13 November 2009

• Drupal FAQ Ask Module URI Redirection and Cross-Site Scripting Vulnerabilities
• Mozilla Firefox Remote Memory Corruption
• Mozilla Firefox XPCOM Utility Chrome Privilege Escalation
• Mozilla FireFox Download Manager World Writable File Local Privilege Escalation Vulnerability
• OpenBSD and NetBSD "printf(1)" Format String Parsing Denial of Service
• Novell eDirectory NULL Base DN Denial Of Service

12 November 2009

• IBM Runtimes for Java Technology "XML4J" Component Unspecified Vulnerability
• Mozilla Firefox Remote Memory Corruption
• Mozilla Firefox and SeaMonkey Proxy Auto-Configuration File Remote Code Execution
• Mozilla Firefox Floating Point Conversion Heap Overflow
• OpenBSD "getsockopt(2)" Remote Denial of Service
• Multiple Symantec Altiris Products ActiveX Control Buffer Overflow

11 November 2009

• F-Secure Products PDF Files Scan Evasion
• Mozilla Firefox Multiple Remote Memory Corruption Vulnerabilities
• Mozilla Firefox and SeaMonkey "libpr0n" GIF Parser Heap-Based Buffer Overflow
• Opera Web Browser prior to 10.01 Multiple Security Vulnerabilities
• Linux Kernel "pipe.c" Local Privilege Escalation
• Multiple Panda Products Insecure Program File Permissions Local Privilege Escalation

10 November 2009

• Mozilla Firefox Multiple Remote Memory Corruption Vulnerabilities
• Mozilla Firefox "document.getSelect" Cross-Domain Information Disclosure
• Mozilla Firefox JavaScript Web-Workers Remote Code Execution
• Sun Solaris "xscreensaver(1)" From JDS Local Information Disclosure
• SUSE Linux "scsi_discovery tool" Insecure Temporary File Creation
• Avast! Antivirus "aavmKer4.sys" Driver Local Privilege Escalation

09 November 2009

• Multiple Vendor Hummingbird STR Service Buffer Overflow
• Cherokee Directory Traversal
• Mozilla Firefox and Seamonkey Download Filename Spoofing
• Mozilla Firefox Form History Information Disclosure
• Multiple BSD Distributions "printf(3)" Memory Corruption
• Research In Motion BlackBerry Desktop Manager ActiveX Control Remote Code Execution

06 November 2009

• Multiple Vendors IPv6 Implementation Remote Denial of Service
• Achievo "debugger.php" Remote File Include
• Drupal Userpoints Module "userpoint" Information Disclosure
• Joomla! JD-WordPress Component "wp-feed.php" Remote File Include
• RunCMS "forum" Parameter SQL Injection
• OpenDocMan Cross-Site Scripting and SQL Injection
• Websense Email Security Cross-Site Scripting and HTML Injection Vulnerabilities
• Cybozu Multiple Products Unspecified Cross-Site Scripting Vulnerabilities
• McAfee Products TAR and PDF Files Scan Evasion Vulnerabilities
• nginx "ngx_http_process_request_headers()" Remote Buffer Overflow
• Perl UTF-8 Regular Expression Processing Remote Denial of Service
• Adobe Reader and Acrobat Certificate Modification
• GD Graphics Library "_gdGetColors" Remote Buffer Overflow
• Adobe Reader and Acrobat Buffer Overflow
• Adobe Reader and Acrobat U3D File Pointer Overwrite Remote
• Bftpd Unspecified Remote Denial of Service Vulnerability
• Sun Solaris ZFS Filesystem Security Bypass
• Linux Kernel KVM "update_cr8_intercept()" Local Denial of Service
• Linux Kernel "get_random_int" Random Number Generation Weakness
• Gpg4win Remote Denial of Service
• Websense Email Security and Email Manager "STEMWADM.EXE" Remote Denial of Service

