20 November 2009

• XOOPS Multiple Unspecified Vulnerabilities
• Drupal Link Module "Link Title" HTML Injection
• CUPS "kerberos" Parameter Cross-Site Scripting
• GNU GRUB Local Authentication Bypass
• Asterisk SIP Response Username Enumeration Remote Information Disclosure
• Sun Virtual Desktop Infrastructure Authentication Mechanism Unauthorized Access
• Linux Kernel "nfs4_proc_lock()" Local Denial of Service
• Apple Mac OS X Kernel Multiple Vulnerabilities
• Apple Mac OS X FTP Server CWD Command Buffer Overflow
• Apple Mac OS X Event Monitor Log Parsing Denial of Service
• Apple Mac OS X Apple Type Services Multiple Memory Corruption Vulnerabilities
• SafeNet SoftRemote Policy File Handling Remote Buffer Overflow Vulnerabilities
• Microsoft Excel "SxView" Memory Corruption Remote Code Execution
• Microsoft Excel Formula Parsing Remote Code Execution

19 November 2009

• Citrix NetScaler and Access Gateway Denial of Service
• Drupal NGP COO/CWP Integration Module Security Bypass and HTML Injection Vulnerabilities
• Prototype JavaScript Framework Cross-Site Ajax Request
• PDFLib "open_basedir" Restriction Bypass
• IBM Tivoli Storage Manager Multiple Remote Vulnerabilities
• Sun Solaris XScreenSaver Popup Windows Security Bypass
• Apple Mac OS X QuickLook Remote Code Execution
• Apple Mac OS X International Components for Unicode Buffer Overflow
• Apple Mac OS X CDF File Multiple Buffer Overflow Vulnerabilities
• Apple Mac OS X Screen Sharing Client Multiple Remote Code Execution Vulnerabilities
• Apple Mac OS X "ptrace" Mutex Handling Local Denial of Service
• Microsoft Active Directory LDAP Request Stack Exhaustion Denial of Service
• Microsoft Excel Cache Memory Corruption Remote Code Execution
• Microsoft Windows Kernel GDI Data Validation Local Privilege Escalation

18 November 2009

• HP NonStop Server Unauthorized Data Access
• HP Power Manager Unspecified Remote Code Execution
• Drupal Smartqueue OG Confirmation Message Security Bypass
• Google Chrome prior to 3.0.195.32 Multiple Security Vulnerabilities
• Adobe Shockwave Player Multiple Remote Code Execution and Denial of Service Vulnerabilities
• Sun Solaris Sockets Direct Protocol (SDP) Driver "sdp(7D)" Remote Denial of Service
• Apple Mac OS X Launch Services Remote Security Bypass
• Apple Mac OS X IOKit Keyboard Firmware Local Unauthorized Access
• Apple Mac OS X Disk Images FAT Filesystem Heap Buffer Overflow
• Apple Mac OS X Adaptive Firewall Security Bypass
• XM Easy Personal FTP Server
• Microsoft Word Record Parsing Remote Code Execution
• Microsoft Excel Field Parsing Remote Code Execution
• Microsoft Windows Kernel NULL Pointer Dereference Local Privilege Escalation

17 November 2009

• IBM BladeCenter Advanced Management Module Multiple Unspecified Security Vulnerabilities
• eNdonesia "mod" Parameter Local File Include
• Xerox Fiery Webtools "summary.php" SQL Injection
• Drupal User Protect Cross-Site Request Forgery
• RoundCube Webmail Multiple Cross-Site Request Forgery Vulnerabilities
• Blender ".blend" file Remote Command Execution
• IBM PowerHA Cluster Management Unauthorized Access
• FreeBSD "fifo_vnops.c" Resource Leak Local Denial of Service
• Apple Mac OS X QuickDraw Manager Remote Code Execution
• Apple Mac OS X Dictionary Arbitrary Script Injection
• Apple Mac OS X DirectoryService Memory Corruption
• Apple Mac OS X CoreGraphics Multiple Heap Overflow Vulnerabilities
• Apache Tomcat Windows Installer Insecure Password
• Microsoft Excel Malformed BIFF Record Remote Code Execution
• Microsoft Excel Document Parsing Remote Code Execution
• Microsoft Windows License Logging Server Remote Heap Buffer Overflow

