Bugtraq

• Thread Index

• [security bulletin] HPSBGN03387 rev.1 - HP Intelligent Provisioning, Remote Code Execution, Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBMU03416 rev.1 - HP Data Protector, Remote Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 3345-1] iceweasel security update
  • From: Salvatore Bonaccorso
• [slackware-security] mozilla-firefox (SSA:2015-241-01)
  • From: Slackware Security Team
• Re: Re: UAC Bypass Vulnerability on "Windows 7" in Windows Script Host
  • From: kev . r
• Re: UAC Bypass Vulnerability on "Windows 7" in Windows Script Host
  • From: Rich Pieri
• [SECURITY] [DSA 3344-1] php5 security update
  • From: Sebastien Delafond
• [security bulletin] HPSBGN03402 rev.2 - HP Performance Manager, Remote Disclosure of Information
  • From: security-alert
• UAC Bypass Vulnerability on "Windows 7" in Windows Script Host
  • From: vozzie
• [security bulletin] HPSBHF03408 rev.1 - HP PCs with HP lt4112 LTE/HSPA+ Gobi 4G Module, Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBGN03411 rev.1 - HP Operations Agent Virtual Appliance, Remote Unauthorized Disclosure of Information
  • From: security-alert
• CVE-2015-6535: Stored XSS in YouTube Embed (WordPress plugin) allows admins to compromise super admins
  • From: grajalerts . noreply
• [security bulletin] HPSBGN03405 rev.1 - HP Integration Adaptor, Remote Unauthorized Modification, Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBGN03399 rev.1 - HP BSM Connector (BSMC), Remote Unauthorized Modification, Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBGN03415 rev.1 - HP Operations Agent Virtual Appliance, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBGN03414 rev.1 - HP Operations Agent, Remote Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 3343-1] twig security update
  • From: Sebastien Delafond
• RE: [security bulletin] HPSBMU03397 rev.1 - HP Version Control Agent (VCA) on Windows and Linux, Multiple Vulnerabilities
  • From: M.H.P. van Diem
• FreeBSD Security Advisory FreeBSD-SA-15:21.amd64
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-15:22.openssh
  • From: FreeBSD Security Advisories
• [security bulletin] HPSBMU03397 rev.1 - HP Version Control Agent (VCA) on Windows and Linux, Multiple Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBMU03413 rev.1 - HP Virtual Connect Enterprise Manager SDK, Multiple Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBMU03396 rev.1 - HP Version Control Repository Manager (VCRM) on Windows and Linux, Multiple Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBGN03404 rev.1 - HP Service Health Reporter, Remote Unauthorized Modification
  • From: security-alert
• [security bulletin] HPSBMU03345 rev.1 - HP Network Node Manager i (NNMi) and Smart Plugins (iSPIs) for HP-UX, Linux, Solaris, and Windows, Remote Disclosure of Information, Unauthorized Modification
  • From: security-alert
• [SYSS-2015-026] Denial of Service (CWE-730) and Overly Restrictive Account Lockout Mechanism (CWE-645) in Page2Flip Premium App 2.5
  • From: erlijn . vangenuchten
• [SYSS-2015-027] Cross-Site Scripting (CWE-79) in Page2Flip Premium App 2.5
  • From: erlijn . vangenuchten
• [SYSS-2015-028] Cross-Site Scripting (CWE-79) in Page2Flip Premium App 2.5
  • From: erlijn . vangenuchten
• [SYSS-2015-029] Insecure Direct Object Reference (CWE-932) in Page2Flip Premium App 2.5
  • From: erlijn . vangenuchten
• [SYSS-2015-032] Broken Authentication and Session Management (CWE-930) in Page2Flip Premium App 2.5
  • From: erlijn . vangenuchten
• [SYSS-2015-030] Improper Handling of Insufficient Privileges (CWE-274) in Page2Flip Premium App 2.5
  • From: erlijn . vangenuchten
• SYSS-2015-033: Missing Function Level Access Control (CWE-935) in Page2Flip Premium App 2.5
  • From: erlijn . vangenuchten
• Dell SonicWall NetExtender Unquoted Autorun Privilege Escalation
  • From: ajs
• [SYSS-2015-025] Netop Remote Control - Insufficiently Protected Credentials
  • From: matthias . deeg
• Cross site request forgery vulnerability in Linksys WAG120N
  • From: DonVallejo .
• [security bulletin] HPSBGN03395 rev.1 - HP KeyView running on HP-UX, Linux, Solaris, Windows, FreeBSD, and AIX, Remote Code Execution
  • From: security-alert
• Logstash vulnerability CVE-2015-5619
  • From: Suyog Rao
• [slackware-security] gnutls (SSA:2015-233-01)
  • From: Slackware Security Team
• [security bulletin] HPSBGN03395 rev.1 - HP KeyView running on HP-UX, Linux, Solaris, Windows, FreeBSD, and AIX, Remote Code Execution
  • From: security-alert
• Logstash vulnerability CVE-2015-5619
  • From: Suyog Rao
• [security bulletin] HPSBUX03410 SSRT102175 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• Re: [SECURITY] [DSA 3325-2] apache2 regression update
  • From: franzskinn
• APPLE-SA-2015-08-20-1 QuickTime 7.7.8
  • From: Apple Product Security
• Re: Micro Login System v1.0 (userpwd.txt) Password Disclosure Vulnerability
  • From: anonymous
• [security bulletin] HPSBUX03369 SSRT102037 rev.1 - HP-UX execve(2), Local Elevation of Privilege
  • From: security-alert
• [SECURITY] [DSA 3342-1] vlc security update
  • From: Alessandro Ghedini
• [oCERT-2015-009] VLC arbitrary pointer dereference
  • From: Andrea Barisani
• UBNT Bug Bounty #3 - Persistent Filename Vulnerability
  • From: Vulnerability Lab
• UBNT Bug Bounty #1 - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• WebSolutions India Design CMS - SQL Injection Vulnerability
  • From: Vulnerability Lab
• ChiefPDF Software v2.x - Buffer Overflow Vulnerability
  • From: Vulnerability Lab
• PDF Shaper v3.5 - (MSF) Remote Buffer Overflow Vulnerability
  • From: Vulnerability Lab
• Microsoft HTA (HTML Application) - Remote Code Execution Vulnerability (MS14-064)
  • From: Vulnerability Lab
• [SECURITY] [DSA 3341-1] conntrack security update
  • From: Salvatore Bonaccorso
• ESA-2015-132: EMC Documentum D2 Fail Open Vulnerability
  • From: Security Alert
• Re: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information
  • From: Steve Shockley
• [SECURITY] [DSA 3340-1] zendframework security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3339-1] openjdk-6 security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBUX03400 SSRT102211 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• CVE-2015-3269 Apache Flex BlazeDS Insecure Xml Entity Expansion Vulnerability
  • From: Christofer Dutz
• Privilege escalation through RPC commands in EMC Documentum Content Server (incomplete fix in CVE-2015-4532)
  • From: andrew
• Re: EMC Documentum Content Server: arbitrary code execution (incomplete fix in CVE-2015-4532)
  • From: andrew
• Re: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information
  • From: paul . szabo
• RE: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information
  • From: Chillman, Paul, Vodafone UK
• Re: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information
  • From: Asher995
• [SYSS-2015-041] XSS in OpenText Secure MFT
  • From: adrian . vollmer
• Trend Micro Deep Discovery XSS
  • From: apparitionsec
• Trend Micro Deep Discovery Authentication Bypass
  • From: apparitionsec
• Re: Hawkeye-G v3 CSRF Vulnerability ***[UPDATED CORRECTED]
  • From: aabbccdd05407
• CVE-2015-5699 - Cumulus Linux's Switch Configuration Tools Backend, clcmd_server, Vulnerable to Local Privilege Escalation
  • From: Gregory Pickett
• FreeBSD Security Advisory FreeBSD-SA-15:20.expat
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 3338-1] python-django security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3337-1] gdk-pixbuf security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3325-2] apache2 regression update
  • From: Stefan Fritsch
• Re: [ERPSCAN-15-013] SAP NetWeaver AS Java CIM UPLOAD â?? XXE
  • From: rahfsk
• Re: Re: [SECURITY] [DSA 3336-1] nss security update
  • From: rahfsk
• Re: [SECURITY] [DSA 3336-1] nss security update
  • From: miguelmellolopes
• EMC Documentum Content Server: arbitrary code execution (incomplete fix in CVE-2015-4532)
  • From: andrew
• [SECURITY] [DSA 3336-1] nss security update
  • From: Salvatore Bonaccorso
• sysadmin privilege in EMC Documentum Content Server
  • From: andrew
• Insufficient certificate validation in EMC Secure Remote Services Virtual Edition
  • From: Securify B.V.