05 November 2009

• Aruba Mobility Controller 802.11 Association Request Frame Remote Denial of Service
• Cisco Unified Presence TimesTenD Process Denial of Service
• TYPO3 Core Multiple Security Vulnerabilities
• Vivvo CMS "files.php" Directory Traversal
• Drupal Webform Module HTML Injection and Information Disclosure Vulnerabilities
• RunCMS "pid" Parameter SQL Injection
• Dream Poll Cross-Site Scripting and SQL Injection
• IBM Rational AppScan Help Pages Unspecified Cross-Site Scripting
• Zainu "searchSongKeyword" Parameter Cross-Site Scripting
• Wireshark 1.2.2 and 1.0.9 Multiple Vulnerabilities
• python-markdown2 Multiple Security Vulnerabilities
• HTML-Parser Invalid HTML Entity Remote Denial of Service
• McKesson Horizon Clinical Infrastructure (HCI) Password Disclosure
• Adobe Reader and Acrobat ActiveX Control Denial of Service
• Adobe Reader and Acrobat Unspecified Integer Overflow Memory Corruption
• Adobe Acrobat Reader Firefox Plugin Memory Corruption Remote Code Execution
• Adobe Reader and Acrobat for Unix Debug Mode Remote Code Execution
• Linux Kernel Netlink Packets Security Bypass
• Linux Kernel KVM "kvm_dev_ioctl_get_supported_cpuid()" Integer Overflow
• SystemTap Unprivileged Mode Multiple Denial of Service
• Linux Kernel "/drivers/net/r8169.c" Out-of-IOMMU Error Local Denial of Service
• Pegasus Mail POP3 Response Remote Buffer Overflow
• EMC RepliStor Server "rep_serv.exe" Remote Denial of Service

04 November 2009

• Overland Storage Snap Server 410
• TFTgallery "album" Parameter Cross-Site Scripting Vulnerability
• DM Albums Multiple File Deletion Vulnerabilities
• TYPO3 freeCap CAPTCHA Module Unspecified Unauthorized Access Vulnerability
• Drupal Printer, e-mail and PDF version Module Security Bypass and HTML Injection Vulnerabilities
• Joomla! "com_photoblog" Component "category" Parameter SQL Injection
• Drupal Abuse Module Cross-Site Scripting
• TBmnetCMS "content" Parameter Cross-Site Scripting
• bloofoxCMS "search" Parameter Cross-Site Scripting
• OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass
• Asterisk Missing ACL Check Remote Security Bypass
• MapServer HTTP Request Processing Integer Overflow
• squidGuard Multiple Security Bypass Vulnerabilities
• Poppler "create_surface_from_thumbnail_data()" Integer Overflow Memory Corruption
• Adobe Acrobat Integer Overflow Denial Of Service Vulnerability
• Adobe Reader and Acrobat XMP-XML Entity Expansion Denial of Service
• Adobe Reader and Acrobat "annots.api" Denial of Service
• Adobe Reader and Acrobat COM Objects Memory Corruption Remote Code Execution
• Sun Solaris Trusted Extensions Policy Configuration Remote Privilege Escalation Weakness
• Linux Kernel 2.4 and 2.6 Local Information Disclosure
• Linux Kernel "unix_stream_connect()" Local Denial of Service
• Multiple Rising Products Insecure Program File Permissions Local Privilege Escalation
• EMC Documentum ApplicationXtender Admin Agent Multiple Vulnerabilities
• AOL AIM "sipXtapi.dll" Multiple Buffer Overflow Vulnerabilities

03 November 2009

• 3Com OfficeConnect ADSL Wireless 11g Firewall Router Authentication Multiple Remote Vulnerabilities
• Cisco Unified Presence Track Network Connection Denial of Service
• IBM Lotus Connections Mobile Activities Pages Cross-Site Scripting
• Drupal FileField Module Information Disclosure
• Joomla! com_booklibrary Component "releasenote.php" Remote File Include
• Drupal Organic Groups Vocabulary Module Unauthorized Access
• Joomla! "com_jshop" Component "pid" Parameter SQL Injection
• Drupal vCard Module Cross-Site Scripting
• IBM Rational RequisitePro ReqWebHelp Multiple Cross-Site Scripting Vulnerabilities
• Eclipse BIRT "run?__report" Parameter Cross-Site Scripting
• VMware Products Directory Traversal
• Novell eDirectory "/dhost/modules?L:" Buffer Overflow Vulnerability
• Adobe Reader and Acrobat File Extension Controls Remote Security Bypass
• CamlImages JPEG Handling Remote Buffer Overflow
• Adobe Acrobat Image Decoder Remote Code Execution
• Adobe Reader and Acrobat "AcroPDF.dll" ActiveX Control Denial of Service
• Adobe Reader and Acrobat Compact Font Format Heap Memory Corruption
• Sun OpenSolaris Unspecified Local Security
• Linux Kernel "proc" World Writeable File Security Bypass
• Linux Kernel NFSV4 CallbackClient NULL Pointer Dereference Local Denial of Service
• Cherokee Web Server Malformed Packet Remote Denial of Service
• DWebPro "file" Parameter Remote Command Execution
• Avast! Insecure Program File Permissions Local Privilege Escalation

