59 GMT

2020/01/29 -- Apple Product Security

APPLE-SA-2020-1-28-2 macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra

Wed, 29 Jan 2020 09:40:58 GMT

2020/01/29 -- Apple Product Security

FreeBSD Security Advisory FreeBSD-SA-20:03.thrmisc

Wed, 29 Jan 2020 09:39:59 GMT

2020/01/29 -- FreeBSD Security Advisories

APPLE-SA-2020-1-28-5 Safari 13.0.5

Wed, 29 Jan 2020 09:34:09 GMT

2020/01/29 -- Apple Product Security

APPLE-SA-2020-1-28-4 tvOS 13.3.1

Wed, 29 Jan 2020 09:33:58 GMT

2020/01/29 -- Apple Product Security

APPLE-SA-2020-1-28-6 iTunes for Windows 12.10.4

Wed, 29 Jan 2020 09:29:09 GMT

2020/01/29 -- Apple Product Security

Defense in depth -- the Microsoft way (part 61): security features are built to fail (or documented wrong)

Wed, 29 Jan 2020 09:25:10 GMT

2020/01/29 -- Stefan Kanthak

LPE and RCE in OpenSMTPD (CVE-2020-7247)

Wed, 29 Jan 2020 09:21:21 GMT

2020/01/29 -- Qualys Security Advisory

CVE - CVE-2020-7799 - FusionAuth command execution via Apache Freemarker Template

Mon, 27 Jan 2020 18:58:19 GMT

2020/01/27 -- Gianluca Baldi

[slackware-security] mozilla-thunderbird (SSA:2020-024-01)

Mon, 27 Jan 2020 09:00:26 GMT

2020/01/27 -- Slackware Security Team

WebKitGTK and WPE WebKit Security Advisory WSA-2020-0001

Fri, 24 Jan 2020 04:00:04 GMT

2020/01/24 -- Carlos Alberto Lopez Perez

[SECURITY] [DSA 4609-1] python-apt security update

Fri, 24 Jan 2020 03:56:25 GMT

2020/01/24 -- Moritz Muehlenhoff

SEC Consult SA-20200123-0 :: Cross-Site Request Forgery (CSRF) in Umbraco CMS

Thu, 23 Jan 2020 14:40:26 GMT

2020/01/23 -- SEC Consult Vulnerability Lab

SEC Consult SA-20200122-0 :: Reflected XSS in ZOHO ManageEngine ServiceDeskPlus

Wed, 22 Jan 2020 13:08:57 GMT

2020/01/22 -- SEC Consult Vulnerability Lab

[REVIVE-SA-2020-001] Revive Adserver Vulnerability

Wed, 22 Jan 2020 07:07:42 GMT

2020/01/22 -- Matteo Beccati

[SECURITY] [DSA 4608-1] tiff security update

Wed, 22 Jan 2020 07:03:57 GMT

2020/01/22 -- Moritz Muehlenhoff

[SECURITY] [DSA 4607-1] openconnect security update

Tue, 21 Jan 2020 07:48:35 GMT

2020/01/21 -- Salvatore Bonaccorso

Neowise CarbonFTP v1.4 Insecure Proprietary Password Encryption CVE-2020-6857

Tue, 21 Jan 2020 07:43:35 GMT

2020/01/21 -- apparitionsec

Trend Micro Security 2019 (Consumer) Multiple Products Security Bypass Protected Service Tampering CVE-2019-19697

Tue, 21 Jan 2020 07:39:35 GMT

2020/01/21 -- apparitionsec

Trend Micro Security (Consumer) Multiple Products Persistent Arbitrary Code Execution CVE-2019-20357