• Weak authentication in EMC Secure Remote Services Virtual Edition Web Portal
  • From: Securify B.V.
• [ERPSCAN-15-013] SAP NetWeaver AS Java CIM UPLOAD – XXE
  • From: ERPScan inc
• [ERPSCAN-15-012] SAP Afaria 7 XComms – Buffer Overflow
  • From: ERPScan inc
• ESA-2015-130: EMC Documentum WebTop and WebTop Clients Cross-Site Request Forgery Vulnerability
  • From: Security Alert
• ESA-2015-131: EMC Documentum Content Server Multiple Vulnerabilities
  • From: Security Alert
• ESA-2015-094: RSA Archer® GRC Multiple Cross-Site Request Forgery Vulnerabilities
  • From: Security Alert
• ESA-2015-081: RSA BSAFE® Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities
  • From: Security Alert
• Oracle CSO numbers, security hygiene and fixes at the same time
  • From: Security Explorations
• Poor security in SOHO routers, again. Changing configuration parameters with a click.
  • From: DonVallejo .
• Re: Multiple vulnerabilites in vendor IKE implementations, including Cisco,
  • From: arash . yazdanfare
• Re: NEW : VMSA-2015-0003 VMware product updates address critical information disclosure issue in JRE
  • From: 13669185678
• Re: [MORNINGSTAR-2009-01] Multiple security issues in Open Auto Classifieds version <= 1.5.9
  • From: li0252130467
• Re: Windows Platform Binary Table (WPBT) - BIOS PE backdoor
  • From: Pedro Ribeiro
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Stefan Kanthak
• Re: PayPal Inc Bug Bounty Issue #70 France - Persistent (Escape Shopping) Mail Vulnerability
  • From: ahmadshafique
• vBulletin x.x.x rce "0day"
  • From: Joshua Rogers
• [slackware-security] mozilla-firefox (SSA:2015-226-01)
  • From: Slackware Security Team
• [slackware-security] mozilla-thunderbird (SSA:2015-226-02)
  • From: Slackware Security Team
• Re: Windows Platform Binary Table (WPBT) - BIOS PE backdoor
  • From: simon
• BFS-SA-2015-002: OpenSSH PAM Privilege Separation Vulnerabilities
  • From: Blue Frost Security Research Lab
• Re: Windows Platform Binary Table (WPBT) - BIOS PE backdoor
  • From: Kevin Beaumont
• Re: Windows Platform Binary Table (WPBT) - BIOS PE backdoor
  • From: Kevin Beaumont
• Re: Windows Platform Binary Table (WPBT) - BIOS PE backdoor
  • From: Kevin Beaumont
• Nuance PowerPDF Advanced Metadata Information Disclosure Vulnerability (low|local)
  • From: Christopher Hudel
• APPLE-SA-2015-08-13-4 OS X Server v4.1.5
  • From: Apple Product Security
• APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006
  • From: Apple Product Security
• APPLE-SA-2015-08-13-3 iOS 8.4.1
  • From: Apple Product Security
• APPLE-SA-2015-08-13-1 Safari 8.0.8, Safari 7.1.8, and Safari 6.2.8
  • From: Apple Product Security
• Re: Windows Platform Binary Table (WPBT) - BIOS PE backdoor
  • From: Stefan Kanthak
• [security bulletin] HPSBGN03393 rev.1 - HP Operations Manager i, Remote Code Execution
  • From: security-alert
• [security bulletin] HPSBGN03386 rev.1 - HP Central View Fraud Risk Management, Revenue Leakage Control, Dealer Performance Audit, Credit Risk Control, Roaming Fraud Control, Subscription Fraud Prevention, Remote Disclosure of Information, Local Disclosure of Information
  • From: security-alert
• Update: Backdoor and RCE found in 8 TOTOLINK router models
  • From: Pierre Kim
• Re: Windows Platform Binary Table (WPBT) - BIOS PE backdoor
  • From: Jerome Athias
• Cisco Unified Communications Manager Multiple Vulnerabilities (VP2015-001)
  • From: Bernhard Mueller
• RE: Windows Platform Binary Table (WPBT) - BIOS PE backdoor
  • From: Limanovski, Dimitri
• [SECURITY] [DSA 3335-1] request-tracker4 security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3332-1] wordpress security update
  • From: Thijs Kinkhorst
• [CVE-2015-4624] Predictable CSRF tokens in WiFi Pineapple firmware <= 2.3.0
  • From: Ken
• phpipam-1.1.010 XSS Vulnerability
  • From: apparitionsec
• PHPfileNavigator v2.3.3 CSRF Add Arbitrary Users
  • From: apparitionsec
• phpipam-1.1.010 XSS Vulnerability
  • From: apparitionsec
• BFS-SA-2015-001: Internet Explorer CTreeNode::GetCascadedLang Use-After-Free Vulnerability
  • From: Blue Frost Security Research Lab
• PHPfileNavigator 2.3.3 Persistent & Reflected XSS
  • From: apparitionsec
• [SECURITY] [DSA 3333-1] iceweasel security update
  • From: Moritz Muehlenhoff
• bizidea Design CMS 2015Q3 - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Windows Platform Binary Table (WPBT) - BIOS PE backdoor
  • From: Kevin Beaumont
• Pdf Shaper Buffer Overflow
  • From: metacom27
• [SECURITY] [DSA 3334-1] gnutls28 security update
  • From: Salvatore Bonaccorso
• [Onapsis Security Advisory 2015-011] SAP Mobile Platform DataVault Predictable encryption passwords for Configuration Values
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2015-012] SAP Mobile Platform DataVault Predictable Encryption Password for Secure Storage
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2015-010] SAP Mobile Platform DataVault Keystream Recovery
  • From: Onapsis Research Labs
• [slackware-security] mozilla-firefox (SSA:2015-219-01)
  • From: Slackware Security Team
• [slackware-security] mozilla-nss (SSA:2015-219-02)
  • From: Slackware Security Team
• [SECURITY] [DSA 3330-1] activemq security update
  • From: Moritz Muehlenhoff
• QNAP crypto keys logged on unencrypted disk partition in world accessible files
  • From: Andreas Steinmetz
• Device Inspector v1.5 iOS - Command Inject Vulnerabilities
  • From: Vulnerability Lab
• Ferrari - PHP CGI Argument Injection (RCE) Vulnerability
  • From: Vulnerability Lab
• Thomson Reuters FATCA - Arbitrary File Upload
  • From: jakub . palaczynski
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Teddy A PURWADI
• [SECURITY] [DSA 3329-1] linux security update
  • From: Salvatore Bonaccorso
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Jakob Holderbaum
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Reindl Harald
• RE: [FD] Mozilla extensions: a security nightmare
  • From: Frank Waarsenburg
• RE: [FD] Mozilla extensions: a security nightmare
  • From: Steve Friedl
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Stefan Kanthak
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Stefan Kanthak
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Andrew Deck
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Reindl Harald
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Stefan Kanthak
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Christoph Gruber
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Bruce A. Peters
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Reindl Harald
• FreeBSD Security Advisory FreeBSD-SA-15:19.routed
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-15:18.bsdpatch
  • From: FreeBSD Security Advisories
• Vulnerable MSVC++ runtime distributed with LibreOffice 5.0.0 for Windows
  • From: Stefan Kanthak
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Stefan Kanthak
• [security bulletin] HPSBUX03388 SSRT102180 rev.1 - HP-UX running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Ansgar Wiechers
• Re: [FD] Mozilla extensions: a security nightmare
  • From: Stefan Kanthak
• SEC Consult SA-20150805-0 :: Websense Content Gateway Stack Buffer Overflow in handle_debug_network
  • From: SEC Consult Vulnerability Lab
• [SECURITY] [DSA 3328-2] wordpress regression update
  • From: Thijs Kinkhorst
• Mozilla extensions: a security nightmare
  • From: Stefan Kanthak
• [SECURITY] [DSA 3328-1] wordpress security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 3327-1] squid3 security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3326-1] ghostscript security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3325-1] apache2 security update
  • From: Stefan Fritsch
• [SECURITY] [DSA 3324-1] icedove security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3323-1] icu security update