02 November 2009

• Intel BIOS Version Reversion Local Privilege Escalation
• Sahana "mod" Parameter Local File Disclosure
• Drupal Simplenews Statistics Module Multiple Vulnerabilities
• Joomla! Ajax Chat Component "ajcuser.php" Remote File Include
• Pentaho BI Multiple Cross-Site Scripting and Information Disclosure Vulnerabilities
• Drupal Moodle Course List Module Unspecified SQL Injection
• Drupal Flag Content Module HTML Injection
• Snitz Forums 2000 Cross-Site Scripting and HTML Injection Vulnerabilities
• Opera Web Browser prior to 10.01 Multiple Security Vulnerabilities
• VMware Products Page Fault Exception Local Privilege Escalation
• Sun Java System Web Server Unspecified Remote Buffer Overflow
• Kleopatra Malformed Certificate Remote Denial of Service
• QEMU VNC Client Disconnect Use After Free Remote Code Execution
• Adobe Reader and Acrobat Trust Manager Remote Security Bypass
• Adobe Reader and Acrobat JavaScript Memory Corruption
• Sun OpenSolaris Kernel Panic Remote Denial of Service Vulnerability
• Linux Kernel r128 Driver CCE Initialization NULL Pointer Dereference Denial of Service
• Linux Kernel Keyring "refcount" Local Denial of Service
• Microsoft SharePoint Team Services Download Feature Source Code Information Disclosure

30 October 2009

• Mongoose Source Code Disclosure Vulnerability
• Django forms Library Regular Expressions Denial of Service Vulnerability
• IBM Rational RequisitePro ReqWebHelp Cross-Site Scripting
• ZoIPer SIP INVITE Denial of Service Vulnerability
• Xpdf Multiple Vulnerabilities
• Fedora update for phpMyAdmin
• KDE KPDF Multiple Vulnerabilities
• Pidgin ICQ Message Denial of Service Weakness
• Microsoft Active Template Library (ATL) for Microsoft Office Remote Code

29 October 2009

• PHP GD Extension "_gdGetColors()" Buffer Overflow Vulnerability
• Drupal Shibboleth Authentication Module Privilege Escalation Security Issue
• Drupal RealName Module Script Insertion Vulnerability
• Cisco Unified Presence Denial of Service Vulnerabilities
• Debian update for bugzilla
• Red Hat update for kdegraphics
• Linux Kernel "unix_stream_connect()" Denial of Service Security Issue
• Foxit Reader Firefox Plugin Memory Corruption Vulnerability
• Microsoft .NET Common Language Runtime Multiple Vulnerabilities

28 October 2009

• Piwik Arbitrary File Creation Vulnerability
• AgoraCart Cross-Site Request Forgery Vulnerability
• Quick.Cart Cross-Site Request Forgery Vulnerability
• aria2 "AbstractCommand::onAbort()" Format String Vulnerability
• Debian update for camlimages
• Ubuntu update for libsndfile
• Fedora update for kernel
• Microsoft Local Security Authority Subsystem Denial of Service
• Microsoft Internet Explorer Multiple Vulnerabilities

27 October 2009

• TYPO3 Random Images Extension Command Execution Vulnerability
• IBM HTTP Server Apache Portable Runtime Integer Overflows
• Skype Extras Manager component Unspecified Vulnerability
• EMC Documentum ApplicationXtender Admin Agent Multiple Vulnerabilities
• Fedora update for perl-Net-OAuth
• CUPS "pdftops" Two Integer Overflow Vulnerabilities
• Adium ICQ Message Denial of Service Weakness
• Microsoft Windows Indexing Service Remote Code Execution
• Microsoft Windows Media Runtime Remote Code Execution

26 October 2009

• NaviCOPA Script Source Disclosure Vulnerability
• Joomla AjaxChat Component File Inclusion Vulnerability
• IBM OS/400 HTTP Server mod_proxy Denial of Service
• Unbound NSEC3 Signature Validation Bypass Security Issue
• Oracle Critical Patch Update Advisory - October 2009
• Sun Solaris libpng Interlaced Images Information Disclosure
• Sun Solaris Thunderbird Network Security Services Vulnerabilities
• UiTV UiPlayer UiCheck.dll "GetUiDllVersion()" Buffer Overflow Vulnerability
• Microsoft Windows CryptoAPI Spoofing
• Microsoft Windows Media Player ASF Processing Vulnerability