bugtraq

[ MDVSA-2012:016 ] glpi

Fri, 10 Feb 2012 19:59:25 GMT

2012/02/10 -- security

CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability

Fri, 10 Feb 2012 19:52:09 GMT

2012/02/10 -- YGN Ethical Hacker Group

Kloxo LxCenter Server CP v6.1.10 - Multiple Web Vulnerabilities

Fri, 10 Feb 2012 19:24:18 GMT

2012/02/10 -- resea...@vulnerability-lab.com

Dolibarr CMS v3.2.0 Alpha - SQL Injection Vulnerabilities

Fri, 10 Feb 2012 19:15:29 GMT

2012/02/10 -- resea...@vulnerability-lab.com

OnxShop CMS v1.5.0 - Multiple Web Vulnerabilities

Fri, 10 Feb 2012 19:06:29 GMT

2012/02/10 -- resea...@vulnerability-lab.com

Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities

Fri, 10 Feb 2012 18:57:23 GMT

2012/02/10 -- resea...@vulnerability-lab.com

[Suspected Spam] eFront Community++ v3.6.10 - Multiple Web Vulnerabilities

Thu, 09 Feb 2012 18:25:40 GMT

2012/02/09 -- resea...@vulnerability-lab.com

[SECURITY] CVE-2011-4367 Apache MyFaces information disclosure vulnerability

Thu, 09 Feb 2012 18:17:29 GMT

2012/02/09 -- Leonardo Uribe

[ MDVSA-2012:015 ] wireshark

Thu, 09 Feb 2012 15:30:18 GMT

2012/02/09 -- security

[SECURITY] [DSA 2407-1] cvs security update

Thu, 09 Feb 2012 15:22:34 GMT

2012/02/09 -- Florian Weimer

ZDI-12-031 : Novell iPrint Server attributes-natural-language Remote Code Execution Vulnerability

Wed, 08 Feb 2012 19:50:11 GMT

2012/02/08 -- ZDI Disclosures

ZDI-12-030 : IBM Rational Rhapsody BBFlashBack.Recorder.1 TestCompatibilityRecordMode Remote Code Execution Vulnerability

Wed, 08 Feb 2012 19:39:43 GMT

2012/02/08 -- ZDI Disclosures

ZDI-12-029 : IBM Rational Rhapsody BBFlashBack.Recorder.1 InsertMarker Remote Code Execution Vulnerability

Wed, 08 Feb 2012 19:27:33 GMT

2012/02/08 -- ZDI Disclosures

ZDI-12-028 : IBM Rational Rhapsody BBFlashBack.FBRecorder.1 Control Multiple Remote Code Execution Vulnerabilities

Wed, 08 Feb 2012 19:16:56 GMT

2012/02/08 -- ZDI Disclosures

ZDI-12-027 : IBM SPSS VsVIEW6.ocx ActiveX Control SaveDoc Method Remote Code Execution Vulnerability

Wed, 08 Feb 2012 19:07:18 GMT

2012/02/08 -- ZDI Disclosures

ZDI-12-026 : IBM SPSS ExportHTML.dll ActiveX Control Render Method Remote Code Execution Vulnerability

Wed, 08 Feb 2012 18:57:39 GMT

2012/02/08 -- ZDI Disclosures

ZDI-12-025 : EMC Networker indexd.exe Opcode 0x01 Parsing Remote Code Execution

Wed, 08 Feb 2012 18:46:02 GMT

2012/02/08 -- ZDI Disclosures

ZDI-12-024 : Total Defense Suite UNC Management Web Service uncsp_ViewReportsHomepage SQL Injection Vulnerability

Wed, 08 Feb 2012 18:35:20 GMT

2012/02/08 -- ZDI Disclosures

ZDI-12-023 : Total Defense Suite UNC Management Web Service Database Credentials Disclosure Vulnerability

Wed, 08 Feb 2012 18:23:03 GMT

2012/02/08 -- ZDI Disclosures

ZDI-12-022 : Total Defense Suite UNC Management Console ExportReport SQL Injection Vulnerability

Wed, 08 Feb 2012 18:14:58 GMT

2012/02/08 -- ZDI Disclosures

ZDI-12-021 : Adobe Reader BMP Resource Signedness Remote Code Execution Vulnerability

Wed, 08 Feb 2012 18:03:27 GMT

2012/02/08 -- ZDI Disclosures

[security bulletin] HPSBMU02742 SSRT100740 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Unauthorized Disclosure of Information

Wed, 08 Feb 2012 17:56:30 GMT

2012/02/08 -- security-alert

Multiple vulnerabilities in ZENphoto

Wed, 08 Feb 2012 16:19:17 GMT

2012/02/08 -- advisory

[security bulletin] HPSBUX02741 SSRT100728 rev.1 - HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Restriction Bypass

