04 September 2008

• vBulletin "$newpm[title]" Parameter Cross-Site Scripting
• NOAH Unspecified Cross-Site Scripting
• GPicView Multiple Local Security Vulnerabilities
• DriveCrypt Incorrect BIOS API Usage Security
• VLC Media Player "mmstu.c" MMS Protocol Handling Buffer Overflow
• Multiple Vendor "inet_net_pton()" Function Integer Overflow Weakness
• Ruby REXML Remote Denial of Service
• libmodplug "s3m" Remote Buffer Overflow
• xine-lib 1.1.14 and Prior Multiple Remote Vulnerabilities
• PowerDNS Source Port Randomization Remote Cache Poisoning
• llcon Protocol Message Remote Denial of Service
• Opera Web Browser 9.51 Multiple Security Vulnerabilities
• Sun Solaris NFS RPC Local Denial of Service
• Sun Solaris NFS Kernel Module Local Denial of Service

03 September 2008

• Avaya SES Authentication Bypass Vulnerability and Information Disclosure Weakness
• LibTIFF "tif_lzw.c" Remote Integer Underflow
• Sun Solaris NFSv4 Client Kernel Module Local Denial of Service
• Linux Kernel "sctp_setsockopt_auth_key()" Remote Denial of Service
• SoftArtisans XFile FileManager ActiveX Control Multiple Buffer Overflow Vulnerabilities
• Anzio Web Print Object ActiveX Control Remote Buffer Overflow
• Novell iPrint Client ActiveX Control Multiple Remote Vulnerabilities

02 September 2008

• Vim Insufficient Shell Escaping Multiple Command Execution Vulnerabilities
• libxml2 Recursive Entity Remote Denial of Service
• NetBSD PPPoE Discovery Packet Remote Denial of Service
• Samba Group Mappings File Insecure Permissions Local Security Issue
• Red Hat OpenSSH Backdoor
• HP OpenVMS "SMGSHR.EXE" Local Buffer Overflow
• JustSystems Ichitaro Document Handling Unspecified Code Execution

01 September 2008

• RhinoSoft Serv-U SFTP Remote Denial of Service
• Microsoft Windows Media Services "nskey.dll" ActiveX Control Remote Buffer Overflow

29 August 2008

• Freeway Multiple Input Validation Vulnerabilities
• ESET Smart Security "easdrv.sys" Local Privilege Escalation
• GnuTLS "gnutls_handshake()" Function Remote Denial of Service
• FipsCMS "forum/neu.asp" SQL Injection
• ZEEJOBSITE "bannerclick.php" SQL Injection
• Nukeviet "admin/login.php" Cookie Authentication Bypass
• Nukeviet "admin/login.php" Cookie Authentication Bypass

28 August 2008

• Yelp Invalid URI Format String
• FlexCMS "inc-core-admin-editor-previouscolorsjs.php" Cross-Site Scripting
• phpArcadeScript "cat" Parameter SQL Injection
• PHP-Fusion "readmore.php" SQL Injection
• CyBoards PHP Lite Multiple Remote Vulnerabilities
• Ventrilo "type 0" Packet NULL Pointer Dereference Denial of Service
• NewsHOWLER Cookie Data SQL Injection
• Sun Java System Portal Server Portlets Cross-Site Scripting
• Openfire "login.jsp" Cross-Site Scripting
• Navboard Multiple Local File Include and Cross-Site Scripting Vulnerabilities

27 August 2008

• VLC Media Player "demuxtta.c" TTA File Handling Buffer Overflow
• xine-lib 1.1.14 Multiple Remote Buffer Overflow Vulnerabilities
• HP Linux Imaging and Printing System Privilege Escalation And Denial of Service Vulnerabilities
• Cardinal CMS "upload.php" Arbitrary File Upload
• E-Shop Shopping Cart Script "search_results.php" SQL Injection
• PromoProducts "view_product.php" Multiple SQL Injection Vulnerabilities
• AWStats "awstats.pl" Cross-Site Scripting
• xine-lib OGG Processing Remote Denial of Service
• VMware Workstation "hcmon.sys" Local Denial of Service
• SWIMAGE Encore Master Password Information Disclosure
• Sun Java System Web Proxy Server FTP Subsystem Denial of Service
• HAVP "sockethandler.cpp" Client Connect Infinite Loop Denial of Service
• Postfix Local Information Disclosure and Local Privilege Escalation Vulnerabilities

26 August 2008

• Attachmate Reflection for Secure IT Multiple Unspecified Security Vulnerabilities
• Red Hat yum-rhn-plugin RHN Updates Denial of Service
• Sympa "sympa.pl" Insecure Temporary File Creation
• Linux Kernel "dccp_setsockopt_change()" Remote Denial of Service
• Red Hat Network Satellite Server "manzier.pxt" User Information Disclosure

25 August 2008

• Ovidentia "index.php" Cross-Site Scripting
• Mambo Multiple Cross-Site Scripting Vulnerabilities
• Ipswitch WS_FTP Server Message Response Buffer Overflow
• Ipswitch WS_FTP Client Format String
• Maya Studio eo-video Playlist File Buffer Overflow
• Symantec Storage Foundation for Windows Security Update Circumvention
• FlashGet FTP "PWD" Response Remote Buffer Overflow
• Microsoft Visual Studio "Msmask32.ocx" ActiveX Control Remote Buffer Overflow