10 August 2008

• XOOPS Local File Include and Cross-Site Scripting Vulnerabilities
• @Mail Multiple Local Information Disclosure Vulnerabilities
• European Performance Systems Probe Builder Unspecified Denial of Service

09 August 2008

• IceBB SQL Injection
• phpLinkat SQL Injection and Cookie Authentication Bypass Vulnerabilities
• PhpTest "picture.php" SQL Injection
• HRS Multi "picture_pic_bv.asp" SQL Injection
• E-topbiz Shopcart DX "product_detail.php" SQL Injection
• VisualPic Cross-Site Scripting
• Minix Psuedo Terminal Denial of Service

08 August 2008

• EPShop "pid" Parameter "index.php" SQL Injection
• phpwebnews-mysql Multiple SQL Injection Vulnerabilities
• Mobius Web Publishing Software Multiple SQL Injection Vulnerabilities
• FizzMedia "comment.php" SQL Injection
• Pre Survey Generator "default.asp" SQL Injection
• Camera Life "sitemap.xml.php" SQL Injection
• SocialEngine Multiple SQL Injection Vulnerabilities
• EasyBookMarker "ajaxp_backend.php" Cross-Site Scripting
• RealPlayer Unspecified Local Resource Reference
• IntelliTamper HTML "Server" Header Parsing Buffer Overflow
• OpenSSH "X11UseLocalhost" X11 Forwarding Session Hijacking

07 August 2008

• FipsCMS R Parameter "index.asp" SQL Injection
• EMC Centera Universal Access "username" Parameter SQL Injection
• MojoPersonals "mojoClassified.cgi" SQL Injection
• phpKF "forum_duzen.php" SQL Injection
• Multiple Century System XR Routers Cross-Site Request Forgery
• Links "only proxies" Unspecified Security
• Multiple Vendor DNS Protocol Insufficient Transaction ID Randomization DNS Spoofing
• Asterisk IAX2 Firmware Provisioning Packet Amplification Remote Denial of Service
• ZDaemon NULL Pointer Remote Denial of Service
• Asterisk IAX "POKE" Requests Remote Denial of Service
• EMC Retrospect Backup Client NULL Pointer Remote Denial of Service
• vsftpd FTP Server Pluggable Authentication Module (PAM) Remote Denial of Service
• GNU Coreutils "pam_succeed_if" PAM Local Authentication Bypass
• SUSE openSUSE x86_64 Kernel Unspecified Buffer Overflow
• SUSE openSUSE x86_64 Kernel Unspecified Buffer Overflow
• CoolPlayer M3U File Buffer Overflow

06 August 2008

• openSUSE "libxcrypt" Insecure Password Hash Weakness
• AVG Anti-Virus UPX File Parsing Denial of Service
• RealPlayer "rjbdll.dll" ActiveX Control "Import" Method Stack Buffer Overflow
• RealNetworks RealPlayer "rmoc3260.dll" ActiveX Control Multiple Memory Corruption Vulnerabilities
• Cygwin "setup.exe" Installation and Update Process Mirror Authenticity Verification

05 August 2008

• reSIProcate Multiple Unspecified Memory Corruption Vulnerabilities
• Eyeball MessengerSDK "CoVideoWindow.ocx" ActiveX Control Remote Buffer Overflow
• Trend Micro OfficeScan "ObjRemoveCtrl.dll" ActiveX Control Multiple Stack Overflow Vulnerabilities
• RealNetworks RealPlayer SWF File Heap-Based Buffer Overflow

04 August 2008

• EMC Retrospect Backup Client Password Hash Information Disclosure
• Outpost Security Suite Pro Filename Parsing Security Bypass
• PowerDVD ".m3u" and ".pls" File Multiple Buffer Overflow Vulnerabilities
• EMC Dantz Retrospect Backup Client "retroclient.exe" Remote Memory Corruption

01 August 2008

• PHPFootball "show.php" SQL Injection
• Afuse "afuse.c" Shell Command Injection
• Galatolo WebManager Cookie Authentication Bypass
• Aprox CMS Engine "index.php" SQL Injection
• Siteframe "folder.php" SQL Injection
• AlstraSoft Affiliate Network Pro "pgm" Parameter SQL Injection
• Community CMS "include.php" Remote File Include
• tplSoccerSite Multiple SQL Injection Vulnerabilities
• HockeySTATS Online "index.php" Multiple SQL Injection Vulnerabilities
• Arctic Issue Tracker "filter" Parameter SQL Injection
• SWAT 4 Multiple Denial of Service Vulnerabilities
• Lemon CMS "browser.php" Local File Include