  • From: Laszlo Boszormenyi
• Multiple XSS vulnerabilities in FortiSandbox WebUI
  • From: hyp3rlinx
• [SECURITY] [DSA 3322-1] ruby-rack security update
  • From: Salvatore Bonaccorso
• phpFileManager 0.9.8 Remote Command Execution
  • From: hyp3rlinx
• HP ArcSight Logger provides incorrect/invalid/incomplete results for queries with boolean operators
  • From: roberto
• [SECURITY] [DSA 3321-1] xmltooling security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3320-1] openafs security update
  • From: Sebastien Delafond
• Cisco Security Advisory: Cisco ASR 1000 Series Aggregation Services Routers Fragmented Packet Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Dell Netvault Backup Remote Denial of Service
  • From: epoide
• FreeBSD Security Advisory FreeBSD-SA-15:16.openssh [REVISED]
  • From: FreeBSD Security Advisories
• [security bulletin] HPSBGN03366 rev.1 - HP Business Process Insight with RC4 Stream Cipher, Remote Disclosure of Information
  • From: security-alert
• Cross-Site Scripting (XSS) in qTranslate WordPress Plugin
  • From: High-Tech Bridge Security Research
• [security bulletin] HPSBGN03367 rev.1 - HP TransactionVision with RC4 Stream Cipher, Remote Disclosure of Information
  • From: security-alert
• phpFileManager 0.9.8 CSRF Backdoor Shell Vulnerability
  • From: apparitionsec
• [slackware-security] bind (SSA:2015-209-01)
  • From: Slackware Security Team
• FreeBSD Security Advisory FreeBSD-SA-15:17.bind
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-15:16.openssh
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-15:15.tcp
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-15:14.bsdpatch
  • From: FreeBSD Security Advisories
• [security bulletin] HPSBGN03372 rev.1 - HP Business Process Monitor using RC4, Remote Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 3319-1] bind9 security update
  • From: Salvatore Bonaccorso
• SEC Consult SA-20150728-0 :: McAfee Application Control Multiple Vulnerabilities
  • From: SEC Consult Vulnerability Lab
• Multiple unresolved vulnerabilities in Basware Banking/Maksuliikenne
  • From: Samuel Lavitt - CVE-2015-0942
• Another Snorby 2.6.2 - Stored Cross-site Scripting Vulnerability
  • From: Federico Fazzi
• Apple iTunes & AppStore - Filter Bypass & Persistent Invoice Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 3318-1] expat security update
  • From: Laszlo Boszormenyi
• [SECURITY] [DSA 3317-1] lxc security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3316-1] openjdk-7 security update
  • From: Moritz Muehlenhoff
• Integer overflow in .NET Framework System.DirectoryServices.Protocols.Utility class
  • From: Securify B.V.
• Hawkeye-G v3.0.1 Persistent XSS & Information Leakage
  • From: apparitionsec
• Hawkeye-G v3 CSRF Vulnerability ***[UPDATED CORRECTED]
  • From: apparitionsec
• [SECURITY] [DSA 3315-1] chromium-browser security update
  • From: Michael Gilbert
• Hawkeye-G v3.0.1.4912 CSRF Vulnerability CVE-2015-2878
  • From: apparitionsec
• [SECURITY] [DSA 3314-1] typo3-src end of life
  • From: Moritz Muehlenhoff
• Qualys Security Advisory - CVE-2015-3245 userhelper - CVE-2015-3246 libuser
  • From: Qualys Security Advisory
• ThaiWeb CMS 2015Q3 - SQL Injection Web Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 3313-1] linux security update
  • From: Salvatore Bonaccorso
• Cisco Security Advisory: Cisco IOS Software TFTP Server Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Unified MeetingPlace Unauthorized Password Change Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Application Policy Infrastructure Controller Access Control Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• ESA-2015-118: EMC Avamar Directory Traversal Vulnerability
  • From: Security Alert
• Multiple (remote and local) Vulnerabilities in Xceedium Xsuite [MZ-15-02]
  • From: modzero
• Multiple XSS Vulnerabilities in Paid Memberships Pro WordPress Plugin
  • From: High-Tech Bridge Security Research
• SQL Injection in Count Per Day WordPress Plugin
  • From: High-Tech Bridge Security Research
• [SECURITY] [DSA 3312-1] cacti security update
  • From: Alessandro Ghedini
• NetCracker Resource Management 8.0 - SQL Injection Vulnerability
  • From: jychia . sec
• NetCracker Resource Management 8.0 - XSS Vulnerability
  • From: jychia . sec
• Open-Web-Analytics-1.5.7 Cryptographic, Password Disclosure & XSS Vulnerabilities
  • From: apparitionsec
• FreeBSD Security Advisory FreeBSD-SA-15:13.tcp
  • From: FreeBSD Security Advisories
• Logstash vulnerability CVE-2015-5378
  • From: Kevin Kluge
• WorldCIST'2016 - Brazil: Call for Workshops Proposals - Best Papers published by ISI/SCI Journals
  • From: Maria Lemos
• CVE-2015-5379: Axigen XSS vulnerability for html attachments
  • From: Ioan Indreias
• [security bulletin] HPSBMU03380 rev.1 - HP System Management Homepage (SMH) on Linux and Windows, Multiple Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBMU03377 rev.1 - HP Release Control running RC4, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBUX03379 SSRT101976 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 3311-1] mariadb-10.0 security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3310-1] freexl security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3309-1] tidy security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3308-1] mysql-5.5 security update
  • From: Salvatore Bonaccorso
• [slackware-security] httpd (SSA:2015-198-01)
  • From: Slackware Security Team
• [slackware-security] php (SSA:2015-198-02)
  • From: Slackware Security Team
• AirDroid ID - Client Side JSONP Callback Vulnerability
  • From: Vulnerability Lab
• FoxyCart Bug Bounty #1 - Filter Bypass & Persistent Vulnerability
  • From: Vulnerability Lab
• UDID+ v2.5 iOS - Mail Command Inject Vulnerability
  • From: Vulnerability Lab
• Oracle E-Business Suite Servlet URL Redirection Vulnerability
  • From: owais . md . khan
• Novell GroupWise 2014 WebAccess vulnerable to XSS attacks
  • From: adrian . vollmer
• SEC Consult SA-20150716-0 :: Permanent Cross-Site Scripting in Oracle Application Express
  • From: SEC Consult Vulnerability Lab
• Elasticsearch CVE-2015-5531
  • From: Kevin Kluge
• Elasticsearch CVE-2015-5377
  • From: Kevin Kluge
• ESA-2015-123: EMC Documentum WebTop Open Redirect Vulnerability
  • From: Security Alert
• ESA-2015-122: EMC Documentum CenterStage Cross-site Scripting Vulnerability
  • From: Security Alert
• Re: [FD] 15 TOTOLINK router models vulnerable to multiple RCEs
  • From: Joshua Wright
• [CVE-2015-3253] Apache Groovy Zero-Day Vulnerability Disclosure
  • From: Cédric Champeau
• Backdoor and RCE found in 8 TOTOLINK router models
  • From: Pierre Kim
• Backdoor credentials found in 4 TOTOLINK router models
  • From: Pierre Kim
• 4 TOTOLINK router models vulnerable to CSRF and XSS attacks
  • From: Pierre Kim
• 15 TOTOLINK router models vulnerable to multiple RCEs
  • From: Pierre Kim
• Cisco Security Advisory: Cisco Videoscape Delivery System Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• XSS, Code Execution, DOS, Password Leak, Weak Authentication in GetSimpleCMS 3.3.5
  • From: Tim Coen
• XSS vulnerability in OFBiz forms
  • From: lilian_iatco
• [CVE-2015-2862/2863 / CERT VU#919604] Kaseya VSA arbitrary file download / open redirect
  • From: Pedro Ribeiro
• CFP: Passwords 2015, Dec 7-9, Cambridge, UK
  • From: Per Thorsheim
• CVE-2015-4670 - AjaxControlToolkit File Upload Directory Traversal
  • From: Brian Cardinale
• [SYSS-2015-031] sysPass - SQL Injection
  • From: disclosure
• phpSQLiteCMS CSRF, Unrestricted File Type Upload, Privilege Escalation & XSS CSRF, Unrestricted File Type Upload, Privilege Escalation & XSS
  • From: apparitionsec
• [slackware-security] mozilla-thunderbird (SSA:2015-192-01)
