|
|
Colapse all |
Post message
[security bulletin] MFSBGN03809 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF 2018-06-15 cyber-psrt microfocus com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Note: the current version of the following document is available here: https://softwaresupport.hpe.com/document/-/facetsearch/document/KM031800 66 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: KM03180066 Version: 1 MFSBGN03809 rev.1 [ more ] [ reply ] CA20180614-01: Security Notice for CA Privileged Access Manager 2018-06-15 Williams, Ken (Ken Williams ca com) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 CA20180614-01: Security Notice for CA Privileged Access Manager Issued: June 14th, 2018 Last Updated: June 14th, 2018 CA Technologies Support is alerting customers to multiple potential risks with CA Privileged Access Manager. Multiple vulnerabili [ more ] [ reply ] CALL FOR PAPERS - INTEL SECURITY CONFERENCE (iSecCon) 2018 2018-06-15 Branco, Rodrigo (rodrigo branco intel com) WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0005 2018-06-14 Michael Catanzaro (mcatanzaro igalia com) APPLE-SA-2018-06-13-01 Xcode 9.4.1 2018-06-13 Apple Product Security (product-security-noreply lists apple com) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2018-06-13-01 Xcode 9.4.1 Xcode 9.4.1 is now available and addresses the following: Git Available for: macOS High Sierra 10.13.2 or later Impact: Multiple issues in git, the most significant of which may lead to arbitrary code execution Des [ more ] [ reply ] Multiple Security Issues in Ecos Secure Boot Stick (SBS) 2018-06-13 Michael Rossberg (michael rossberg tu-ilmenau de) MULTIPLE SECURITY ISSUES IN ECOS SECURE BOOT STICK (SBS) - Software: Ecos Secure Boot Stick - Version: Stick Version 5.6.5, System Management Version 5.2.68 - Vendor Status: Vendor informed - Release Date: 13/06/2018 The latest version of this document may be downloaded from https://telem [ more ] [ reply ] Samsung Web Viewer for Samsung DVR Reflected Cross Site Scripting (XSS) CVE-2018-11689 2018-06-13 yavuz atlas (yavatlas gmail com) I. VULNERABILITY ------------------------- Samsung Web Viewer for Samsung DVR Reflected Cross Site Scripting (XSS) II. CVE REFERENCE ------------------------- CVE-2018-11689 III. REFERENCES ------------------------- https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-11689 IV. CREDIT ----------- [ more ] [ reply ] CSNC-2018-021 - Vert.x - HTTP Header Injection 2018-06-13 Advisories (advisories compass-security com) ############################################################# # # COMPASS SECURITY ADVISORY # https://www.compass-security.com/research/advisories/ # ############################################################# # # Product: Vert.x [1] # CSNC ID: CSNC-2018-021 # Subject: HTTP Header Injection [ more ] [ reply ] [SECURITY] [DSA 4227-1] plexus-archiver security update 2018-06-12 Salvatore Bonaccorso (carnil debian org) DefenseCode ThunderScan SAST Advisory: WordPress WP Google Map Plugin Multiple SQL injection Security Vulnerabilities 2018-06-12 Defense Code (defensecode defensecode com) DefenseCode ThunderScan SAST Advisory: WordPress WP Google Map Plugin Multiple SQL injection Security Vulnerabilities Advisory ID: DC-2018-05-002 Advisory Title: WordPress WP Google Map Plugin Multiple SQL injection Vulnerabilities Advisory URL: http://www.defensecode.com/advisories.php Sof [ more ] [ reply ] DefenseCode ThunderScan SAST Advisory: WordPress Ultimate Form Builder Lite Plugin Multiple Vulnerabilities (XSS and SQLi) 2018-06-12 Defense Code (defensecode defensecode com) DefenseCode ThunderScan SAST Advisory: WordPress Ultimate Form Builder Lite Plugin Multiple Vulnerabilities (XSS and SQLi) Advisory ID: DC-2018-05-009 Advisory Title: WordPress Ultimate Form Builder Lite Plugin Multiple Vulnerabilities (XSS and SQLi) Advisory URL: http://www.defensecode.com [ more ] [ reply ] AST-2018-008: PJSIP endpoint presence disclosure when using ACL 2018-06-11 Asterisk Security Team (security asterisk org) AST-2018-007: Infinite loop when reading iostreams 2018-06-11 Asterisk Security Team (security asterisk org) [SRP-2018-01] Reverse engineering tools for ST DVB chipsets (public release) 2018-06-08 Security Explorations (contact security-explorations com) Hello All, We have decided to release to the public domain our SRP-2018-01 security research project related to the security of STMicroelectronics chipsets. The research material (70+ pages long technical paper accompanied by two reverse engineering tools) can be downloaded from the SRP section o [ more ] [ reply ] SensioLabs Symfony version 3.3.6 - Cross-Site Scripting (Reflect) 2018-06-08 ch sangsakul gmail com SensioLabs Symfony version 3.3.6 - Cross-Site Scripting (Reflect) # Exploit Title: SensioLabs Symfony version 3.3.6 - Cross-Site Scripting (Reflect) # Date: 08-06-2018 # Software Link: https://symfony.com/ # Exploit Author: HaMM0nz (Chakrit S.), a member of KPMG Cyber Security team in Thailand # CV [ more ] [ reply ] [slackware-security] gnupg2 (SSA:2018-159-01) 2018-06-08 Slackware Security Team (security slackware com) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] gnupg2 (SSA:2018-159-01) New gnupg2 packages are available for Slackware 13.37, 14.0, 14.1, 14.2, and - -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patc [ more ] [ reply ] Gridbox extension for Joomla! <= 2.4.0 Reflected Cross Site Scripting (XSS) 2018-06-08 yavuz atlas (yavatlas gmail com) I. VULNERABILITY ------------------------- Gridbox extension for Joomla! <= 2.4.0 Reflected Cross Site Scripting (XSS) II. CVE REFERENCE ------------------------- CVE-2018-11690 III. VENDOR ------------------------- https://extensions.joomla.org/extension/gridbox/ IV. REFERENCES ----------------- [ more ] [ reply ] DefenseCode ThunderScan SAST Advisory: WordPress Form Maker Plugin Multiple Security Vulnerabilities 2018-06-07 Defense Code (defensecode defensecode com) DefenseCode ThunderScan SAST Advisory: WordPress Form Maker Plugin Multiple Security Vulnerabilities Advisory ID: DC-2018-05-001 Advisory Title: WordPress Form Maker Plugin Multiple Vulnerabilities Advisory URL: http://www.defensecode.com/advisories.php Software: WordPress Form Maker pl [ more ] [ reply ] DefenseCode ThunderScan SAST Advisory: WordPress Contact Form Maker Plugin Multiple Security Vulnerabilities 2018-06-07 Defense Code (defensecode defensecode com) DefenseCode ThunderScan SAST Advisory: WordPress Contact Form Maker Plugin Multiple Security Vulnerabilities Advisory ID: DC-2018-05-004 Advisory Title: WordPress Contact Form Maker Plugin Multiple Vulnerabilities Advisory URL: http://www.defensecode.com/advisories.php Software: Word [ more ] [ reply ] |
|
Privacy Statement |
Hash: SHA512
- ------------------------------------------------------------------------
-
Debian Security Advisory DSA-4229-1 security (at) debian (dot) org [email concealed]
https://www.debian.org/security/ Yves-Alexis Perez
June 14, 2018
[ more ] [ reply ]