27 July 2008

• V-webmail Multiple Remote File Include Vulnerabilities
• File Store PRO "download.php" SQL Injection
• Redmine Unspecified Cross-Site Scripting

26 July 2008

• CMME Cross-Site Scripting And Information Disclosure Vulnerabilities

25 July 2008

• phpBB Prior to 3.0.2 Unspecified Remote Issue
• Wysi Wiki Wyg "index.php" Local File Include
• eSyndiCat "register.php" Multiple Cross-Site Scripting Vulnerabilities
• phpDatingClub "website.php" Local File Include
• Xomol CMS "index.php" HTML Injection and Cross-Site Scripting Vulnerabilities
• V-webmail Multiple Remote File Include Vulnerabilities
• Avlc Forum "vlc_forum.php" SQL Injection
• Dreamlevels Dreampics Builder "page" Parameter SQL Injection
• Firebird Multiple Denial of Service and Information Disclosure Vulnerabilities
• eMule Operating System User Account Information Disclosure Weakness
• Sun Java Runtime Environment Multiple Security Vulnerabilities
• Sun Java Runtime Environment Virtual Machine Privilege Escalation
• Berkeley Yacc (byacc) "skeleton.c" Local Denial of Service

24 July 2008

• Xerox CentreWare Web Multiple SQL Injection and Cross-Site Scripting Vulnerabilities
• Drupal Multiple Vulnerabilities
• Million Pixels "tops_top.php" SQL Injection
• auraCMS "pages_data.php" Multiple SQL Injection Vulnerabilities
• Dreamlevels DreamNews "dreamnews-rss.php" SQL Injection
• BilboBlog Multiple Cross-Site Scripting Vulnerabilities
• Apple Safari Domain Extensions Insecure Cookie Access
• FFmpeg libavformat "psxstr.c" STR Data Heap-Based Buffer Overflow
• WeFi WEP Key Data Local Information Disclosure
• Sun Java SE Java Management Extensions (JMX) Unspecified Unauthorized Access
• Multiple Sophos Products MIME Attachments Denial of Service
• OP XAUTHORITY Variable Local Privilege Escalation

23 July 2008

• n-forms Joomla! "com_n-forms" Component SQL Injection
• Dokeos "user_portal.php" Local File Include
• Drupal OpenID Module Cross-Site Scripting and Request Forgery Vulnerabilities
• Hudson "q" Parameter Cross-Site Scripting
• Mozilla Firefox "chrome" Document Unspecified Script Injection Weakness
• Apple Safari HTTPS to HTTPS Referer Information Disclosure
• IBM Maximo "debug.jsp" HTML Injection And Information Disclosure Vulnerabilities
• IBM Data ONTAP Multiple Unspecified Vulnerabilities
• Sun Java Runtime Environment Font Processing Buffer Overflow
• Sun Java Runtime Environment XML Data Processing Multiple Vulnerabilities
• Novell eDirectory LDAP Service Search Parameters Heap Overflow
• ReSIProcate INVITE and OPTIONS Messages DNS Resolver Remote Denial of Service

22 July 2008

• WordPress "press-this.php" Multiple Cross-Site Scripting Vulnerabilities
• Mozilla Firefox URI Splitting Security Bypass
• Votorola Multiple Unspecified Security Vulnerabilities
• Sun Java Web Start Multiple Vulnerabilities
• Sun Java Runtime Environment Multiple Unspecified Same Origin Policy Violation Vulnerabilities
• Apple Xcode WebObjects "WOHyperlink" Information Disclosure
• newsx "read_article()" Buffer Overflow

21 July 2008

• GAPI CMS "toolbar.php" Remote File Include
• Zenphoto "Function.php" Request Logging HTML Injection
• Apple iPhone and iPod Touch Prior to Version 2.0 Multiple Remote Vulnerabilities
• Wireshark 1.0.1 Denial of Service
• Multiple Vendors Unspecified SVG File Processing Denial of Service
• WinRemotePC Packet Handling Remote Denial of Service
• Apple Xcode Core Image Fun House ".funhouse" File XML Data Handling Buffer Overflow
• Simple DNS Plus Unspecified Remote Denial of Service
• Black Ice Software Document Imaging SDK/ActiveX Remote Buffer Overflow
• Sina DLoader Class ActiveX Control "DonwloadAndInstall" Method Arbitrary File Download
• Empire Server Prior to 4.3.15 Multiple Unspecified Vulnerabilities
• Sun Java SE Secure Static Versioning Applet Execution Weakness
• Microsoft Internet Explorer New ActiveX Object String Concatenation Memory Corruption