  • From: Slackware Security Team
• SQL Injection, Reflected XSS, Path Traversal, Function Execution in ZenPhoto 1.4.8
  • From: Tim Coen
• [security bulletin] HPSBGN03373 rev.1 - HP Release Control running TLS, Remote Disclosure of Information
  • From: security-alert
• Cisco Security Advisory: OpenSSL Alternative Chains Certificate Forgery Vulnerability (July 2015) Affecting Cisco Products
  • From: Cisco Systems Product Security Incident Response Team
• [security bulletin] HPSBGN03351 rev.2 - HP IceWall SSO Dfw, SSO Certd, MCRP, and Federation Agent running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBGN03371 rev.1 - HP IceWall Products running OpenSSL, Remote Denial of Service (DoS)
  • From: security-alert
• ESA-2015-115: EMC RecoverPoint for Virtual Machines (VMs) Restriction Bypass Vulnerability
  • From: Security Alert
• CVE-2014-7952, Android ADB backup APK injection vulnerability
  • From: Imre RAD
• NEW VMSA-2015-0005 : VMware Workstation, Player and Horizon View Client for Windows updates address a host privilege escalation vulnerability
  • From: VMware Security Response Center
• [SECURITY] [DSA 3307-1] pdns-recursor security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3306-1] pdns security update
  • From: Alessandro Ghedini
• [slackware-security] openssl (SSA:2015-190-01)
  • From: Slackware Security Team
• FreeBSD Security Advisory FreeBSD-SA-15:12.openssl
  • From: FreeBSD Security Advisories
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software
  • From: Cisco Systems Product Security Incident Response Team
• Extra information for CVE-2014-2513 - EMC Documentum Content Server: arbitrary code execution
  • From: andrew
• [SECURITY] [DSA 3305-1] python-django security update
  • From: Alessandro Ghedini
• [CORE-2015-0011] - AirLink101 SkyIPCam1620W OS Command Injection
  • From: CORE Advisories Team
• [security bulletin] HPSBUX03363 rev.1 - HP-UX Apache Web Server running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• Merethis Centreon - Unauthenticated blind SQLi and Authenticated Remote Command Execution
  • From: hdau
• SQL Injection in easy2map-photos wordpress plugin v1.09
  • From: Larry W. Cashdollar
• Remote file download vulnerability in wordpress plugin wp-ecommerce-shop-styling v2.5
  • From: Larry W. Cashdollar
• Symantec EP 12.1.4013 Disabling Vulnerability
  • From: apparitionsec
• [slackware-security] bind (SSA:2015-188-04)
  • From: Slackware Security Team
• [slackware-security] ntp (SSA:2015-188-03)
  • From: Slackware Security Team
• [slackware-security] cups (SSA:2015-188-01)
  • From: Slackware Security Team
• [slackware-security] mozilla-firefox (SSA:2015-188-02)
  • From: Slackware Security Team
• FreeBSD Security Advisory FreeBSD-SA-15:11.bind
  • From: FreeBSD Security Advisories
• [security bulletin] HPSBGN03352 rev.2 - HP Asset Manager Using RC4, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBGN03354 rev.1 - HP Connect-IT Using RC4, Remote Disclosure of Information
  • From: security-alert
• RE: [security bulletin] HPSBGN03351 rev.1 - HP IceWall SSO Dfw, SSO Certd, MCRP, and Federation Agent running OpenSSL, Remote Disclosure of Information (UNCLASSIFIED)
  • From: Patterson, Derrick A CTR (US)
• [security bulletin] HPSBGN03361 rev.1 - HP UCMDB, HP UCMDB Configuration Manager, HP UCMDB Browser, and HP Universal Discovery running TLS, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBMU03234 rev.1 - HP Vertica Analytics Platform running SSLv3, Remote Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 3303-1] cups-filters security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3302-1] libwmf security update
  • From: Moritz Muehlenhoff
• [CORE-2015-0012] - AirLive Multiple Products OS Command Injection
  • From: CORE Advisories Team
• Re: Google HTTP Live Headers v1.0.6 - Client Side Cross Site Scripting Web Vulnerability
  • From: Reindl Harald
• phpLiteAdmin v1.1 CSRF & XSS Vulnerabilities
  • From: apparitionsec
• Google Chrome Address Spoofing - Google's Opinion
  • From: David Leo
• [SECURITY] [DSA 3301-1] haproxy security update
  • From: Salvatore Bonaccorso
• 127 ipTIME router models vulnerable to an unauthenticated RCE by sending a crafted DHCP request
  • From: Pierre Kim
• Ebay Inc Magento Bug Bounty #16 - CSRF Web Vulnerability
  • From: Vulnerability Lab
• Snorby 2.6.2 - Stored Cross-site Scripting Vulnerability
  • From: Federico Fazzi
• Microsoft Office - OLE Packager allows code execution in all versions, with macros disabled
  • From: Kevin Beaumont
• Google HTTP Live Headers v1.0.6 - Client Side Cross Site Scripting Web Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 3300-1] iceweasel security update
  • From: Moritz Muehlenhoff
• WK UDID v1.0.1 iOS - Command Inject Vulnerability
  • From: Vulnerability Lab
• Ruxcon 2015 Final Call For Presentations
  • From: cfp
• CVE-2015-3442 Authentication Bypass in Xpert.Line Version 3.0
  • From: Alessandro Zala
• SQL Injection in easy2map wordpress plugin v1.24
  • From: Larry W. Cashdollar
• ipTIME n104r3 vulnerable to CSRF and XSS attacks
  • From: Pierre Kim
• [SECURITY] [DSA 3299-1] stunnel4 security update
  • From: Salvatore Bonaccorso
• ToorCon 17 Call For Papers!
  • From: h1kari
• iTunes 12.2 and QuickTime 7.7.7 for Windows: still outdated and VULNERABLE 3rd party libraries, still UNQUOTED and VULNERABLE pathnames C:\Program Files\...
  • From: Stefan Kanthak
• Exploit Code for ipTIME firmwares < 9.58 (root RCE against 127 router models)
  • From: Pierre Kim
• ESA-2015-112: EMC Isilon OneFS Command Injection Vulnerability
  • From: Security Alert
• ESA-2015-108: EMC Documentum D2 Multiple DQL Injection Vulnerabilities
  • From: Security Alert
• ESA-2015-111: EMC Documentum WebTop Client Products Multiple Vulnerabilities
  • From: Security Alert
• Path Traversal in BlackCat CMS
  • From: High-Tech Bridge Security Research
• Blueberry Express v5.9.x - SEH Buffer Overflow Vulnerability
  • From: Vulnerability Lab
• FCS Scanner v1.0 & v1.4 - Command Inject Vulnerability
  • From: Vulnerability Lab
• Ebay Magento Bug Bounty #14 - Persistent Description Vulnerability
  • From: Vulnerability Lab
• Pinterest Bug Bounty #1 - Persistent contact_name Vulnerability
  • From: Vulnerability Lab
• Extra information for CVE-2014-4626 - EMC Documentum Content Server: authenticated user is able to elevate privileges, hijack Content Server filesystem, execute arbitrary commands by creating malicious dm_job objects
  • From: andrew
• APPLE-SA-2015-06-30-6 iTunes 12.2
  • From: Apple Product Security
• [SECURITY] [DSA 3298-1] jackrabbit security update
  • From: Moritz Muehlenhoff
• APPLE-SA-2015-06-30-5 QuickTime 7.7.7
  • From: Apple Product Security
• APPLE-SA-2015-06-30-3 Mac EFI Security Update 2015-001
  • From: Apple Product Security
• APPLE-SA-2015-06-30-4 Safari 8.0.7, Safari 7.1.7, and Safari 6.2.7
  • From: Apple Product Security
• APPLE-SA-2015-06-30-2 OS X Yosemite v10.10.4 and Security Update 2015-005
  • From: Apple Product Security
• APPLE-SA-2015-06-30-1 iOS 8.4
  • From: Apple Product Security
• Google Chrome Address Spoofing (Request For Comment)
  • From: David Leo
• CVE-2015-4674 - TimeDoctor autoupdate over plain-HTTP
  • From: Fernando Muñoz
• [SECURITY] [DSA 3297-1] unattended-upgrades security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3296-1] libcrypto++ security update
  • From: Alessandro Ghedini
• novius-os.5.0.1 Persistent XSS, LFI & Open Redirect Vulnerabilities
  • From: apparitionsec
• CollabNet Subversion Edge indes local file inclusion
  • From: Oliver-Tobias Ripka
• CollabNet Subversion Edge missing single login restriction
  • From: Oliver-Tobias Ripka
• CollabNet Subversion Edge weak password storage mechanism
  • From: Oliver-Tobias Ripka