16 November 2009

• Hitachi Cosminexus XML Processor Denial of Service
• Drupal Zoomify Module "node title" HTML Injection
• Apple Mac OS X Apache HTTP TRACE Cross-Site Scripting
• Poppler "ABWOutputDev.cc" Remote Buffer Overflow
• Multiple Vendor TLS Protocol Session Renegotiation Security
• Sun Solaris SCTP "sctp(7P)" and SDP "sdp(7D)" Sockets Local Denial of Service
• Linux Kernel "fput()" NULL Pointer Dereference Local Denial of Service
• Apple Mac OS X Login Window Race Condition
• Apple Mac OS X Help Viewer Spoofed HTTP Response Remote Code Execution
• Apple Mac OS X Spotlight Insecure Temporary File Handling
• Apple Mac OS X AFP Client Multiple Remote Code Execution Vulnerabilities
• Pablo Software Solutions Baby Web Server Multiple Request Remote Denial of Service
• Microsoft Excel "Featheader" Record Remote Code Execution
• Microsoft Excel Index Parsing Remote Code Execution
• Microsoft Windows Web Services on Devices API Remote Code Execution

13 November 2009

• TFTgallery "album" Parameter Directory Traversal
• Drupal Storm Module "storminvoiceitem" Security Bypass
• TYPO3 Flagbit Filebase Extension Unspecified SQL Injection
• Drupal FAQ Ask Module URI Redirection and Cross-Site Scripting Vulnerabilities
• Mozilla Firefox Remote Memory Corruption
• Mozilla Firefox XPCOM Utility Chrome Privilege Escalation
• Mozilla FireFox Download Manager World Writable File Local Privilege Escalation Vulnerability
• OpenBSD and NetBSD "printf(1)" Format String Parsing Denial of Service
• Novell eDirectory NULL Base DN Denial Of Service

12 November 2009

• Serv-U Web Client HTTP Request Remote Buffer Overflow
• Drupal Workflow Module Multiple HTML Injection Vulnerabilities
• PunBB "pun_attachment" extension SQL Injection
• IBM Runtimes for Java Technology "XML4J" Component Unspecified Vulnerability
• Mozilla Firefox Remote Memory Corruption
• Mozilla Firefox and SeaMonkey Proxy Auto-Configuration File Remote Code Execution
• Mozilla Firefox Floating Point Conversion Heap Overflow
• OpenBSD "getsockopt(2)" Remote Denial of Service
• Multiple Symantec Altiris Products ActiveX Control Buffer Overflow

11 November 2009

• Mahara Admin Password Reset Security Bypass
• Drupal CCK Comment Reference Module Node Title Security Bypass Vulnerability
• TFTgallery "sample" Parameter Cross-Site Scripting
• F-Secure Products PDF Files Scan Evasion
• Mozilla Firefox Multiple Remote Memory Corruption Vulnerabilities
• Mozilla Firefox and SeaMonkey "libpr0n" GIF Parser Heap-Based Buffer Overflow
• Opera Web Browser prior to 10.01 Multiple Security Vulnerabilities
• Linux Kernel "pipe.c" Local Privilege Escalation
• Multiple Panda Products Insecure Program File Permissions Local Privilege Escalation

10 November 2009

• SEIL/X Series and SEIL/B1 Buffer Overflow and Denial of Service Vulnerabilities
• "com_jumi" Component for Joomla! Backdoor
• Drupal OpenSocial Shindig-Integrator Module HTML Injection
• Mahara Resume Blocktype Cross-Site Scripting
• Mozilla Firefox Multiple Remote Memory Corruption Vulnerabilities
• Mozilla Firefox "document.getSelect" Cross-Domain Information Disclosure
• Mozilla Firefox JavaScript Web-Workers Remote Code Execution
• Sun Solaris "xscreensaver(1)" From JDS Local Information Disclosure
• SUSE Linux "scsi_discovery tool" Insecure Temporary File Creation
• Avast! Antivirus "aavmKer4.sys" Driver Local Privilege Escalation

