23 May 2008

• Content Management System for Phprojekt "graphie.php" Local File Include

22 May 2008

• ZoneMinder Multiple Unspecified Remote Code Execution Vulnerabilities
• MegaBBS Multiple SQL Injection and Cross-Site Scripting Vulnerabilities
• PHPizabi "template.class.php" Remote Information Disclosure

21 May 2008

• PhpGedView Unspecified Remote Vulnerability
• PHPG Upload "form_upload.php" Arbitrary File Upload
• Angelo-Emlak Multiple SQL Injection and Cross-Site Scripting Vulnerabilities

20 May 2008

• Novell GroupWise HTML Injection and Denial of Service Vulnerabilities
• Joomla Visites Component mosConfig_absolute_path Remote File Include
• LokiCMS "admin.php" Arbitrary File Deletion

19 May 2008

• KDE KHTML PNGLoader Heap Buffer Overflow
• SugarCRM Community Edition RSS Module Information Disclosure

18 May 2008

• Imager Image-based Fill Heap Buffer Overflow
• Horde Webmail "addevent.php" Cross-Site Scripting

17 May 2008

• e107 CMS "submitnews.php" Multiple HTML Injection Vulnerabilities
• PHP-Nuke DownloadsPlus Module Arbitrary File Upload
• Joomla! and Mambo Filiale Component "idFiliale" Parameter SQL Injection
• F5 Networks FirePass 4100 SSL VPN "installControl.php3" Cross-Site Scripting
• Asterisk IAX2 Packet Amplification Remote Denial of Service

16 May 2008

• miniBB Multiple SQL Injection and Cross-Site Scripting Vulnerabilities
• RSA Authentication Agent for Web URI Redirection
• PHP Forge "id" Parameter SQL Injection
• Siteman "module" Parameter Cross-Site Scripting and Local File Include
• Sophos Anti-Virus SSDT Hooks Local Denial of Service
• KDE "start_kdeinit" Multiple Local Privilege Escalation Vulnerabilities
• VLC Media Player Cinepak Codec Buffer Overflow
• BitDefender Antivirus 2008 Hooked SSDT Denial of Service
• HP HPeDiag ActiveX Control Multiple Information Disclosure and Remote Code Execution Vulnerabilities

15 May 2008

• phpMyAdmin Shared Host Remote Information Disclosure
• WordPress Cookie Integrity Protection Unauthorized Access
• Prozilla Hosting Index "directory.php" SQL Injection
• ODFaq "index.php" SQL Injection
• RunCMS MyArticles module "topic_id" Parameter SQL Injection
• PHP Forge "id" Parameter SQL Injection
• Joomla! and Mambo Jpad Component "cid" Parameter SQL Injection
• E RESERV "ID_loc" Parameter SQL Injection
• miniBB "bb_admin.php" Cross-Site Scripting
• SiteXS CMS "adm/index.php" Cross-Site Scripting
• Pixel Motion Blog "list_article.php" Cross-Site Scripting
• e107 CMS Multiple Cross-Site Scripting Vulnerabilities
• Drupal Ubercart Module Multiple HTML Injection Vulnerabilities
• Magnolia Enterprise Edition Sitedesigner module "query" Parameter Cross-Site Scripting
• PeerCast "getAuthUserPass" Multiple Buffer Overflow Vulnerabilities
• Perl Unicode "Q...E" Quoting Construct Regular Expression Buffer Overflow
• Computer Associates ARCserve Backup Discovery Service Remote Denial of Service
• xine-lib NES Sound Format Demuxer "copyright" Buffer Overflow
• VLC Media Player MP4 Demuxer Buffer Overflow
• Rising Antivirus SSDT "NtOpenProcess()" Hook Local Denial of Service
• Lhaplus ZOO Archive Processing Remote Buffer Overflow
• Trillian Overly Long Nickname Remote Denial of Service

14 May 2008

• Joovili "category" Parameter SQL Injection
• FluentCMS "view.php" SQL Injection
• Jokes Site Script "categorie" Parameter SQL Injection
• Web Calendar Pro "one_day.php" SQL Injection
• Multiple Bluemoon inc. Modules for XOOPS Unspecified Cross-Site Scripting Vulnerabilities
• Digital Hive "base.php" Parameter Cross-Site Scripting
• Blender Unspecified Insecure Temporary File Creation
• VicFTPS "LIST" Command Remote Denial of Service
• HP Software Update "Hpufunction.dll" ActiveX Control Insecure Method Vulnerabilities
• Flip4Mac WMV File Handling Unspecified Security Issue

13 May 2008

• Wordpress Download Monitor Plugin "id" Parameter SQL Injection
• PostNuke PostSchedule Component "eid" Parameter SQL Injection
• PHCDownload Multiple SQL Injection and Cross-Site Scripting Vulnerabilities
• Acritum Femitter Server "RETR" Command Remote Denial of Service
• Sun Java System Directory Proxy Server Remote Unauthorized Access
• Novell GroupWise "mailto" URI Handler Buffer Overflow
• util-linux-ng "login" Remote Log Injection Weakness
• Watchfire AppScan ActiveX Control Multiple Arbitrary File Overwrite Vulnerabilities
• Realtek HD Audio Codec Drivers for Windows Vista Multiple Local Privilege Escalation Vulnerabilities

12 May 2008

• Softbiz Web Host Directory Script "search_result.php" SQL Injection
• Joomla! and Mambo Community Builder "com_profiler" Component SQL Injection
• Apple QuickTime Unspecified Remote Code Execution
• E-Post MailServer Remote Information Disclosure
• IBM Lotus Expeditor URI Handler Command Execution
• Linux Terminal Server Project "ldm" Information Disclosure
• Kantaris SSA Subtitle File Remote Buffer Overflow
• National Rail Enquiries Live Departure Boards Gadget Remote Script Code Execution

09 May 2008

• Acidcat CMS Multiple Input Validation Vulnerabilities
• Azureus HTML WebUI Cross-Site Request Forgery
• Exponent CMS Multiple HTML Injection Vulnerabilities

08 May 2008

• PortailPHP "mod_search" Remote File Include
• Kubelance "ipn.php" Local File Include
• SMF Audio CAPTCHA Security Bypass
• Host Directory PRO Cookie Security Bypass
• SunShop Shopping Cart "adminindex.php" Multiple SQL Injection Vulnerabilities
• e107 123 FlashChat Module "123flashchat.php" Remote File Include
• Carbon Communities Multiple SQL Injection and Cross-Site Scripting Vulnerabilities

07 May 2008

• QIP Unspecified Remote Memory Corruption
• phShoutBox Cookie Security Bypass
• eGroupWare Unspecified Arbitrary File Upload
• WordPress wpSS Spreadsheet Plugin "ss_id" Parameter SQL Injection
• Joomla! and Mambo FlippingBook Component "book_id" Parameter SQL Injection

06 May 2008

• Cisco Network Admission Control Shared Secret Information Disclosure
• Chimaera Project Aterr Multiple Local File Include Vulnerabilities
• openInvoice Security Bypass Vulnerabilities
• Crazy Goomba "commentaires.php" SQL Injection
• XOOPS Article Module "article.php" SQL Injection
• Tr Script News "news.php" SQL Injection
• RedDot CMS "ioRD.asp" SQL Injection
• YourFreeWorld Apartment Search Script "listtest.php" SQL Injection

05 May 2008

• Multiple Wireless Routers Predictable Default WEP/WPA Key Security Bypass
• WordPress "cat" Parameter Directory Traversal
• TorrentFlux Cross-Site Request Forgery and Remote PHP Script Code Execution Vulnerabilities
• Grape Web Statistics "functions.php" Remote File Include
• W1L3D4 Philboard Multiple SQL Injection Vulnerabilities
• XOOPS Recette "detail.php" SQL Injection
• PHP-Fusion "submit.php" SQL Injection

02 May 2008

• ContRay "search" Parameter Cross-Site Scripting
• Advanced Electron Forum "beg" Parameter Cross-Site Scripting
• Advanced Electron Forum "beg" Parameter Cross-Site Scripting
• uTorrent WebUI Cross-Site Request Forgery
• Wikepage Opus "wiki" Parameter Cross-Site Scripting
• EsContacts "msg" Parameter Multiple Cross-Site Scripting Vulnerabilities
• Php-Stats "admin.php" Multiple Cross-Site Scripting Vulnerabilities
• MyBoard "rep.php" Cross-Site Scripting
• Blogator-script "bs_auth.php" Cross-Site Scripting
• Apple Safari WebKit URI Handling Cross-Site Scripting
• Swfdec Untrusted Sandbox Remote Information Disclosure
• DBMail Authentication Bypass