Tue, 21 Jan 2020 07:36:35 GMT

2020/01/21 -- apparitionsec

[SECURITY] [DSA 4606-1] chromium security update

Mon, 20 Jan 2020 14:22:21 GMT

2020/01/20 -- Michael Gilbert

[SECURITY] [DSA 4603-1] thunderbird security update

Mon, 20 Jan 2020 10:07:36 GMT

2020/01/20 -- Moritz Muehlenhoff

[SECURITY] [DSA 4604-1] cacti security update

Mon, 20 Jan 2020 10:03:25 GMT

2020/01/20 -- Moritz Muehlenhoff

[SECURITY] [DSA 4605-1] openjdk-11 security update

Mon, 20 Jan 2020 09:59:01 GMT

2020/01/20 -- Moritz Muehlenhoff

CVE-2020-2656 - Low impact information disclosure via Solaris xlock

Fri, 17 Jan 2020 09:12:59 GMT

2020/01/17 -- Marco Ivaldi

CVE-2020-2696 - Local privilege escalation via CDE dtsession

Fri, 17 Jan 2020 09:09:15 GMT

2020/01/17 -- Marco Ivaldi

[SECURITY] [DSA 4602-1] xen security update

Tue, 14 Jan 2020 20:35:55 GMT

2020/01/14 -- Moritz Muehlenhoff

[TZO-09-2020] - Bitdefender Malformed Archive bypass (RAR Uncompressed Size)

Tue, 14 Jan 2020 20:32:42 GMT

2020/01/14 -- Thierry Zoller

[TZO-10-2020] - Bitdefender Malformed Archive bypass (RAR Compression Information)

Tue, 14 Jan 2020 20:28:49 GMT

2020/01/14 -- Thierry Zoller

[slackware-security] mozilla-thunderbird (SSA:2020-010-01)

Mon, 13 Jan 2020 07:33:31 GMT

2020/01/13 -- Slackware Security Team

[TZO-08-2020] Bitdefender Generic Malformed Archive Bypass (ZIP GPFLAG)

Mon, 13 Jan 2020 07:30:28 GMT

2020/01/13 -- Thierry Zoller

[TZO-06-2020] - Kaspersky Generic Archive Bypass (ZIP FLNMLEN)

Mon, 13 Jan 2020 07:26:42 GMT

2020/01/13 -- Thierry Zoller

[TZO-05-2020] Kaspersky Generic Malformed Archive Bypass (ZIP Compressed Size)

Fri, 10 Jan 2020 13:18:27 GMT

2020/01/10 -- Thierry Zoller

[TZO-07-2020] Bitdefender Generic Malformed Archive Bypass (RAR HOST_OS)

Fri, 10 Jan 2020 13:13:29 GMT

2020/01/10 -- Thierry Zoller

[SECURITY] [DSA 4601-1] ldm security update

Fri, 10 Jan 2020 08:10:33 GMT

2020/01/10 -- Moritz Muehlenhoff

[SECURITY] [DSA 4600-1] firefox-esr security update

Thu, 09 Jan 2020 11:18:45 GMT

2020/01/09 -- Moritz Muehlenhoff

[slackware-security] mozilla-firefox (SSA:2020-009-01)

Thu, 09 Jan 2020 11:14:57 GMT

2020/01/09 -- Slackware Security Team

[slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)

Thu, 09 Jan 2020 09:12:33 GMT

2020/01/09 -- Slackware Security Team

[SECURITY] [DSA 4598-1] python-django security update

Wed, 08 Jan 2020 09:59:32 GMT

2020/01/08 -- Salvatore Bonaccorso

[SECURITY] [DSA 4599-1] wordpress security update

Wed, 08 Jan 2020 09:56:30 GMT

2020/01/08 -- Sebastien Delafond

[slackware-security] mozilla-firefox (SSA:2020-006-01)

Tue, 07 Jan 2020 07:16:09 GMT

2020/01/07 -- Slackware Security Team

[SECURITY] [DSA 4597-1] netty security update

Mon, 06 Jan 2020 06:55:01 GMT

2020/01/06 -- Salvatore Bonaccorso

[TZO-04-2020] Bitdefender Generic Malformed Archive Bypass (BZ2)

Mon, 06 Jan 2020 06:50:49 GMT

2020/01/06 -- Thierry Zoller

[RT-SA-2019-015] IceWarp: Cross-Site Scripting in Notes for Contacts

Thu, 02 Jan 2020 16:37:22 GMT

2020/01/02 -- RedTeam Pentesting GmbH

[TZO-01-2020] AVIRA Generic Malformed Container bypass (ISO)

Thu, 02 Jan 2020 16:32:39 GMT

2020/01/02 -- Thierry Zoller

[TZO-02-2020] Kaspersyk Generic Malformed Archive Bypass (ZIP GFlag)

Thu, 02 Jan 2020 16:28:20 GMT

2020/01/02 -- Thierry Zoller

[TZO-03-2020] ESET Generic Malformed Archive Bypass (ZIP Compression Information)

Thu, 02 Jan 2020 16:25:18 GMT

2020/01/02 -- Thierry Zoller