• CollabNet Subversion Edge missing XSRF protection
  • From: Oliver-Tobias Ripka
• CollabNet Subversion Edge weak password policy
  • From: Oliver-Tobias Ripka
• CollabNet Subversion Edge autocomplete on
  • From: Oliver-Tobias Ripka
• CollabNet Subversion Edge missing clickjacking protection
  • From: Oliver-Tobias Ripka
• CollabNet Subversion Edge missing brute force protection
  • From: Oliver-Tobias Ripka
• CollabNet Subversion Edge show local file inclusion
  • From: Oliver-Tobias Ripka
• CollabNet Subversion Edge insecure password change
  • From: Oliver-Tobias Ripka
• CollabNet Subversion Edge tail local file inclusion
  • From: Oliver-Tobias Ripka
• CollabNet Subversion Edge downloadHook local file inclusion
  • From: Oliver-Tobias Ripka
• CollabNet Subversion Edge Password Hash Leak
  • From: Oliver-Tobias Ripka
• CollabNet Subversion Edge Hook Script Privilege Escalation
  • From: Oliver-Tobias Ripka
• CSRF Vulnerability in C2Box application CVE-2015-4460
  • From: wissam . bashour
• Session Fixation, Reflected XSS, Code Execution in PivotX 2.3.10
  • From: Tim
• [security bulletin] HPSBPI03360 rev.2 - HP LaserJet Printers and MFPs, HP OfficeJet Printers and MFPs, and HP JetDirect Networking cards using OpenSSL, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBPI03107 rev.1 - HP LaserJet Printers and MFPs, HP OfficeJet Printers and MFPs, and HP JetDirect Networking cards using OpenSSL, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBGN03362 rev.1 - HP Discovery and Dependency Mapping Inventory (DDMI) with TLS, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBMU03267 rev.3 - HP Matrix Operating Environment and HP CloudSystem Matrix running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBUX03359 rev.1 - HP-UX pppoec, local elevation of privilege
  • From: security-alert
• [security bulletin] HPSBGN03351 rev.1 - HP IceWall SSO Dfw, SSO Certd, MCRP, and Federation Agent running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• SEC Consult SA-20150626-0 :: Critical vulnerabilities in Polycom RealPresence Resource Manager (RPRM) allow surveillance on conferences
  • From: SEC Consult Vulnerability Lab
• ESA-2015-097: EMC Secure Remote Services (ESRS) Virtual Edition (VE) Multiple Security Vulnerabilities
  • From: Security Alert
• CVE-2015-3931 Microsec e-Szigno, CVE-2015-3932 Netlock Mokka XSW vulnerability
  • From: Imre RAD
• Cisco Security Advisory: Multiple Default SSH Keys Vulnerabilities in Cisco Virtual WSA, ESA, and SMA
  • From: Cisco Systems Product Security Incident Response Team
• ESA-2015-102: EMC Unisphere for VMAX Remote Code Execution Vulnerability
  • From: Security Alert
• Netgear Prosafe VPN Firewalls - Multiple vulnerabilities
  • From: post
• [ERPSCAN-15-011] SAP Mobile Platform 3.0 - XXE
  • From: Darya Maenkova
• [ERPSCAN-15-008] SAP Afaria 7 XcListener - DoS in the module XeClient.Dll
  • From: Darya Maenkova
• [ERPSCAN-15-010] SYBASE SQL Anywhere 12 and 16 - DoS
  • From: Darya Maenkova
• [ERPSCAN-15-009] SAP Afaria 7 XcListener - Missing authorization check
  • From: Darya Maenkova
• [ERPSCAN-15-007] SAP Management Console ReadProfile Parameters - Information disclosure
  • From: Darya Maenkova
• [ERPSCAN-15-005] SAP Mobile Platform - XXE
  • From: Darya Maenkova
• [ERPSCAN-15-006] SAP NetWeaver Portal ReportXmlViewer - XXE
  • From: Darya Maenkova
• [ERPSCAN-15-004] SAP NetWeaver Portal XMLValidationComponent - XXE
  • From: Darya Maenkova
• [ERPSCAN-15-003] SAP NetWeaver Dispatcher Buffer Overflow - RCE, DoS
  • From: Darya Maenkova
• [SECURITY] [DSA 3295-1] cacti security update
  • From: Salvatore Bonaccorso
• CVE-2015-4464 Insufficient Authorization Checks Request Handling Remote Authentication Bypass for Kguard Digital Video Recorders
  • From: Federick Joe P Fajardo
• CVE-2015-3443 XSS in Thycotic Secret Server version 8.6.000000 to 8.8.000004
  • From: Marco Delai
• [SECURITY] [DSA 3294-1] wireshark security update
  • From: Moritz Muehlenhoff
• ESA-2015-110: EMC Documentum Thumbnail Server Directory Traversal Vulnerability
  • From: Security Alert
• ESA-2015-109: EMC Documentum D2 Cross-Site Scripting
  • From: Security Alert
• KMPlayer 3.9.1.136 Capture Unicode Buffer Overflow (ASLR Bypass)
  • From: n4ser . farhadi
• [security bulletin] HPSBMU03356 rev.1 - HP Business Service Automation Essentials (BSAE) running TLS, Remote Disclosure of Information
  • From: security-alert
• The "localhosed" attack - stealing IE local machine cookies and exposing its internal IP address
  • From: Amit Klein
• ManageEngine Asset Explorer v6.1 - Persistent Vulnerability
  • From: Vulnerability Lab
• [oCERT-2015-008] FreeRADIUS insufficent CRL application
  • From: Andrea Barisani
• GeniXCMS XSS Vulnerabilities
  • From: apparitionsec
• mysql-lite-administrator XSS vulnerabilities
  • From: apparitionsec
• mysql-lite-administrator XSS vulnerabilities
  • From: apparitionsec
• [SECURITY] [DSA 3293-1] pyjwt security update
  • From: Alessandro Ghedini
• [CVE-2015-3188] Apache Storm remote code execution vulnerability
  • From: P. Taylor Goetz
• Ebay Magento Bug Bounty #12 - Cross Site Request Forgery Web Vulnerability
  • From: Vulnerability Lab
• Ebay Magento Bug Bounty #17 - Client Side Cross Site Scripting Web Vulnerability
  • From: Vulnerability Lab
• Ebay Magento Bug Bounty #10 - Persistent Filename Vulnerability
  • From: Vulnerability Lab
• ZTE ZXV10 W300 v3.1.0c_DR0 - UI Session Delete Vulnerability
  • From: Vulnerability Lab
• ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities
  • From: Vulnerability Lab
• [SECURITY] [DSA 3292-1] cinder security update
  • From: Sebastien Delafond
• DUO Security push Timing Attack
  • From: jpierini
• [SECURITY] [DSA 3291-1] drupal7 security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 3290-1] linux security update
  • From: Ben Hutchings
• [security bulletin] HPSBGN03338 rev.1 - HP Service Manager running RC4, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBGN03350 rev.1 - HP SiteScope Using RC4, Remote Disclosure of Information
  • From: security-alert
• VCE3570: VCE Vision(TM) Intelligent Operations Cryptographic and Cleartext Vulnerabilities
  • From: VCE - PSIRT
• Reflected Cross-Site Scripting (XSS) in SearchBlox
  • From: High-Tech Bridge Security Research
• OS Command Injection in Vesta Control Panel
  • From: High-Tech Bridge Security Research
• ESA-2015-043: RSA® Validation Manager Security Update for Multiple Vulnerabilities
  • From: Security Alert
• ESA-2015-106: EMC Unified Infrastructure Manager/Provisioning (UIM/P) Authentication Bypass Vulnerability
  • From: Security Alert
• BlackCat CMS v1.1.1 Arbitrary File Download Vulnerability
  • From: d4rkr0id
• [SECURITY] [DSA 3289-1] p7zip security update
  • From: Ben Hutchings
• [RT-SA-2015-002] SQL Injection in TYPO3 Extension Akronymmanager
  • From: RedTeam Pentesting GmbH
• WebdesignJiNi Cms Sql Injection Vulnerability
  • From: iedb . team
• Productsurf Cms Sql Injection Vulnerability
  • From: iedb . team
• [SECURITY] [DSA 3252-2] sqlite3 security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3288-1] libav security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3287-1] openssl security update
  • From: Alessandro Ghedini
• Buffer Overflow in My Wifi Router Software
  • From: sudson08
• [SECURITY] [DSA 3286-1] xen security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3285-1] qemu-kvm security update
  • From: Salvatore Bonaccorso
• [slackware-security] openssl (SSA:2015-162-01)
  • From: Slackware Security Team
• FreeBSD Security Advisory FreeBSD-SA-15:10.openssl
  • From: FreeBSD Security Advisories
• [SYSS-2015-020] ZENWorks Mobile Management - Cross-Site Scripting
  • From: ludwig . stage
• ZCMS SQL Injection & Persistent XSS
  • From: apparitionsec
• [slackware-security] php (SSA:2015-162-02)