09 November 2009

• Multiple Vendor Hummingbird STR Service Buffer Overflow
• Multiple Intel Desktop Board Models Bitmap Processing Buffer Overflow
• CubeCart "admin.php" Authentication Bypass
• Drupal LDAP Integration Cross-Site Scripting and Authentication Bypass Vulnerabilities
• TYPO3 Apache Solr Search Extension Unspecified Cross-Site Scripting
• Cherokee Directory Traversal
• Mozilla Firefox and Seamonkey Download Filename Spoofing
• Mozilla Firefox Form History Information Disclosure
• Multiple BSD Distributions "printf(3)" Memory Corruption
• Research In Motion BlackBerry Desktop Manager ActiveX Control Remote Code Execution

06 November 2009

• Multiple Vendors IPv6 Implementation Remote Denial of Service
• Achievo "debugger.php" Remote File Include
• Drupal Userpoints Module "userpoint" Information Disclosure
• Joomla! JD-WordPress Component "wp-feed.php" Remote File Include
• RunCMS "forum" Parameter SQL Injection
• OpenDocMan Cross-Site Scripting and SQL Injection
• Websense Email Security Cross-Site Scripting and HTML Injection Vulnerabilities
• Cybozu Multiple Products Unspecified Cross-Site Scripting Vulnerabilities
• McAfee Products TAR and PDF Files Scan Evasion Vulnerabilities
• nginx "ngx_http_process_request_headers()" Remote Buffer Overflow
• Perl UTF-8 Regular Expression Processing Remote Denial of Service
• Adobe Reader and Acrobat Certificate Modification
• GD Graphics Library "_gdGetColors" Remote Buffer Overflow
• Adobe Reader and Acrobat Buffer Overflow
• Adobe Reader and Acrobat U3D File Pointer Overwrite Remote
• Bftpd Unspecified Remote Denial of Service Vulnerability
• Sun Solaris ZFS Filesystem Security Bypass
• Linux Kernel KVM "update_cr8_intercept()" Local Denial of Service
• Linux Kernel "get_random_int" Random Number Generation Weakness
• Gpg4win Remote Denial of Service
• Websense Email Security and Email Manager "STEMWADM.EXE" Remote Denial of Service

05 November 2009

• Aruba Mobility Controller 802.11 Association Request Frame Remote Denial of Service
• Cisco Unified Presence TimesTenD Process Denial of Service
• TYPO3 Core Multiple Security Vulnerabilities
• Vivvo CMS "files.php" Directory Traversal
• Drupal Webform Module HTML Injection and Information Disclosure Vulnerabilities
• RunCMS "pid" Parameter SQL Injection
• Dream Poll Cross-Site Scripting and SQL Injection
• IBM Rational AppScan Help Pages Unspecified Cross-Site Scripting
• Zainu "searchSongKeyword" Parameter Cross-Site Scripting
• Wireshark 1.2.2 and 1.0.9 Multiple Vulnerabilities
• python-markdown2 Multiple Security Vulnerabilities
• HTML-Parser Invalid HTML Entity Remote Denial of Service
• McKesson Horizon Clinical Infrastructure (HCI) Password Disclosure
• Adobe Reader and Acrobat ActiveX Control Denial of Service
• Adobe Reader and Acrobat Unspecified Integer Overflow Memory Corruption
• Adobe Acrobat Reader Firefox Plugin Memory Corruption Remote Code Execution
• Adobe Reader and Acrobat for Unix Debug Mode Remote Code Execution
• Linux Kernel Netlink Packets Security Bypass
• Linux Kernel KVM "kvm_dev_ioctl_get_supported_cpuid()" Integer Overflow
• SystemTap Unprivileged Mode Multiple Denial of Service
• Linux Kernel "/drivers/net/r8169.c" Out-of-IOMMU Error Local Denial of Service
• Pegasus Mail POP3 Response Remote Buffer Overflow
• EMC RepliStor Server "rep_serv.exe" Remote Denial of Service

