08 September 2010

• ClanSphere "index.php" SQL Injection and Cross Site Scripting Vulnerabilities
• Nagios XI "users.php" SQL Injection
• MODx Evolution "editor.php" Cross-Site Scripting
• HP OpenView Network Node Manager Unspecified Remote Code Execution
• Quagga bgpd Route-Refresh Message Stack Buffer Overflow
• Fedora SSSD LDAP Unauthenticated Bind Security Bypass
• Mereo "GET" Request Remote Buffer Overflow
• Apple Safari "webkit.dll" Invalid SGV Text Style Denial of Service
• Bloodshed Dev-C++ Multiple EXE Loading Arbitrary Code Execution
• Trend Micro Internet Security Pro ActiveX Control Remote Code Execution

07 September 2010

• Valarsoft WebMatic Multiple HTML Injection Vulnerabilities
• BugTracker.NET "search.aspx" SQL Injection
• Squid "DNS" Reply Remote Buffer Overflow
• HP MagCloud Unspecified Security Bypass
• Real Networks RealPlayer & RealPlayer SP Multiple Security Vulnerabilities
• FCKEditor.NET File Renaming Remote Code Execution Weakness
• Red Hat GNOME Display Manager 64-Bit Operation Security Bypass
• Apple QuickTime "_Marshaled_pUnk" Remote Code Execution

06 September 2010

• Anantasoft Gazelle CMS "frmupload.html" Arbitrary File Upload
• BlogMan "id" Parameter SQL Injection
• Quagga bgpd Null Pointer Deference Denial of Service
• Cisco Unified Communications Manager SIP Message Denial of Service
• Cisco Border Gateway Protocol Unknown Attribute Denial of Service
• Novell Identity Manager "/tmp/idmInstall.log" Information Disclosure
• Apple Mac OS X Invalid Host Name SSL Certificate Validation Security Bypass
• Insecure DLL Loading Issues

03 September 2010

• In-Portal CMS
• PHPCMS2008 "download.php" Information Disclosure Issue
• Online Work Order Suite Lite Edition Multiple Cross-Site Scripting Vulnerabilities
• QEMU KVM Multiple Issues
• Serv-U Denial of Service and Security Bypass Vulnerabilities
• Linux Kernel KVM Intel VT-x Extension NULL Pointer Denial of Service

02 September 2010

• Netpet CMS "confirm.php" Local File Include
• PHP City Portal "login.php" Multiple SQL Injection Issues
• ACCESSGUARDIAN Unspecified Cross-Site Scripting Issue
• Novell iPrint Client Multiple Security Vulnerabilities
• PHP "ibase_gen_id()" Function off-by-one Buffer Overflow
• Red Hat VDSM Module SSL Connection Denial of Service Issue

01 September 2010

• SonicWALL E-Class SSL-VPN Format String Issue
• DotNetNuke Syndication Handler Remote Denial of Service Issue
• phpMyAdmin Multiple Cross-Site Scripting Vulnerabilities
• LXR Cross Referencer TITLE Element Cross-Site Scripting Issue
• Google Chrome Multiple Security Vulnerabilities
• FreeBSD "setusercontext()" Local Security Bypass Issue
• Tuniac ".m3u" File Buffer Overflow

31 August 2010

• Blue Coat ProxySG Read Only Administrator Security Bypass Issue
• MAXcms Multiple Remote File Include Issues
• ViArt Helpdesk Multiple Cross-Site Scripting Vulnerabilities
• Oracle MySQL "TEMPORARY InnoDB" Tables Denial of Service
• IBM Tivoli Storage Manager FastBack Remote Code Execution and Denial of Service Vulnerabilities
• Linux Kernel JFS xattr Namespace Rules Security Bypass Issue
• UiPlayer "UiCheck.dll" ActiveX Buffer Overflow

30 August 2010

• phpMyAdmin Configuration File PHP Code Injection
• Mollify Authentication Bypass Vulnerability and Multiple Information Disclosure Weaknesses
• Drupal Simplenews Content Selection Module Cross-Site Scripting Issue
• libHX "HX_split()" Remote Heap-Based Buffer Overflow Issue
• Apple iTunes Log File Insecure File Operation Local Privilege Escalation
• Linux Kernel Controller Area Network Protocol Local Privilege Escalation
• Adersoft VbsEdit ".vbs" File Denial Of Service Issue

27 August 2010

• Cisco ACE Module and Engine SIP Inspection Denial of Service Issue
• JForum BBCode Color Tag HTML Injection Issue
• KnowledgeTree "search box" and "search criteria" Fields Multiple HTML Injection issues
• Apache CouchDB Cross-Site Request Forgery Issue
• DeDeCMS "feedback_js.php" SQL Injection
• WordPress "wp-admin/plugins.php" Cross-Site Scripting
• Uploaderr "upload.php" Arbitrary File Upload Issue
• OpenJDK "IcedTea" Plugin Information Disclosure Issue
• Cisco IOS SYNRCVD/SYNSENT State TCP Connection Denial of Service
• Portable Document Format Specification Signature Collision Issue
  
• Sonique ".xpl" File Remote Stack Based Buffer Overflow issue

26 August 2010

• RioRey RIOS Hardcoded Password Security Bypass
• ServletExec Directory Traversal Vulnerability and Multiple Authentication Bypass Vulnerabilities
• SAP Crystal Reports "ebus-3-3-2-6.dll" Module Remote Integer Overflow
• TYPO3 Fe user statistic Extension Unspecified SQL Injection Issue
• Pligg Multiple SQL Injection Issues
• TYPO3 Branchenbuch "mh_branchenbuch" Extension Unspecified Cross-Site Scripting
• WebKit Unspecified Security Issue
• Palm Pre webOS Remote Code Execution Vulnerability and Unspecified Vulnerabilities
• Zmanda Recovery Manager for MySQL Multiple Local Privilege Escalation Vulnerabilities
• Cisco ACE Module and Engine RTSP Inspection Denial of Service
• Microsoft Windows Kernel "xxxRealDrawMenuItem()" Function Local Privilege Escalation

25 August 2010

• CMS Source Multiple Input Validation Issues
• SquirrelMail Remote Denial of Service Issue
• TYPO3 Questionnaire (ke_questionnaire) Cross-Site Scripting and SQL Injection Issue
• AW-BannerAd "index.asp" Multiple SQL Injection Vulnerabilities
• TYPO3 Event Extension Unspecified SQL Injection
• Onyx Multiple Cross-Site Scripting Issues
• Apache CXF XML DTD Processing Security
• Open Handset Alliance Android Web Browser Remote Information Disclosure Issue
• Invision Power Board OpenID Authentication Bypass
• Linux Kernel EXT4 Multiple Local Denial of Service Vulnerabilities
• Microsoft Windows "win32k!GreStretchBltInternal()" Local Denial of Service