10 February 2012

• Fortigate UTM WAF Appliance Cross-Site Scripting and HTML Injection Vulnerabilities
• OSClass Multiple Remote Vulnerabilities
• Mibew Messenger Multiple Cross-Site Scripting Vulnerabilities
• Todd Miller Sudo "Sudo_Debug()" Path Resolution Local Privilege Escalation
• Wicd "wicd/configmanager.py" Local Information Disclosure

09 February 2012

• Syneto Unified Threat Management Cross-Site Request Forgery
• PEEL SHOPPING SQL Injection and Cross-Site Scripting Vulnerabilities
• Mozilla Firefox/SeaMonkey/Thunderbird Multiple Vulnerabilities
• Samba Memory Leak Local Denial Of Service
• Debian Openssh Server Forced Command Handling Information Disclosure

08 February 2012

• D-Link DIR-601 TFTP Server Directory Traversal
• Apache HTTP Server mod_log_config Denial Of Service
• RESTEasy JaxB XML Entity References Information Disclosure
• Wireshark Buffer Underflow and Denial of Service Vulnerabilities
• PDF-XChange pdfSaver ActiveX Multiple Buffer Overflow Vulnerabilities

07 February 2012

• HostBill PHP Code Injection
• Campaign Enterprise "SID" Parameter SQL Injection
• HP Network Automation Remote Unauthorized Access
• Limit My Call Remote Unauthorized Access
• RSA enVision Environmental Variable Information Disclosure

06 February 2012

• FishEye and Crucible Webwork 2 Framework Remote Code Injection
• Hitachi JP1/IT Desktop Management Manager Unspecified Cross-Site Scripting
• FFmpeg Multiple Remote Vulnerabilities
• EMC NetWorker Unspecified Buffer Overflow
• Trend Micro DataArmor and DriveArmor Pre-boot Local Privilege Escalation

03 February 2012

• WordPress uCan Post plugin Multiple HTML Injection Vulnerabilities
• Opera Web Browser Information Disclosure and Security Bypass Vulnerabilities
• IBM Lotus Symphony Image Object Integer Overflow
• OpenSSL DTLS Remote Denial of Service

02 February 2012

• IBM WebSphere Application Server SibRaRecoverableSiXaResource Information Disclosure
• SAP NetWeaver Multiple Remote Vulnerabilities
• KingSCADA Credential Information Disclosure
• JBoss "mod_cluster" Security Bypass

01 February 2012

• Cisco IP Video Phone E20 Default Root Credentials Authentication Bypass
• SolarWinds Storage Manager Server SQL Injection
• Google Chrome Multiple Security Vulnerabilities
• GE Energy D20/D200 Substation Controller Code Execution and Information Disclosure Vulnerabilities
• Cisco Digital Media Manager Remote Privilege Escalation

31 January 2012

• Joomla! "com_some" Component "controller" Parameter Local File Include
• osCommerce Multiple Unspecified Cross Site Scripting Vulnerabilities
• Apache Struts "ParameterInterceptor" Class OGNL Security Bypass
• Multiple Red Hat Network Products XMLRPC Credential Information Disclosure
• Linux Kernel Local Privilege Escalation

30 January 2012

• WordPress AllWebMenus Plugin "actions.php" Arbitrary File Upload
• IBM WebSphere Application Server Cross-Site Scripting
• IBM solidDB "SELECT" Statement Denial of Service
• Tucan Manager Plugin Update Security Bypass
• Linux Kernel iocbs Local Denial of Service

27 January 2012

• Oracle OpenSSO Remote Security Vulnerability
• Kayako SupportSuite Multiple Vulnerabilities
• Oracle Communications Unified Multiple Vulnerabilities
• Wibu-Systems CodeMeter TCP Packets Denial of Service
• HP Diagnostics Server Remote Stack Buffer Overflow

26 January 2012

• VBulletin Multiple Products "blog_post.php" Security Bypass
• MailEnable "ForgottonPassword.aspx" Cross-Site Scripting
• Oracle Database Server Multiple Vulnerabilities
• Wireshark Buffer Overflow and Denial of Service Vulnerabilities
• HP Easy Printer Care Software Remote Code Execution

25 January 2012

• MediaWiki Cache Pollution Information Disclosure
• KnowledgeTree Multiple Cross-Site Scripting Vulnerabilities
• Jenkins Hash Collision Denial Of Service
• Oracle Solaris Multiple Vulnerabilities
• McAfee Security-as-a-Service ActiveX Control Remote Command Execution