  • From: Slackware Security Team
• Nakid-CMS CSRF, Persistent XSS & LFI
  • From: apparitionsec
• [KIS-2015-03] Concrete5 <= 5.7.4 (Access.php) SQL Injection Vulnerability
  • From: Egidio Romano
• [KIS-2015-02] Concrete5 <= 5.7.3.1 Multiple Reflected Cross-Site Scripting Vulnerabilities
  • From: Egidio Romano
• [KIS-2015-01] Concrete5 <= 5.7.3.1 (sendmail) Remote Code Execution Vulnerability
  • From: Egidio Romano
• Remote file upload vulnerability in aviary-image-editor-add-on-for-gravity-forms v3.0beta Wordpress plugin
  • From: Larry W. Cashdollar
• Cisco Security Advisory: Cisco IOS XR Software Crafted IPv6 Packet Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• D-Link DSP-W110 - multiple vulnerabilities
  • From: Peter Adkins
• [security bulletin] HPSBUX03337 SSRT102066 rev.1 - HP-UX Apache Web Server Suite running Apache Web Server, Tomcat v6.x, or PHP v5.4.x, Remote Denial of Service (DoS) and Other Vulnerabilities
  • From: security-alert
• Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0
  • From: Larry W. Cashdollar
• XSS vulnerability Adobe Connect 9.3 (CVE-2015-0343 )
  • From: stasvolfus
• Heroku Bug Bounty #2 - (API) Re Auth Session Bypass Vulnerability
  • From: Vulnerability Lab
• Use-After-Free in PHP
  • From: High-Tech Bridge Security Research
• Multiple Vulnerabilities in ISPConfig
  • From: High-Tech Bridge Security Research
• Arbitrary File Disclosure and Open Redirect in Bonita BPM
  • From: High-Tech Bridge Security Research
• [RT-SA-2015-004] Alcatel-Lucent OmniSwitch Web Interface Cross-Site Request Forgery
  • From: RedTeam Pentesting GmbH
• [RT-SA-2015-003] Alcatel-Lucent OmniSwitch Web Interface Weak Session ID
  • From: RedTeam Pentesting GmbH
• [security bulletin] HPSBUX03341 SSRT102068 rev.1 - HP-UX Apache Tomcat v7.x, Remote Denial of Service (DoS) and Other Vulnerabilities
  • From: security-alert
• Elasticsearch vulnerability CVE-2015-4165
  • From: Kevin Kluge
• Kibana vulnerability CVE-2015-4093
  • From: Kevin Kluge
• Logstash vulnerability CVE-2015-4152
  • From: Kevin Kluge
• [SECURITY] [DSA 3283-1] cups security update
  • From: Salvatore Bonaccorso
• [security bulletin] HPSBMU03349 rev.1- HP Helion CloudSystem, Local Denial of Service (DoS), Arbitrary Code Execution
  • From: security-alert
• [security bulletin] HPSBST03346 rev.1 - HP P6000 Command View Software running Jetty, Remote Denial of Service (DoS)
  • From: security-alert
• NEW VMSA-2015-0004 - VMware Workstation, Fusion and Horizon View Client updates address critical security issues
  • From: VMware Security Response Center
• CFP The 2nd International Conference on Information Systems Security and Privacy ICISSP 2016
  • From: icissp . secretariat
• SilverStripe CMS Unvalidated Redirect & XSS vulnerabilities
  • From: apparitionsec
• SilverStripe CMS Unvalidated Redirect & XSS vulnerabilities
  • From: apparitionsec
• Symphony CMS XSS Vulnerability [Corrected Post]
  • From: apparitionsec
• [SECURITY] [DSA 3282-1] strongswan security update
  • From: Yves-Alexis Perez
• Symphony CMS XSS Vulnerability
  • From: apparitionsec
• AnimaGallery 2.6 (theme and lang cookie parameter) Local File Include Vulnerability
  • From: d4rkr0id
• [SECURITY] [DSA 3281-1] Debian Security Team PGP/GPG key change notice
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 3280-1] php5 security update
  • From: Moritz Muehlenhoff
• Hardcoded AES 256 bit key used in Kankun IoT/Smart socket and its mobile App
  • From: Payatu Research
• [SECURITY] [DSA 3279-1] redis security update
  • From: Alessandro Ghedini
• Symphony CMS 2.6.2
  • From: apparitionsec
• CVE-2015-4010 - Cross-site Request Forgery & Cross-site Scripting in Encrypted Contact Form Wordpress Plugin v1.0.4
  • From: venkatesh . nitin
• Xloner v3.1.2 wordpress plugin authenticated command execution and XSS
  • From: Larry W. Cashdollar
• Expedia Product Security Advisory: Cruise Ship Centers Information Disclosure
  • From: Mike Sheward
• CVE-2015-4109 - WordPress Users Ultra Plugin [SQL injection]
  • From: pan . vagenas
• 1 Click Extract Audio v2.3.6 - Activex Buffer Overflow
  • From: Vulnerability Lab
• 1 Click Audio Converter v2.3.6 - Activex Buffer Overflow
  • From: Vulnerability Lab
• 1 Click Audio Converter v2.3.6 - Activex Buffer Overflow
  • From: Vulnerability Lab
• Wing FTP Server Remote Code Execution vulnerability
  • From: alex_haynes
• [CVE-2015-4108] Wing FTP Server Cross-site Request Forgery vulnerabilities
  • From: alex_haynes
• [CVE-2015-4107] Wing FTP Server Remote Code Execution vulnerability
  • From: alex_haynes
• CA20150604-01: Security Notice for CA Common Services
  • From: Kotas, Kevin J
• [security bulletin] HPSBGN03343 rev.1 - HP WebInspect, Remote Unauthorized Access
  • From: security-alert
• CVE-2015-4153 - WordPress zM Ajax Login & Register Plugin [Local File Inclusion]
  • From: pan . vagenas
• IBM Watson (Cognea) - XSS and Redirect Vulnerabilities
  • From: jerold
• [Multiple CVE's]: various critical vulnerabilities in SysAid Help Desk (RCE, file download, DoS, etc)
  • From: Pedro Ribeiro
• [SECURITY] [DSA 3278-1] libapache-mod-jk security update
  • From: Markus Koschany
• ESA-2015-091: RSA® Web Threat Detection Cross-Site Request Forgery Vulnerability
  • From: Security Alert
• Local PHP File Inclusion in ResourceSpace
  • From: High-Tech Bridge Security Research
• Jildi FTP Client 1.5.2 b1138 - Buffer Overflow Vulnerability
  • From: banana88
• Safari Address Spoofing - Impact, Code, How It Works, History
  • From: David Leo
• [SECURITY] [DSA 3249-2] jqueryui security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 3277-1] wireshark security update
  • From: Moritz Muehlenhoff
• WebDrive 12.2 (B4172) - Buffer Overflow Vulnerability
  • From: Vulnerability Lab
• vfront-0.99.2 CSRF & Persistent XSS
  • From: apparitionsec
• Enhanced SQL Portal 5.0.7961 XSS Vulnerability
  • From: apparitionsec
• Freebox OS Web interface 3.0.2 XSS, CSRF
  • From: huyngocbk
• t2'15: Call for Papers 2015 (Helsinki / Finland)
  • From: Tomi Tuominen
• CVE-2015-4039 - WordPress WP Membership plugin [Stored XSS]
  • From: pan . vagenas
• CVE-2015-4038 - WordPress WP Membership plugin [Privilege escalation]
  • From: pan . vagenas
• WebDrive Buffer OverFlow PoC
  • From: banana88
• Ektron CMS 9.10 SP1 - XSS Vulnerability
  • From: jerold
• Ektron CMS 9.10 SP1 - CSRF Vulnerability
  • From: jerold
• [SECURITY] [DSA 3276-1] symfony security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3269-2] postgresql-9.1 regression update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3275-1] fusionforge security update
  • From: Salvatore Bonaccorso
• [security bulletin] HPSBMU03223 rev.1 - HP Insight Control server provisioning running SSLv3, Remote Denial of Service (DoS), Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBMU03261 rev.2 - HP Systems Insight Manager running OpenSSL on Linux and Windows, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBMU03267 rev.2 - HP Matrix Operating Environment and HP CloudSystem Matrix running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBMU03263 rev.3 - HP Insight Control running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBGN03332 rev.1 - HP Operations Analytics running SSLv3, Remote Denial of Service (DoS), Disclosure of Information
  • From: security-alert
• JSPMyAdmin SQL Injection, CSRF & XSS Vulnerabilities
  • From: apparitionsec
• [SECURITY] [DSA 3274-1] virtualbox security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBHF03340 rev.1 - HP ThinPro Linux and HP Smart Zero Core running HP Easy Setup Wizard, Local Unauthorized Access, Elevation of Privilege
  • From: security-alert
• Audacity 2.0.5 contains Arbitrary DLL Injection Code Execution
  • From: mystyle_rahul
• CVE-2015-1835: ...
