03 February 2012

• WordPress uCan Post plugin Multiple HTML Injection Vulnerabilities
• Opera Web Browser Information Disclosure and Security Bypass Vulnerabilities
• IBM Lotus Symphony Image Object Integer Overflow
• OpenSSL DTLS Remote Denial of Service

02 February 2012

• IBM WebSphere Application Server SibRaRecoverableSiXaResource Information Disclosure
• SAP NetWeaver Multiple Remote Vulnerabilities
• KingSCADA Credential Information Disclosure
• JBoss "mod_cluster" Security Bypass

01 February 2012

• Cisco IP Video Phone E20 Default Root Credentials Authentication Bypass
• SolarWinds Storage Manager Server SQL Injection
• Google Chrome Multiple Security Vulnerabilities
• GE Energy D20/D200 Substation Controller Code Execution and Information Disclosure Vulnerabilities
• Cisco Digital Media Manager Remote Privilege Escalation

31 January 2012

• Joomla! "com_some" Component "controller" Parameter Local File Include
• osCommerce Multiple Unspecified Cross Site Scripting Vulnerabilities
• Apache Struts "ParameterInterceptor" Class OGNL Security Bypass
• Multiple Red Hat Network Products XMLRPC Credential Information Disclosure
• Linux Kernel Local Privilege Escalation

30 January 2012

• WordPress AllWebMenus Plugin "actions.php" Arbitrary File Upload
• IBM WebSphere Application Server Cross-Site Scripting
• IBM solidDB "SELECT" Statement Denial of Service
• Tucan Manager Plugin Update Security Bypass
• Linux Kernel iocbs Local Denial of Service

27 January 2012

• Oracle OpenSSO Remote Security Vulnerability
• Kayako SupportSuite Multiple Vulnerabilities
• Oracle Communications Unified Multiple Vulnerabilities
• Wibu-Systems CodeMeter TCP Packets Denial of Service
• HP Diagnostics Server Remote Stack Buffer Overflow

26 January 2012

• VBulletin Multiple Products "blog_post.php" Security Bypass
• MailEnable "ForgottonPassword.aspx" Cross-Site Scripting
• Oracle Database Server Multiple Vulnerabilities
• Wireshark Buffer Overflow and Denial of Service Vulnerabilities
• HP Easy Printer Care Software Remote Code Execution

25 January 2012

• MediaWiki Cache Pollution Information Disclosure
• KnowledgeTree Multiple Cross-Site Scripting Vulnerabilities
• Jenkins Hash Collision Denial Of Service
• Oracle Solaris Multiple Vulnerabilities
• McAfee Security-as-a-Service ActiveX Control Remote Command Execution

24 January 2012

• IBM WebSphere Application Server "iscdeploy" Script Insecure File Permissions
• Oracle MySQL Multiple Vulnerabilities
• ISC DHCP Server DHCPv6 NULL Pointer Dereference Denial Of Service
• 7T Interactive Graphical SCADA System DLL Loading Arbitrary Code Execution
• GreenBrowser Search Bar Short Cut Button Double Free Remote Memory Corruption

23 January 2012

• HP StorageWorks Default Accounts and Directory Traversal Vulnerabilities
• Apache HTTP Server Scoreboard Local Security Bypass
• Oracle GlassFish Enterprise Server Multiple Vulnerabilities
• JBoss Cache Local Information Disclosure
• Yahoo Messenger ".jpg" File Buffer Overflow
• ExpressView Browser Plug-in Multiple Integer Overflow and Remote Code Execution Vulnerabilities

20 January 2012

• dl Download Ticket Service Authentication Bypass
• Yaws Multiple Cross-Site Scripting and HTML Injection Vulnerabilities
• ZNC "bouncedcc" Module Remote Denial of Service
• Apache Struts Remote Command Execution and Arbitrary File Overwrite Vulnerabilities
• Microsoft AntiXSS Library Sanitization Module Security Bypass