Wed, 08 Feb 2012 15:55:21 GMT

2012/02/08 -- security-alert

Unauthenticated remote code execution on D-Link ShareCenter products

Wed, 08 Feb 2012 15:44:05 GMT

2012/02/08 -- roberto . paleari

eFronts Community++ v3.6.10 - Cross Site Vulnerability

Tue, 07 Feb 2012 18:41:37 GMT

2012/02/07 -- resea...@vulnerability-lab.com

[security bulletin] HPSBMU02736 SSRT100699 rev.2 - HP Business Availability Center (BAC) and Business Service Management (BSM), Remote Unauthorized Access to Sensitive Information

Tue, 07 Feb 2012 17:12:50 GMT

2012/02/07 -- security-alert

SQL Injection Vulnerability in Batavi 1.1.2

Tue, 07 Feb 2012 16:14:40 GMT

2012/02/07 -- Netsparker Advisories

CVE-2012-0803: Apache CXF does not validate UsernameToken policies correctly

Tue, 07 Feb 2012 16:01:35 GMT

2012/02/07 -- Colm O hEigeartaigh

DEF CON 20 Capture the Flag Announcement

Tue, 07 Feb 2012 15:41:34 GMT

2012/02/07 -- The Dark Tangent

SimpleGroupware 0.742 Cross-Site-Scripting vulnerability

Tue, 07 Feb 2012 15:34:59 GMT

2012/02/07 -- security

[SECURITY] [DSA 2403-2] php5 security update

Tue, 07 Feb 2012 14:44:42 GMT

2012/02/07 -- Thijs Kinkhorst

[ MDVSA-2012:014 ] glpi

Tue, 07 Feb 2012 14:36:50 GMT

2012/02/07 -- security

Mathopd - Directory Traversal Vulnerability

Mon, 06 Feb 2012 15:36:34 GMT

2012/02/06 -- Mateusz Goik

[SECURITY] [DSA 2405-1] apache2 security update

Mon, 06 Feb 2012 15:27:28 GMT

2012/02/06 -- Stefan Fritsch

[SECURITY] [DSA 2404-1] xen-qemu-dm-4.0 security update

Mon, 06 Feb 2012 15:16:11 GMT

2012/02/06 -- Florian Weimer

[SECURITY] [DSA 2384-2] cacti regression

Mon, 06 Feb 2012 15:07:07 GMT

2012/02/06 -- Luk Claes

ESA-2012-010: EMC Documentum xPlore information disclosure vulnerability

Fri, 03 Feb 2012 16:36:17 GMT

2012/02/03 -- Security_Alert

RFC 6528 on Defending against Sequence Number Attacks

Fri, 03 Feb 2012 16:20:50 GMT

2012/02/03 -- Fernando Gont

[SECURITY] [DSA 2403-1] php5 security update

Fri, 03 Feb 2012 16:11:40 GMT

2012/02/03 -- Thijs Kinkhorst

[SECURITY] [DSA 2402-1] iceape security update

Fri, 03 Feb 2012 15:59:54 GMT

2012/02/03 -- Moritz Muehlenhoff

[SECURITY] [DSA 2400-1] iceweasel security update

Fri, 03 Feb 2012 15:49:52 GMT

2012/02/03 -- Moritz Muehlenhoff

[SECURITY] [DSA 2401-1] tomcat6 security update

Fri, 03 Feb 2012 15:40:56 GMT

2012/02/03 -- Moritz Muehlenhoff

[security bulletin] HPSBGN02740 SSRT100741 rev.1 - HP Operations Manager, Operations Agent, Performance Agent, Service Health Reporter, Service Health Optimizer, Performance Manager, Remote Execution of Arbitrary Code

Fri, 03 Feb 2012 14:51:58 GMT

2012/02/03 -- security-alert

GLSA (Gentoo Linux Security Advisory) publication changes

Thu, 02 Feb 2012 18:56:51 GMT

2012/02/02 -- Alex Legler

[security bulletin] HPSBMU02739 SSRT100280 rev.1 - HP Data Protector Media Operations, Remote Execution of Arbitrary Code

Thu, 02 Feb 2012 18:42:46 GMT

2012/02/02 -- security-alert

[CAL-2012-0004] opera array integer overflow

Thu, 02 Feb 2012 18:32:54 GMT

2012/02/02 -- Code Audit Labs

Fwd: RA-Guard: Advice on the implementation (feedback requested)

Thu, 02 Feb 2012 18:21:11 GMT

2012/02/02 -- Fernando Gont

Call For Paper

Thu, 02 Feb 2012 18:10:54 GMT

2012/02/02 -- asemailing

APPLE-SA-2012-02-01-1 OS X Lion v10.7.3 and Security Update 2012-001

Thu, 02 Feb 2012 17:58:04 GMT

2012/02/02 -- Apple Product Security

[ MDVSA-2012:012 ] apache

Thu, 02 Feb 2012 17:49:45 GMT

2012/02/02 -- security

XSS phpLDAPadmin: 1.2.0.5 (Debian package) and 1.2.2 (sourceforge)

Wed, 01 Feb 2012 17:59:31 GMT

2012/02/01 -- andsarmiento

ESA-2012-009: EMC Documentum Content Server privilege elevation vulnerability

Wed, 01 Feb 2012 17:49:22 GMT

2012/02/01 -- Security_Alert

Multiple vulnerabilities in OpenEMR

Wed, 01 Feb 2012 17:37:59 GMT

2012/02/01 -- advisory

Security advisory for Bugzilla 4.2rc2, 4.0.4, 3.6.8 and 3.4.14

Wed, 01 Feb 2012 17:26:45 GMT

2012/02/01 -- LpSolit

802.1X password exploit on many HTC Android devices

Wed, 01 Feb 2012 17:15:25 GMT

2012/02/01 -- Bret Jordan

[Announce] Apache HTTP Server 2.2.22 Released

Wed, 01 Feb 2012 17:01:48 GMT

2012/02/01 -- William A. Rowe Jr.

[SECURITY] [DSA 2399-2] php5 regression fix

Tue, 31 Jan 2012 16:54:42 GMT

2012/01/31 -- Thijs Kinkhorst

[SECURITY] [DSA 2399-1] php5 security update

Tue, 31 Jan 2012 16:42:42 GMT

2012/01/31 -- Thijs Kinkhorst

VMSA-2012-0001 VMware ESXi and ESX updates to third party library and ESX Service Console

Tue, 31 Jan 2012 16:31:19 GMT

2012/01/31 -- VMware Security Team

[security bulletin] HPSBUX02724 SSRT100650 rev.3 - HP-UX Running System Administration Manager (SAM), Local Increase in Privilege

Tue, 31 Jan 2012 16:18:48 GMT

2012/01/31 -- security-alert

[security bulletin] HPSBUX02697 SSRT100591 rev.2 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities

Tue, 31 Jan 2012 16:07:26 GMT

2012/01/31 -- security-alert

[security bulletin] HPSBUX02737 SSRT100747 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS)

Tue, 31 Jan 2012 15:52:57 GMT

2012/01/31 -- security-alert

[security bulletin] HPSBMU02738 SSRT100748 rev.1 - HP Network Automation Running on Linux, Solaris, and Windows, Remote Unauthorized Access

Tue, 31 Jan 2012 15:41:02 GMT

2012/01/31 -- security-alert

[SECURITY] [DSA 2398-1] curl security update

Tue, 31 Jan 2012 15:32:30 GMT

2012/01/31 -- Moritz Muehlenhoff

ZDI-12-019 : IBM SPSS mraboutb.dll ActiveX Control SetLicenseInfoEx Method Remote Code Execution Vulnerability

Tue, 31 Jan 2012 15:24:03 GMT

2012/01/31 -- ZDI Disclosures

Advisory: sudo 1.8 Format String Vulnerability

Mon, 30 Jan 2012 19:24:35 GMT

2012/01/30 -- joernchen of Phenoelit

[ GLSA 201201-19 ] Adobe Reader: Multiple vulnerabilities

Mon, 30 Jan 2012 19:12:03 GMT

2012/01/30 -- Alex Legler

[ GLSA 201201-18 ] bip: Multiple vulnerabilities

Mon, 30 Jan 2012 18:59:11 GMT

2012/01/30 -- Alex Legler

Multiple vulnerabilities in OSClass

Mon, 30 Jan 2012 18:49:09 GMT

2012/01/30 -- Filippo Cavallarin

Multiple vulnerabilities in postfixadmin

Mon, 30 Jan 2012 18:36:17 GMT

2012/01/30 -- Filippo Cavallarin

Mibew messenger multiple XSS

Mon, 30 Jan 2012 18:24:46 GMT

2012/01/30 -- Filippo Cavallarin

[ MDVSA-2012:011 ] openssl

Mon, 30 Jan 2012 18:14:05 GMT

2012/01/30 -- security

[SECURITY] [DSA 2397-1] icu security update

Mon, 30 Jan 2012 18:04:09 GMT

2012/01/30 -- Moritz Muehlenhoff

FAA US Academy (AFS) - Auth Bypass Vulnerability

Mon, 30 Jan 2012 17:52:10 GMT

2012/01/30 -- resea...@vulnerability-lab.com

eBank IT Online Banking - Multiple Web Vulnerabilities

Mon, 30 Jan 2012 17:42:12 GMT

2012/01/30 -- resea...@vulnerability-lab.com

[ GLSA 201201-17 ] Chromium: Multiple vulnerabilities

Mon, 30 Jan 2012 17:31:34 GMT

2012/01/30 -- Tim Sammut

[ GLSA 201201-16 ] X.Org X Server/X Keyboard Configuration Database: Screen lock bypass

