[slackware-security] mariadb (SSA:2018-309-01)

2018-11-05 Thread Slackware Security Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [slackware-security] mariadb (SSA:2018-309-01) New mariadb packages are available for Slackware 14.1 and 14.2 to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: +--+

KL-001-2018-009 : Dell OpenManage Network Manager Multiple Vulnerabilities

2018-11-05 Thread KoreLogic Disclosures
KL-001-2018-009 : Dell OpenManage Network Manager Multiple Vulnerabilities Title: Dell OpenManage Network Manager Multiple Vulnerabilities Advisory ID: KL-001-2018-009 Publication Date: 2018.11.05 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2018-009.txt 1.

Zoho ManageEngine OpManager 12.3 before 123222 has SQL Injection via Mail Server settings.

2018-11-05 Thread Hakan Bayır
I. VULNERABILITY - SQL Injection II. CVE REFERENCE - CVE-2018-18949 III. VENDOR - https://www.manageengine.com IV. TIMELINE - 09/10/18 Vulnerability discovered 09/10/18 Vendor contacted 02/11/2018