19 July 2008

• Lastminute Script "index.php" SQL Injection

18 July 2008

• phPortal Multiple Remote File Include Vulnerabilities
• Mole Group Hotel Script "index.php" SQL Injection
• Joomla! and Mambo DBQuery Component "mosConfig_absolute_path" Remote File Include
• Boonex Dolphin Multiple Remote File Include Vulnerabilities
• ContentNow Multiple Remote Vulnerabilities
• phpwebnews "index.php" SQL Injection
• WebBlizzard CMS "index.php" SQL Injection

17 July 2008

• F5 FirePass SSL VPN SNMP Daemon Remote Denial of Service
• WebXell Editor "upload_pictures.php" Arbitrary File Upload
• Joomla! and Mambo altas Component "index.php" Multiple SQL Injection Vulnerabilities
• pHNews "comments.php" Local File Include
• Joomla! Prior to v1.5.4 Multiple Unauthorized Access Vulnerabilities
• Youngzsoft CMailServer "mvmail.asp" Multiple Buffer Overflow Vulnerabilities
• Joomla! and Mambo QuickTime VR Component "room_id" Parameter SQL Injection

16 July 2008

• Simple Machine Forum Prior to 1.1.5 and 1.0.13 Multiple Unspecified Vulnerabilities
• YourPlace Unspecified Authentication Bypass
• BrewBlogger "logincheck.inc.php" SQL Injection
• Mole Group Real Estate Script "index.php" SQL Injection
• PHP-Nuke 4ndvddb Module "id" Parameter SQL Injection
• Triton CMS Pro "X-Forwarded-For" Header SQL Injection
• phpwebnews "bukutamu.php" SQL Injection
• fuzzylime (cms) "rss.php" Local File Include
• Drupal Tinytax taxonomy block Module HTML Injection
• Zoph Cross-Site Scripting and SQL Injection Vulnerabilities
• trixbox "langChoice" Local File Include
• Joomla! and Mambo "com_is" Component Multiple SQL Injection Vulnerabilities

15 July 2008

• DodosMail "dodosmail.php" Local File Include
• Drupal Outline Designer Module "outline_designer.module" Security Bypass
• Xpoze "user.html" SQL Injection
• THELIA Arbitrary File Upload and Authentication Bypass Vulnerabilities
• MyBB Prior to 1.2.13 Multiple Unspecified Vulnerabilities
• Neutrino Atomic Edition Authentication Bypass
• Drupal Taxonomy Autotagger Module Multiple Input Validation Vulnerabilities
• Joomla! and Mambo Brightcode Weblinks Component "catid" Parameter SQL Injection
• XChangeboard "newThread.php" SQL Injection

14 July 2008

• CMS little "index.php" Local File Include
• SmartPPC "directory.php" SQL Injection
• 1024 CMS Multiple Remote and Local File Include Vulnerabilities
• fuzzylime (cms) "blog.php" Local File Include
• vBulletin "adminlog.php" Request Logging HTML Injection
• ImperialBB Remote File Upload
• BlognPlus "index.php" Multiple SQL Injection Vulnerabilities
• Adobe RoboHelp Server Help Errors Log Cross-Site Scripting
• Kasseler CMS "cid" parameter Cross-Site Scripting
• FreeStyle Wiki Unspecified Cross-Site Scripting

11 July 2008

• Drupal Organic Groups Cross-Site Scripting And Information Disclosure Vulnerabilities
• OllyDBG and ImpREC Export Name Buffer Overflow
• Poppler PDF Rendering Library Page Class Remote Code Execution
• PCRE Regular Expression Heap-Based Buffer Overflow
• Panda ActiveScan Unspecified Remote Code Execution
• Red Hat Certificate System rhpki-common Security Bypass Weakness
• Snapshot Viewer for Microsoft Access ActiveX Control Arbitrary File Download
• Microsoft Outlook Web Access for Exchange Server Email Field Cross-Site Scripting
• Microsoft Word Unspecified Remote Code Execution
• Microsoft Windows DNS Server Cache Poisoning
• Microsoft Windows Explorer saved-search File Remote Code Execution