  • From: Dirk-Willem van Gulik on behalf of Apache Cordova
• [SEARCH-LAB advisory] More than fifty vulnerabilities in D-Link NAS and NVR devices
  • From: Gergely Eberhardt
• DbNinja 3.2.6 Flash XSS Vulnerabilities
  • From: apparitionsec
• DbNinja 3.2.6 Flash XSS Vulnerabilities
  • From: apparitionsec
• [Onapsis Security Advisory 2015-006] SAP HANA Information Disclosure via SQL IMPORT FROM statement
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2015-007] SAP HANA Log Injection Vulnerability
  • From: Onapsis Research Labs
• Thycotic Password Manager Secret Server iOS Application - MITM SSL Certificate Vulnerability
  • From: David Coomber
• [SECURITY] [DSA 3268-2] ntfs-3g security update
  • From: Salvatore Bonaccorso
• CVE-2015-4084 - WordPress Free Counter Plugin [Stored XSS]
  • From: pan . vagenas
• [SECURITY] [DSA 3273-1] tiff security update
  • From: Moritz Muehlenhoff
• Synology Photo Station multiple Cross-Site Scripting vulnerabilities
  • From: Securify B.V.
• Reflected Cross-Site Scripting in Synology DiskStation Manager
  • From: Securify B.V.
• Command injection vulnerability in Synology Photo Station
  • From: Securify B.V.
• [SECURITY] [DSA 3265-2] zendframework regression update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3272-1] ipsec-tools security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3271-1] nbd security update
  • From: Alessandro Ghedini
• [security bulletin] HPSBGN03325 rev.1 - HP SiteScope, Remote Elevation of Privilege
  • From: security-alert
• [CORE-2015-0010] - Sendio ESP Information Disclosure Vulnerability
  • From: CORE Advisories Team
• [SECURITY] [DSA 3270-1] postgresql-9.4 security update
  • From: Christoph Berg
• [SECURITY] [DSA 3268-1] ntfs-3g security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3267-1] chromium-browser security update
  • From: Michael Gilbert
• [security bulletin] HPSBMU03336 rev.1- HP Helion OpenStack affected by VENOM, Denial of Service (DoS), Execution of Arbitrary Code
  • From: security-alert
• CVE-2015-4038 - WordPress WP Membership plugin [Privilege escalation]
  • From: pan . vagenas
• CVE-2015-4039 - WordPress WP Membership plugin [Stored XSS]
  • From: pan . vagenas
• [SECURITY] [DSA 3266-1] fuse security update
  • From: Salvatore Bonaccorso
• Webgrind XSS vulnerability
  • From: hyp3rlinx
• CVE-2015-1833 (Jackrabbit WebDAV XXE vulnerability)
  • From: Julian Reschke
• CVE for Apple's ECDHE-ECDSA SecureTransport bug?
  • From: Jeffrey Walton
• [SECURITY] [DSA 3261-2] libmodule-signature-perl regression update
  • From: Salvatore Bonaccorso
• [security bulletin] HPSBUX03333 SSRT102029 rev.1 - HP-UX Running NTP, Remote Denial of Service (DoS), or Other Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBUX03334 SSRT102000 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS) and Other Vulnerabilities
  • From: security-alert
• Eisbär SCADA (All Versions - iOS, Android & W8) - Persistent UI Vulnerability
  • From: Vulnerability Lab
• Stored XSS in WP Photo Album Plus WordPress Plugin
  • From: High-Tech Bridge Security Research
• WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 3265-1] zendframework security update
  • From: David Prévot
• Staff FTP v3.04 Software - DLL Hijacking Vulnerability
  • From: Vulnerability Lab
• HiDisk 2.4 iOS - (currentFolderPath) Persistent Vulnerability
  • From: Vulnerability Lab
• ManageEngine EventLog Analyzer V:10.0 CSRF Vulnerability
  • From: akashchavan0708
• Staff FTP v3.04 Software - DLL Hijacking Vulnerability
  • From: metacom27
• [SECURITY] [DSA 3263-1] proftpd-dfsg security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 3264-1] icedove security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBGN03286 rev.1 - HP LoadRunner, Buffer Overflow
  • From: security-alert
• APPLE-SA-2015-05-19-1 Watch OS 1.0.1
  • From: Apple Product Security
• [security bulletin] HPSBPI03322 rev.1 - HP Access Control Software, Local Unauthorized Access
  • From: security-alert
• WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability
  • From: metacom27
• [SECURITY] [DSA 3175-2] kfreebsd-9 security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3262-1] xen security update
  • From: Moritz Muehlenhoff
• OYO File Manager 1.1 iOS&Android - Multiple Vulnerabilities
  • From: Vulnerability Lab
• iClassSchedule 1.6 iOS & Android - Persistent UI Vulnerability
  • From: Vulnerability Lab
• Wireless Photo Transfer v3.0 iOS - File Include Vulnerability
  • From: Vulnerability Lab
• CRUCMS Crucial Networking - SQL Injection Vulnerability
  • From: Vulnerability Lab
• [slackware-security] mozilla-thunderbird (SSA:2015-137-01)
  • From: Slackware Security Team
• ESA-2015-087 EMC Document Sciences xPression SQL Injection Vulnerability
  • From: Security Alert
• [SECURITY] [DSA 3261-1] libmodule-signature-perl security update
  • From: Salvatore Bonaccorso
• [SE-2014-02] Unconfirmed / unpatched vulnerabilities in Google App Engine
  • From: Security Explorations
• phpMyAdmin 4.4.6 Man-In-the-Middle API Github
  • From: submit
• [SECURITY] CVE-2014-7810: Apache Tomcat Security Manager Bypass
  • From: Mark Thomas
• SEC Consult SA-20150514-0 :: Multiple vulnerabilities in Loxone Smart Home (part 2)
  • From: SEC Consult Vulnerability Lab
• Sidu 5.2 Admin XSS Vulnerability
  • From: apparitionsec
• Certificate trust vulnerability in Websense Content Gateway
  • From: Steve Shockley
• Server buffer overflow in Pure Faction <= 3.0c
  • From: soulsgetnothing
• [SECURITY] [DSA 3260-1] iceweasel security update
  • From: Moritz Muehlenhoff
• [CORE-2015-0009] - SAP LZC/LZH Compression Multiple Vulnerabilities
  • From: CORE Advisories Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence TC and TE Software
  • From: Cisco Systems Product Security Incident Response Team
• Web India Solutions CMS 2015 - SQL Injection Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 3259-1] qemu security update
  • From: Moritz Muehlenhoff
• Concrete5 Security Advisory - Multiple XSS Vulnerabilities - CVE-2015-2250
  • From: Onur Yilmaz
• Cisco Security Advisory: Command Injection Vulnerability in Multiple Cisco TelePresence Products
  • From: Cisco Systems Product Security Incident Response Team
• SEC Consult SA-20150513-0 :: Multiple critical vulnerabilities in WSO2 Identity Server
  • From: SEC Consult Vulnerability Lab
• [slackware-security] mozilla-firefox (SSA:2015-132-04)
  • From: Slackware Security Team
• [SECURITY] [DSA 3258-1] quassel security update
  • From: Alessandro Ghedini
• [security bulletin] HPSBMU03330 rev.1 - HP Matrix Operating Environment (MOE) running glibc on Linux, Remote Disclosure of Information
  • From: security-alert
• [slackware-security] mysql (SSA:2015-132-02)
  • From: Slackware Security Team
• [slackware-security] wpa_supplicant (SSA:2015-132-03)
  • From: Slackware Security Team
• [slackware-security] mariadb (SSA:2015-132-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 3257-1] mercurial security update
  • From: Salvatore Bonaccorso
• [security bulletin] HPSBGN03329 rev.1 - HP SDN VAN Controller, Remote Denial of Service (DoS), Distributed Denial of Service (DDoS)
  • From: security-alert
• [oCERT-2015-006] dcraw input sanitization errors
  • From: Andrea Barisani