Mon, 30 Jan 2012 17:19:29 GMT

2012/01/30 -- Alex Legler

[SECURITY] [DSA 2396-1] qemu-kvm security update

Mon, 30 Jan 2012 17:08:36 GMT

2012/01/30 -- Moritz Muehlenhoff

[SECURITY] [DSA 2395-1] wireshark security update

Mon, 30 Jan 2012 16:59:53 GMT

2012/01/30 -- Moritz Muehlenhoff

AdaCore Security Advisory SA-2012-L119-003 Hash collisions in AWS

Fri, 27 Jan 2012 18:13:05 GMT

2012/01/27 -- Thomas Quinot

[HITB-Announce] Reminder: HITB2012AMS Call For Papers Closing Soon

Fri, 27 Jan 2012 15:26:12 GMT

2012/01/27 -- Hafez Kamal

[ GLSA 201201-15 ] ktsuss: Privilege escalation

Fri, 27 Jan 2012 15:16:23 GMT

2012/01/27 -- Sean Amoss

[SECURITY] [DSA 2394-1] libxml2 security update

Fri, 27 Jan 2012 14:50:51 GMT

2012/01/27 -- Luciano Bello

ESA-2012-007: RSA, The Security Division of EMC, announces security fixes for RSA enVision

Thu, 26 Jan 2012 20:28:39 GMT

2012/01/26 -- Security_Alert

ESA-2012-005: EMC NetWorker buffer overflow vulnerability

Thu, 26 Jan 2012 20:15:58 GMT

2012/01/26 -- Security_Alert

Cisco Security Advisory: Cisco IronPort Appliances Telnet Remote Code Execution Vulnerability

Thu, 26 Jan 2012 20:06:22 GMT

2012/01/26 -- Cisco Systems Product Security Incident Response Team

ZDI-12-018 : Symantec PCAnywhere awhost32 Remote Code Execution Vulnerability

Wed, 25 Jan 2012 20:04:43 GMT

2012/01/25 -- ZDI Disclosures

[SECURITY] [DSA-2393-1] bip security update

Wed, 25 Jan 2012 18:09:43 GMT

2012/01/25 -- dann frazier

NX Web Companion Spoofing Arbitrary Code Execution Vulnerability

Wed, 25 Jan 2012 17:21:20 GMT

2012/01/25 -- otr

D-Link DIR-601 TFTP Directory Traversal Vulnerability

Wed, 25 Jan 2012 17:00:01 GMT

2012/01/25 -- robkraus

Multiple vulnerabilities in OSclass

Wed, 25 Jan 2012 16:40:51 GMT

2012/01/25 -- advisory

NGS00117 Patch Notification: Symantec PCAnywhere Local Privilege Escalation

Wed, 25 Jan 2012 16:30:41 GMT

2012/01/25 -- Research@NGSSecure

NGS00118 Patch Notification: Symantec PCAnywhere Remote Code Execution as SYSTEM

Wed, 25 Jan 2012 16:16:00 GMT

2012/01/25 -- Research@NGSSecure

[security bulletin] HPSBUX02729 SSRT100687 rev.3 - HP-UX Running BIND, Remote Denial of Service (DoS)

Wed, 25 Jan 2012 16:07:40 GMT

2012/01/25 -- security-alert

[security bulletin] HPSBUX02719 SSRT100658 rev.4 - HP-UX Running BIND, Remote Denial of Service (DoS)

Wed, 25 Jan 2012 15:55:17 GMT

2012/01/25 -- security-alert

[security bulletin] HPSBUX02734 SSRT100729 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access

Wed, 25 Jan 2012 15:44:33 GMT

2012/01/25 -- security-alert

[security bulletin] HPSBUX02730 SSRT100710 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities

Wed, 25 Jan 2012 15:33:15 GMT

2012/01/25 -- security-alert

TWSL2012-002: Multiple Vulnerabilities in WordPress

Wed, 25 Jan 2012 15:25:08 GMT

2012/01/25 -- Trustwave Advisories

Only 7 Days Left: SANS AppSec 2012 CFP

Tue, 24 Jan 2012 16:51:29 GMT

2012/01/24 -- SANS AppSec CFP