06 January 2009

• Drupal Services Module Insecure Signing Multiple Security Vulnerabilities
• ADbNewsSender SQL Injection and Cross-Site Scripting Vulnerabilities
• PECL Alternative PHP Cache Local Denial of Service
• Constructr CMS Directory Traversal
• OneOrZero Arbitrary File Upload
• phpCollab Multiple Input Validation Vulnerabilities
• Page Flip Image Gallery "getConfig.php" Information Disclosure
• Git gitweb "diff.external" Local Privilege Escalation

05 January 2009

• Courier-Authlib Non-Latin Character Handling Postgres SQL Injection
• Joomla Apps Volunteer Management Component "job_id" Parameter SQL Injection
• TYPO3 WEBERkommunal Facilities Extension Unspecified SQL Injection
• ClaSS "scripts/export.php" Information Disclosure
• Phpclanwebsite Multiple Input Validation Vulnerabilities
• TYPO3 WEC Discussion Extension SQL Injection and Cross-Site Scripting Vulnerabilities
• Linksys Wireless-G ADSL Gateway WAG54GS V2.0 Remote Buffer Overflow
• PowerStrip "pstrip.sys" Local Privilege Escalation
• TinyMCE "menuID" Parameter SQL Injection
• Tech Articles Joomla! Component
• MyPBS "seasonID" Parameter SQL Injection

31 December 2008

• Drupal Views Content Construction Kit SQL Injection
• TYPO3 Commerce Extension Unspecified SQL Injection
• TYPO3 Vox populi Unspecified Cross-Site Scripting
• TYPO3 DR Wiki Extension Unspecified Cross-Site Scripting
• YourPlace 1.0.2 Multiple Remote Vulnerabilities
• Netatalk Printing Request Arbitrary Command Injection
• ESET Smart Security "epfw.sys" Local Privilege Escalation
• GNU Classpath "gnu.java.security.util.PRNG" Class Entropy Weakness
• PHP Python Extension "safe_mode" Restriction Bypass
• Irrlicht B3D loader Buffer Overflow
• Adobe Flash Player Unspecified Remote Security
• Opera Web Browser HTML Parsing Heap-Based Remote Code Execution

30 December 2008

• myPHPscripts Login Session "login.php" Cross-Site Scripting
• Novell Identity Manager Multiple Cross-Site Scripting Vulnerabilities
• Qemu and KVM VNC Server Remote Denial of Service
• KnowledgeTree Multiple Unspecified Vulnerabilities
• Sun Java Web Start and Java Plug-in JAR File Privilege Escalation
• GpsDrive Multiple Insecure Temporary File Creation Vulnerabilities
• PDFjam Multiple Insecure Temporary File Creation Vulnerabilities
• Sun Solaris Name Service Cache Daemon (nscd(1M)) Local Privilege Escalation
• Sun Solaris IP Tunnel Param Local Code Execution
• FreeBSD netgraph and bluetooth Local Privilege Escalation Vulnerabilities
• Ubuntu "libvirt" Local Security Bypass
• freeSSHd SFTP Commands Multiple Remote Buffer Overflow Vulnerabilities
• Trend Micro HouseCall ActiveX Control Library File Remote Code Execution
• Trend Micro HouseCall ActiveX Control Remote Code Execution
• CoolPlayer Skin File Buffer Overflow

29 December 2008

• Platform: Web Application - Cross Site Scripting
• University Of Washington IMAP c-client Buffer Overflow
• PHP "mbstring" Extension Buffer Overflow
• webcamXP URL Directory Traversal

24 December 2008

• phpBB Account Re-Activation Authentication Bypass
• Sun Java System Portal Server Web Console Information Disclosure
• Sun Java System Portal Server Web Console Information Disclosure
• Avahi Multicast DNS Denial of Service
• IBM Tivoli Provisioning Manager Security Bypass
• MPlayer TwinVQ Handling Stack Buffer Overflow
• Sun Fire Servers IP Spoofing Security Bypass
• Sun Fire Servers IP Spoofing Security Bypass

23 December 2008

• Check Point SecurePlatform Unspecified Remote Security
• IBM WebSphere Portal and Workplace Web Content Management Unspecified Security Bypass
• Citrix Broadcast Server Unspecified SQL Injection
• Roundcube Webmail "preg_replace" Remote Code Execution
• Apple Mac OS X "natd" Remote Denial of Service
• Apple Mac OS X UDF ISO File Handling Denial of Service
• Apple Podcast Producer Authentication Bypass
• Apple Mac OS X 2008-008 Multiple Security Vulnerabilities
• Realtek Media Player Playlist Buffer Overflow
• Evans FTP "EvansFTP.ocx" ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities
• Microsoft Internet Explorer "Scripting.FileSystem" Security Bypass
• Internet Explorer 8 CSS XSS injection