oss-security@lists.openwall.com

0

replies

Enigmail XSA issue with WKD and HTTP authentication

started 2018-12-07 20:43:02 UTC

2018-12-07 20:43:02 UTC

Hanno Böck

0

replies

[ANNOUNCE] Apache Ignite 2.7.0 Vulnerable Dependecies Updates

started 2018-12-07 20:06:27 UTC

2018-12-07 20:06:27 UTC

Dmitriy Pavlov

0

replies

CVE-2018-16867 QEMU: dev-mtp: path traversal in usb_mtp_write_data of the Media Transfer Protocol (MTP)

started 2018-12-06 15:08:32 UTC

2018-12-06 15:08:32 UTC

P J P

2

replies

PHP imap_open() script injection

started 2018-11-23 02:02:14 UTC

2018-12-06 01:44:20 UTC

s***@gmx.ch

0

replies

Multiple vulnerabilities in Jenkins

started 2018-12-05 15:18:04 UTC

2018-12-05 15:18:04 UTC

Daniel Beck

1

reply

UAF write in usb_audio_probe

started 2018-12-03 22:45:30 UTC

2018-12-04 17:48:20 UTC

Marcus Meissner

0

replies

PolicyKit: CVE-2018-19788: Improper handling of user with uid > INT_MAX leading to authentication bypass

started 2018-12-04 03:22:12 UTC

2018-12-04 03:22:12 UTC

Salvatore Bonaccorso

6

replies

fwd: [vs-plain] Kernel heap overflow in bpf leading to LPE (exploit provided)

started 2018-11-23 23:22:09 UTC

2018-12-02 13:50:22 UTC

Wei Wu

4

replies

memory safety bugs in bc

started 2018-11-28 18:31:45 UTC

2018-11-30 04:38:14 UTC

Daniel Kahn Gillmor

0

replies

CVE-2018-19665 Qemu: bt: integer overflow in Bluetooth routines allows memory corruption

started 2018-11-29 15:15:05 UTC

2018-11-29 15:15:05 UTC

P J P

0

replies

[CVE-2018-16477] Bypass vulnerability in Active Storage

started 2018-11-28 03:11:36 UTC

2018-11-28 03:11:36 UTC

Rafael Mendonça França

0

replies

[CVE-2018-16476] Broken Access Control vulnerability in Active Job

started 2018-11-28 03:06:36 UTC

2018-11-28 03:06:36 UTC

Rafael Mendonça França

0

replies

CVE-2018-19591: glibc if_nametoindex may not close descriptor

started 2018-11-28 03:04:31 UTC

2018-11-28 03:04:31 UTC

Florian Weimer

0

replies

CVE-2018-11766: Apache Hadoop privilege escalation vulnerability

started 2018-11-27 17:08:48 UTC

2018-11-27 17:08:48 UTC

Akira Ajisaka

6

replies

Crashes and memory safety bugs in dcraw

started 2018-11-23 14:22:17 UTC

2018-11-27 16:29:35 UTC

Marcus Meissner

0

replies

PowerDNS Security Advisory 2018-09

started 2018-11-26 22:14:58 UTC

2018-11-26 22:14:58 UTC

Remi Gacogne

0

replies

CVE-2018-19489 QEMU: 9pfs: crash due to race condition in renaming files

started 2018-11-26 11:49:29 UTC

2018-11-26 11:49:29 UTC

P J P

2

replies

catdoc: out of bounds heap read and nullpointer / segfault

started 2018-11-25 14:57:37 UTC

2018-11-25 20:18:53 UTC

Hanno Böck

0

replies

Path traversal in mozilla PDF.js [Unpatched]

started 2018-11-24 17:29:33 UTC

2018-11-24 17:29:33 UTC

Dhiraj Mishra

0

replies

CVE-2018-16862: Linux kernel: cleancache: deleted files infoleak

started 2018-11-23 21:20:49 UTC

2018-11-23 21:20:49 UTC

Vladis Dronov

0

replies

CVE-2018-8009: Apache Hadoop distributed cache archive vulnerability

started 2018-11-22 07:25:00 UTC

2018-11-22 07:25:00 UTC

Akira Ajisaka

0

replies

WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0008

started 2018-11-22 06:27:50 UTC

2018-11-22 06:27:50 UTC

Michael Catanzaro

0

replies

Arbitrary File Upload File Upload Vulnerability in php-traditional-server v1.2.2

started 2018-11-21 04:08:59 UTC

2018-11-21 04:08:59 UTC

Larry W. Cashdollar

0

replies

Arbitrary file upload vulnerability in jQuery Upload File v4.0.2

started 2018-11-21 04:07:09 UTC

2018-11-21 04:07:09 UTC

Larry W. Cashdollar

0

replies

Arbitrary file upload vulnerability in jQuery-Picture-Cut v1.1beta

started 2018-11-21 04:05:41 UTC

2018-11-21 04:05:41 UTC

Larry W. Cashdollar

0

replies

Xen Security Advisory 280 v2 - Fix for XSA-240 conflicts with shadow paging

started 2018-11-20 19:34:37 UTC

2018-11-20 19:34:37 UTC

Xen.org security team

0

replies

Xen Security Advisory 276 v2 - resource accounting issues in x86 IOREQ server handling

started 2018-11-20 19:32:46 UTC

2018-11-20 19:32:46 UTC

Xen.org security team

0

replies

Xen Security Advisory 277 v2 - x86: incorrect error handling for guest p2m page removals

started 2018-11-20 19:31:04 UTC

2018-11-20 19:31:04 UTC

Xen.org security team

0

replies

Xen Security Advisory 279 v2 - x86: DoS from attempting to use INVPCID with a non-canonical addresses

started 2018-11-20 19:26:28 UTC

2018-11-20 19:26:28 UTC

Xen.org security team

0

replies

Xen Security Advisory 275 v2 - insufficient TLB flushing / improper large page mappings with AMD IOMMUs

started 2018-11-20 19:26:23 UTC

2018-11-20 19:26:23 UTC

Xen.org security team