04 November 2009

• Overland Storage Snap Server 410
• TFTgallery "album" Parameter Cross-Site Scripting Vulnerability
• DM Albums Multiple File Deletion Vulnerabilities
• TYPO3 freeCap CAPTCHA Module Unspecified Unauthorized Access Vulnerability
• Drupal Printer, e-mail and PDF version Module Security Bypass and HTML Injection Vulnerabilities
• Joomla! "com_photoblog" Component "category" Parameter SQL Injection
• Drupal Abuse Module Cross-Site Scripting
• TBmnetCMS "content" Parameter Cross-Site Scripting
• bloofoxCMS "search" Parameter Cross-Site Scripting
• OpenLDAP X.509 Certificate NULL Character Certificate Validation Security Bypass
• Asterisk Missing ACL Check Remote Security Bypass
• MapServer HTTP Request Processing Integer Overflow
• squidGuard Multiple Security Bypass Vulnerabilities
• Poppler "create_surface_from_thumbnail_data()" Integer Overflow Memory Corruption
• Adobe Acrobat Integer Overflow Denial Of Service Vulnerability
• Adobe Reader and Acrobat XMP-XML Entity Expansion Denial of Service
• Adobe Reader and Acrobat "annots.api" Denial of Service
• Adobe Reader and Acrobat COM Objects Memory Corruption Remote Code Execution
• Sun Solaris Trusted Extensions Policy Configuration Remote Privilege Escalation Weakness
• Linux Kernel 2.4 and 2.6 Local Information Disclosure
• Linux Kernel "unix_stream_connect()" Local Denial of Service
• Multiple Rising Products Insecure Program File Permissions Local Privilege Escalation
• EMC Documentum ApplicationXtender Admin Agent Multiple Vulnerabilities
• AOL AIM "sipXtapi.dll" Multiple Buffer Overflow Vulnerabilities

03 November 2009

• 3Com OfficeConnect ADSL Wireless 11g Firewall Router Authentication Multiple Remote Vulnerabilities
• Cisco Unified Presence Track Network Connection Denial of Service
• IBM Lotus Connections Mobile Activities Pages Cross-Site Scripting
• Drupal FileField Module Information Disclosure
• Joomla! com_booklibrary Component "releasenote.php" Remote File Include
• Drupal Organic Groups Vocabulary Module Unauthorized Access
• Joomla! "com_jshop" Component "pid" Parameter SQL Injection
• Drupal vCard Module Cross-Site Scripting
• IBM Rational RequisitePro ReqWebHelp Multiple Cross-Site Scripting Vulnerabilities
• Eclipse BIRT "run?__report" Parameter Cross-Site Scripting
• VMware Products Directory Traversal
• Novell eDirectory "/dhost/modules?L:" Buffer Overflow Vulnerability
• Adobe Reader and Acrobat File Extension Controls Remote Security Bypass
• CamlImages JPEG Handling Remote Buffer Overflow
• Adobe Acrobat Image Decoder Remote Code Execution
• Adobe Reader and Acrobat "AcroPDF.dll" ActiveX Control Denial of Service
• Adobe Reader and Acrobat Compact Font Format Heap Memory Corruption
• Sun OpenSolaris Unspecified Local Security
• Linux Kernel "proc" World Writeable File Security Bypass
• Linux Kernel NFSV4 CallbackClient NULL Pointer Dereference Local Denial of Service
• Cherokee Web Server Malformed Packet Remote Denial of Service
• DWebPro "file" Parameter Remote Command Execution
• Avast! Insecure Program File Permissions Local Privilege Escalation

02 November 2009

• Intel BIOS Version Reversion Local Privilege Escalation
• Sahana "mod" Parameter Local File Disclosure
• Drupal Simplenews Statistics Module Multiple Vulnerabilities
• Joomla! Ajax Chat Component "ajcuser.php" Remote File Include
• Pentaho BI Multiple Cross-Site Scripting and Information Disclosure Vulnerabilities
• Drupal Moodle Course List Module Unspecified SQL Injection
• Drupal Flag Content Module HTML Injection
• Snitz Forums 2000 Cross-Site Scripting and HTML Injection Vulnerabilities
• Opera Web Browser prior to 10.01 Multiple Security Vulnerabilities
• VMware Products Page Fault Exception Local Privilege Escalation
• Sun Java System Web Server Unspecified Remote Buffer Overflow
• Kleopatra Malformed Certificate Remote Denial of Service
• QEMU VNC Client Disconnect Use After Free Remote Code Execution
• Adobe Reader and Acrobat Trust Manager Remote Security Bypass
• Adobe Reader and Acrobat JavaScript Memory Corruption
• Sun OpenSolaris Kernel Panic Remote Denial of Service Vulnerability
• Linux Kernel r128 Driver CCE Initialization NULL Pointer Dereference Denial of Service
• Linux Kernel Keyring "refcount" Local Denial of Service
• Microsoft SharePoint Team Services Download Feature Source Code Information Disclosure