25 July 2008

• phpBB Prior to 3.0.2 Unspecified Remote Issue
• Wysi Wiki Wyg "index.php" Local File Include
• eSyndiCat "register.php" Multiple Cross-Site Scripting Vulnerabilities
• phpDatingClub "website.php" Local File Include
• Xomol CMS "index.php" HTML Injection and Cross-Site Scripting Vulnerabilities
• V-webmail Multiple Remote File Include Vulnerabilities
• Avlc Forum "vlc_forum.php" SQL Injection
• Dreamlevels Dreampics Builder "page" Parameter SQL Injection
• Firebird Multiple Denial of Service and Information Disclosure Vulnerabilities
• eMule Operating System User Account Information Disclosure Weakness
• Sun Java Runtime Environment Multiple Security Vulnerabilities
• Sun Java Runtime Environment Virtual Machine Privilege Escalation
• Berkeley Yacc (byacc) "skeleton.c" Local Denial of Service

24 July 2008

• Xerox CentreWare Web Multiple SQL Injection and Cross-Site Scripting Vulnerabilities
• Drupal Multiple Vulnerabilities
• Million Pixels "tops_top.php" SQL Injection
• auraCMS "pages_data.php" Multiple SQL Injection Vulnerabilities
• Dreamlevels DreamNews "dreamnews-rss.php" SQL Injection
• BilboBlog Multiple Cross-Site Scripting Vulnerabilities
• Apple Safari Domain Extensions Insecure Cookie Access
• FFmpeg libavformat "psxstr.c" STR Data Heap-Based Buffer Overflow
• WeFi WEP Key Data Local Information Disclosure
• Sun Java SE Java Management Extensions (JMX) Unspecified Unauthorized Access
• Multiple Sophos Products MIME Attachments Denial of Service
• OP XAUTHORITY Variable Local Privilege Escalation

23 July 2008

• n-forms Joomla! "com_n-forms" Component SQL Injection
• Dokeos "user_portal.php" Local File Include
• Drupal OpenID Module Cross-Site Scripting and Request Forgery Vulnerabilities
• Hudson "q" Parameter Cross-Site Scripting
• Mozilla Firefox "chrome" Document Unspecified Script Injection Weakness
• Apple Safari HTTPS to HTTPS Referer Information Disclosure
• IBM Maximo "debug.jsp" HTML Injection And Information Disclosure Vulnerabilities
• IBM Data ONTAP Multiple Unspecified Vulnerabilities
• Sun Java Runtime Environment Font Processing Buffer Overflow
• Sun Java Runtime Environment XML Data Processing Multiple Vulnerabilities
• Novell eDirectory LDAP Service Search Parameters Heap Overflow
• ReSIProcate INVITE and OPTIONS Messages DNS Resolver Remote Denial of Service

22 July 2008

• WordPress "press-this.php" Multiple Cross-Site Scripting Vulnerabilities
• Mozilla Firefox URI Splitting Security Bypass
• Votorola Multiple Unspecified Security Vulnerabilities
• Sun Java Web Start Multiple Vulnerabilities
• Sun Java Runtime Environment Multiple Unspecified Same Origin Policy Violation Vulnerabilities
• Apple Xcode WebObjects "WOHyperlink" Information Disclosure
• newsx "read_article()" Buffer Overflow

21 July 2008

• GAPI CMS "toolbar.php" Remote File Include
• Zenphoto "Function.php" Request Logging HTML Injection
• Apple iPhone and iPod Touch Prior to Version 2.0 Multiple Remote Vulnerabilities
• Wireshark 1.0.1 Denial of Service
• Multiple Vendors Unspecified SVG File Processing Denial of Service
• WinRemotePC Packet Handling Remote Denial of Service
• Apple Xcode Core Image Fun House ".funhouse" File XML Data Handling Buffer Overflow
• Simple DNS Plus Unspecified Remote Denial of Service
• Black Ice Software Document Imaging SDK/ActiveX Remote Buffer Overflow
• Sina DLoader Class ActiveX Control "DonwloadAndInstall" Method Arbitrary File Download
• Empire Server Prior to 4.3.15 Multiple Unspecified Vulnerabilities
• Sun Java SE Secure Static Versioning Applet Execution Weakness
• Microsoft Internet Explorer New ActiveX Object String Concatenation Memory Corruption