31 July 2008

• phpScheduleIt "useLogonName" Security Bypass
• Zoph Multiple SQL Injection Vulnerabilities
• Claroline Multiple Unspecified Security Vulnerabilities
• FormEncode "chained_validators" Class Security Bypass
• Simple Machines Forum Multiple Unspecified "html-tag" and Random Generator Seeding Vulnerabilities
• OpenPro "search_wA.php" Remote File Include
• Evaria ECMS "DOCUMENT_ROOT" Parameter Multiple Remote File Include Vulnerabilities
• F-PROT Antivirus CHM File Remote Denial of Service
• Velocity Security Management System HTTP Server Directory Traversal
• phpFreeChat "demo21_with_hardocded_urls.php" Cross-Site Scripting
• IBS "username" Parameter Cross-Site Scripting
• OpenLink Virtuoso Multiple Denial Of Service Vulnerabilities
• F-PROT Antivirus Multiple File Processing Remote Denial of Service Vulnerabilities
• HP Select Identity Bidrectional LDAP Connector Remote Unauthorized Access

30 July 2008

• Joomla! and Mambo DT Register Component "eventId" Parameter SQL Injection
• Stash Cookie Authentication Bypass
• PhotoPost vBGallery "upload.php" Arbitrary File Upload
• preCMS "id" Parameter SQL Injection
• AlstraSoft Article Manager Pro "contact_author.php" SQL Injection
• Spring Framework Multiple Remote Vulnerabilities
• LunarNight Laboratory WebProxy Cross-Site Scripting
• MoinMoin "AdvancedSearch.py" Multiple Cross-Site Scripting Vulnerabilities

29 July 2008

• Def_Blog "article" Parameter Multiple SQL Injection Vulnerabilities
• CreaCMS Multiple Remote File Include Vulnerabilities
• PHPizabi "v_cron_proc.php" Arbitrary Script Injection Vulnerabilities
• AlstraSoft Video Share Enterprise "album.php" SQL Injection
• CGI::Session "CGISESSID" Cookie Value Directory Traversal
• SmbClientParser Perl Module Remote Command Execution
• phpHoo3 "phpHoo3.php" SQL Injection
• IBM WebSphere Application Server "PropFilePasswordEncoder" Unspecified Vulnerability

28 July 2008

• Oracle Weblogic Server Apache Connector Remote Buffer Overflow
• zypp-refresh-patches wrapper XML Repository Corruption
• Debian OpenSSH SELinux Privilege Escalation
• Mozilla Firefox Mac OS X GIF Rendering Memory Corruption
• QuickPlayer ".m3u" File Buffer Overflow
• BitComet URI Handling Remote Denial of Service
• MediaMonkey URI Handling Multiple Denial of Service Vulnerabilities
• PPMate PPMedia Class ActiveX Control Remote Buffer Overflow
• Microsoft Windows Vista Shutdown Button Local Security Bypass

27 July 2008

• V-webmail Multiple Remote File Include Vulnerabilities
• File Store PRO "download.php" SQL Injection
• Redmine Unspecified Cross-Site Scripting

26 July 2008

• CMME Cross-Site Scripting And Information Disclosure Vulnerabilities

25 July 2008

• phpBB Prior to 3.0.2 Unspecified Remote Issue
• Wysi Wiki Wyg "index.php" Local File Include
• eSyndiCat "register.php" Multiple Cross-Site Scripting Vulnerabilities
• phpDatingClub "website.php" Local File Include
• Xomol CMS "index.php" HTML Injection and Cross-Site Scripting Vulnerabilities
• V-webmail Multiple Remote File Include Vulnerabilities
• Avlc Forum "vlc_forum.php" SQL Injection
• Dreamlevels Dreampics Builder "page" Parameter SQL Injection
• Firebird Multiple Denial of Service and Information Disclosure Vulnerabilities
• eMule Operating System User Account Information Disclosure Weakness
• Sun Java Runtime Environment Multiple Security Vulnerabilities
• Sun Java Runtime Environment Virtual Machine Privilege Escalation
• Berkeley Yacc (byacc) "skeleton.c" Local Denial of Service

24 July 2008

• Xerox CentreWare Web Multiple SQL Injection and Cross-Site Scripting Vulnerabilities
• Drupal Multiple Vulnerabilities
• Million Pixels "tops_top.php" SQL Injection
• auraCMS "pages_data.php" Multiple SQL Injection Vulnerabilities
• Dreamlevels DreamNews "dreamnews-rss.php" SQL Injection
• BilboBlog Multiple Cross-Site Scripting Vulnerabilities
• Apple Safari Domain Extensions Insecure Cookie Access
• FFmpeg libavformat "psxstr.c" STR Data Heap-Based Buffer Overflow
• WeFi WEP Key Data Local Information Disclosure
• Sun Java SE Java Management Extensions (JMX) Unspecified Unauthorized Access
• Multiple Sophos Products MIME Attachments Denial of Service
• OP XAUTHORITY Variable Local Privilege Escalation