• [SECURITY] [DSA 3256-1] libtasn1-6 security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3255-1] zeromq3 security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3254-1] suricata security update
  • From: Salvatore Bonaccorso
• Sqlbuddy Path Traversal Vulnerability
  • From: hyp3rlinx
• Sqlbuddy Directory Traversal Read Arbitrary Files Vulnerability
  • From: apparitionsec
• [security bulletin] HPSBGN03328 rev.1 - Network Virtualization for HP LoadRunner and Performance Center, Remote Information Disclosure
  • From: security-alert
• Pimcore v3.0.5 CMS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• [ MDVSA-2015:232 ] libtasn1
  • From: security
• [SECURITY] [DSA 3251-2] dnsmasq regression update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3253-1] pound security update
  • From: Thijs Kinkhorst
• CSRF/XSS In Ad_Button Wordpress
  • From: kingkaustubh
• CSRF/XSS in embed-articles Wordpress Plugin
  • From: kingkaustubh
• [security bulletin] HPSBUX03194 rev.1 - HP-UX running sendmail(1M), Remote Disclosure of Information
  • From: security-alert
• Grindr v2.1.1 iOS & Account System - Breach Attack Vulnerability
  • From: Vulnerability Lab
• Album Streamer v2.0 iOS - Directory Traversal Vulnerability
  • From: Vulnerability Lab
• Yahoo eMarketing Bug Bounty #31 - Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• Wordpress Twenty Fifteen Theme - DOM XSS Vulnerability - CVE-2015-3429
  • From: Onur Yilmaz
• [ MDVSA-2015:231 ] perl-XML-LibXML
  • From: security
• [SYSS-2015-018] BullGuard Premium Protection - Authentication Bypass
  • From: matthias . deeg
• [SYSS-2015-019] BullGuard Antivirus - Authentication Bypass
  • From: matthias . deeg
• [SYSS-2015-017] BullGuard Internet Security - Authentication Bypass
  • From: matthias . deeg
• F5 ASM JSON Profile Bypass
  • From: Peter Lapp
• APPLE-SA-2015-05-06-1 Safari 8.0.6, Safari 7.1.6, and Safari 6.2.6
  • From: Apple Product Security
• [SE-2014-02] Some additional GAE Java security sandbox bypasses
  • From: Security Explorations
• Alienvault OSSIM/USM Multiple Vulnerabilities
  • From: Peter Lapp
• [SECURITY] [DSA 3252-1] sqlite3 security update
  • From: Moritz Muehlenhoff
• CSRF/XSS In Ultimate Profile Builder by CMSLive Wordpress Plugin
  • From: kingkaustubh
• CSRF/XSS In ClickBank ads Wordpress Plugin
  • From: kingkaustubh
• CSRF/XSS In Manage Engine Asset Explorer
  • From: kingkaustubh
• CSRF/XSSIn Ad_InSerter Wordpress
  • From: kingkaustubh
• CSRF/XSS In Embed ArticlesWordpress Plugin
  • From: kingkaustubh
• Cisco Security Advisory: Cisco UCS Central Software Arbitrary Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Advisory: Filezilla FTP server is vulnerable to FTP PORT bounce
  • From: Amit Klein
• TORNADO Computer Trading CMS - SQL Injection Vulnerability
  • From: Vulnerability Lab
• PDF Converter & Editor 2.1 iOS - File Include Vulnerability
  • From: Vulnerability Lab
• [ MDVSA-2015:230 ] squid
  • From: security
• [ MDVSA-2015:229 ] net-snmp
  • From: security
• [ MDVSA-2015:228 ] nodejs
  • From: security
• Arbitrary Variable Overwrite in eShop WordPress Plugin
  • From: High-Tech Bridge Security Research
• [SECURITY] CVE-2014-0230: Apache Tomcat DoS
  • From: Mark Thomas
• F5 BIG-IQ Enumeration of users and Information Disclosure
  • From: jplopezy
• [SECURITY] [DSA 3251-1] dnsmasq security update
  • From: Salvatore Bonaccorso
• [ MDVSA-2015:227 ] mariadb
  • From: security
• Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• vPhoto-Album v4.2 iOS - File Include Web Vulnerability
  • From: Vulnerability Lab
• [CVE-2014-8146/8147] - ICU heap and integer overflows / I-C-U-FAIL
  • From: Pedro Ribeiro
• [SECURITY] [DSA 3250-1] wordpress security update
  • From: Alessandro Ghedini
• ESA-2015-084: EMC AutoStart Packet Injection Vulnerability
  • From: Security Alert
• European Cyber Security Challenge 2015
  • From: Ivan Buetler
• [ MDVSA-2015:226 ] fcgi
  • From: security
• ESA-2015-077: EMC SourceOne Email Management Account Lockout
  • From: Security Alert
• [ MDVSA-2015:225 ] cherokee
  • From: security
• [ MDVSA-2015:224 ] ruby
  • From: security
• [ MDVSA-2015:223 ] directfb
  • From: security
• [ MDVSA-2015:222 ] ppp
  • From: security
• [ MDVSA-2015:221 ] clamav
  • From: security
• [SECURITY] [DSA 3249-1] jqueryui security update
  • From: Sebastien Delafond
• [ MDVSA-2015:219 ] curl
  • From: security
• [ MDVSA-2015:220 ] curl
  • From: security
• HUAWEI MobiConnect 23.9.17.216 - Privilege Escalation Vulnerability
  • From: Vulnerability Lab
• Cisco (Newsroom) - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• Grindr v2.1.1 iOS Bounty #1 - (Session) Auth Bypass Vulnerabilities
  • From: Vulnerability Lab
• Grindr v2.1.1 iOS - (eMail) Session Vulnerability
  • From: Vulnerability Lab
• Grindr 2.1.1 iOS Bug Bounty #2 - Denial of Service Software Vulnerability
  • From: Vulnerability Lab
• PhotoWebsite v3.1 iOS - File Include Web Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 3248-1] libphp-snoopy security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3247-1] ruby2.1 security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3246-1] ruby1.9.1 security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3245-1] ruby1.8 security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3244-1] owncloud security update
  • From: Salvatore Bonaccorso
• Code Injection in Epicor Retail Store 3.2.03.01.008
  • From: webmaster
• [SECURITY] [DSA 3243-1] libxml-libxml-perl security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3242-1] chromium-browser security update
  • From: Michael Gilbert
• SevDesk v1.1 iOS - Persistent Dashboard Vulnerability
  • From: Vulnerability Lab
• [SYSS-2014-007] FrontRange DSM - Multiple Vulnerabilities
  • From: matthias . deeg
• [ MDVSA-2015:218 ] glibc
  • From: security
• [ MDVSA-2015:217 ] sqlite3
  • From: security
• [SECURITY] [DSA 3241-1] elasticsearch security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBGN03324 rev.1 - HP Business Service Automation Essentials Core, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBGN03323 rev.1 - HP Business Service Automation Essentials Core with JBOSS, Remote Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 3239-1] icecast2 security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3240-1] curl security update
  • From: Alessandro Ghedini
• ESA-2015-078: RSA® Identity Management and Governance (IMG) Insecure Password Reset Vulnerability
  • From: Security Alert
• [security bulletin] HPSBMU03241 rev.1 - HP Network Automation running SSLv3, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBUX03320 SSRT101952 rev.1 - HP-UX CIFS Server (Samba), Remote Denial of Service (DoS), Execution of Arbitrary Code, Unauthorized Access
  • From: security-alert
• [ MDVSA-2015:216 ] ntop
  • From: security
• [ MDVSA-2015:214 ] libksba
  • From: security
• [ MDVSA-2015:215 ] t1utils
  • From: security
• [ MDVSA-2015:213 ] lftp
  • From: security
• [oCERT-2015-003] MySQL SSL/TLS downgrade
  • From: Andrea Barisani
• Multiple Vulnerabilities in TheCartPress WordPress plugin
  • From: High-Tech Bridge Security Research
• CSRF & XSS Wing FTP Server Admin <= v4.4.5
  • From: apparitionsec
• PayPal Inc Bug Bounty #114 - JDWP Remote Code Execution Vulnerability
  • From: Vulnerability Lab
• SonicWall SonicOS 7.5.0.12 & 6.x - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab