Bugtraq: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

243 messages starting Sep 01 09 and ending Sep 30 09
Date index | Thread index | Author index

• VMSA-2009-0011 VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2.0 VMware Security team (Sep 01)
• Norman Internet Update Deamon sends cleartext license key on update Stefan Bauer (Sep 01)
  • Re: Norman Internet Update Deamon sends cleartext license key on update Jeffrey Walton (Sep 01)
• Pwning Opera Unite with Inferno's Eleven Inferno (Sep 01)
• SEC Consult SA-20090901-0 :: File disclosure vulnerability in JSFTemplating, Mojarra Scales and GlassFish Application Server v3 Admin console Johannes Greil (Sep 01)
• Secunia Research: OpenOffice.org Word Document Table Parsing Integer Underflow Secunia Research (Sep 01)
• Secunia Research: OpenOffice.org Word Document Table Parsing Buffer Overflow Secunia Research (Sep 01)
• [BMSA-2009-06] Remote code execution in BKAV eOffice Nam Nguyen (Sep 01)
• [ MDVSA-2009:197 ] nss security (Sep 01)
• [SECURITY] [DSA 1876-1] New dnsmasq packages fix remote code execution Florian Weimer (Sep 01)
• [USN-827-1] Dnsmasq vulnerabilities Jamie Strandboge (Sep 02)
• [USN-810-2] NSS regression Kees Cook (Sep 02)
• Re: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday Thierry Zoller (Sep 02)
  • Re[2]: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday Vladimir '3APA3A' Dubrovin (Sep 02)
    • Re: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday Guido Landi (Sep 02)
      • Re[2]: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday Vladimir '3APA3A' Dubrovin (Sep 02)
      • Re: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday Guido Landi (Sep 02)
  • <Possible follow-ups>
  • Re: [Full-disclosure] Microsoft Internet Information Server ftpd zeroday Thierry Zoller (Sep 08)
• [ADVISORY] NetCache URL DoS - Argentinian ISP Arturo 'Buanzo' Busleiman (Sep 02)
• International Hacking & Security Conference "POC2009" and Call for Paper pocadm (Sep 02)
• [SECURITY] [DSA 1877-1] New mysql-dfsg-5.0 packages fix arbitrary code execution Sebastien Delafond (Sep 02)
• [SECURITY] [DSA 1878-1] New devscripts packages fix remote code execution Florian Weimer (Sep 02)
• Re: [TZO-08-2009] Bitdefender generic bypass/evasion noloader (Sep 08)
• yTNEF/Evolution TNEF Attachment decoder plugin directory traversal & buffer overflow vulnerabilities Akita Software Security (Sep 08)
• [ GLSA 200909-01 ] Linux-PAM: Privilege escalation Alex Legler (Sep 08)
• [ GLSA 200909-02 ] libvorbis: User-assisted execution of arbitrary code Alex Legler (Sep 08)
• Secunia Research: VMWare VMnc Codec Mismatched Dimensions Buffer Overflow Secunia Research (Sep 08)
• [oCERT-2009-013] yTNEF/Evolution TNEF attachment decoder input sanitization errors Andrea Barisani (Sep 08)
• VMSA-2009-0012 VMware Movie Decoder, VMware Workstation, VMware Player, and VMware ACE resolve security issues. VMware Security team (Sep 08)
• [SECURITY] [DSA 1881-1] New cyrus-imapd packages fix arbitrary code execution Nico Golde (Sep 08)
• Various Orion application application server example pages are vulnerable to XSS. info (Sep 08)
• Novell eDirectory 8.8 SP5 Dhost Http Server DoS karakorsankara (Sep 08)
• [scip_Advisory 4021] IBM Lotus Notes 8.5 RSS Widget Privilege Escalation Marc Ruef (Sep 08)
• [ MDVSA-2009:225 ] qt4 security (Sep 08)
• Regarding Microsoft srv2.sys SMB2.0 NEGOTIATE BSOD Reversemode (Sep 08)
• MS09-048 includes fixes for TCP/IP implementation issues reported more than a year ago Juha-Matti Laurio (Sep 08)
  • <Possible follow-ups>
  • Re: MS09-048 includes fixes for TCP/IP implementation issues reported more than a year ago bob (Sep 09)
    • RE: MS09-048 includes fixes for TCP/IP implementation issues reported more than a year ago Jim Duncan (Sep 09)
• ZDI-09-062: Microsoft Internet Explorer JScript arguments Invocation Memory Corruption Vulnerability ZDI Disclosures (Sep 08)
• [USN-828-1] PAM vulnerability Kees Cook (Sep 09)
• Open Beta - New Free AV Software Alfred Huger (Sep 09)
• Re: DoS vulnerability in Google Chrome MustLive (Sep 09)
• TCP/IP Orphaned Connections Vulnerability Fabian Yamaguchi (Sep 09)
• [Advisory] ChartDirector Critical File Access DokFLeed (Sep 09)
• Multiple RDP Connections BSOD DOS Tim Medin (Sep 09)
  • Re: Multiple RDP Connections BSOD DOS Elvedin Trnjanin (Sep 09)
    • Re: Multiple RDP Connections BSOD DOS Tim Medin (Sep 10)
  • Re: Multiple RDP Connections BSOD DOS John Menerick (Sep 09)
  • <Possible follow-ups>
  • Re: Re: Multiple RDP Connections BSOD DOS nobody (Sep 09)
    • RE: Re: Multiple RDP Connections BSOD DOS Earnhart, Benjamin J (Sep 09)
• SeacureIT Preview Conference 2009 Stefano Zanero (Sep 09)
• [ GLSA 200909-03 ] Apache Portable Runtime, APR Utility Library: Execution of arbitrary code Alex Legler (Sep 09)
• [ GLSA 200909-04 ] Clam AntiVirus: Multiple vulnerabilities Alex Legler (Sep 09)
• 4f: The File Format Fuzzing Framework Krakow Labs (Sep 09)
• [ GLSA 200909-05 ] Openswan: Denial of Service Alex Legler (Sep 09)
• [ GLSA 200909-06 ] aMule: Parameter injection Alex Legler (Sep 09)
• [ GLSA 200909-07 ] TkMan: Insecure temporary file usage Alex Legler (Sep 09)
• [ GLSA 200909-08 ] C* music player: Insecure temporary file usage Alex Legler (Sep 09)
• [ GLSA 200909-09 ] Screenie: Insecure temporary file usage Alex Legler (Sep 09)
• [ GLSA 200909-10 ] LMBench: Insecure temporary file usage Alex Legler (Sep 09)
• [ GLSA 200909-11 ] GCC-XML: Insecure temporary file usage Alex Legler (Sep 09)
• [SECURITY] [DSA 1882-1] New xapian-omega packages fix cross-site scripting Nico Golde (Sep 09)
• SMB SRV2.SYS Denial of Service PoC igottabug (Sep 09)
• CORE-2009-0820 - Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server CORE Security Technologies Advisories (Sep 09)
• [ MDVSA-2009:226 ] aria2 security (Sep 09)
• Nullam Blog Multiple Remote Vulnerabilities Salvatore Fresta aka Drosophila (Sep 10)
• [SECURITY] [DSA 1883-1] New nagios2 packages fix several cross-site scriptings Steffen Joeris (Sep 10)
• SecurityTubeCon CFP, Venue: Cyberspace! Vivek Ramachandran (Sep 10)
• [ MDVSA-2009:226 ] freeradius security (Sep 10)
• T-HTB Manager Mutiple Blind SQL Injection Salvatore Fresta aka Drosophila (Sep 10)
• [USN-821-1] Firefox and Xulrunner vulnerabilities Jamie Strandboge (Sep 10)
• ZDI-09-064: Apple QuickTime FlashPix Sector Size Overflow Vulnerability ZDI Disclosures (Sep 10)
• ZDI-09-063: Apple QuickTime H.264 Nal Unit Length Heap Overflow Vulnerability ZDI Disclosures (Sep 10)
• ZDI-09-065: Mozilla Firefox TreeColumns Dangling Pointer Vulnerability ZDI Disclosures (Sep 10)
• [USN-829-1] Qt vulnerability Jamie Strandboge (Sep 11)
• [SECURITY] [DSA 1878-2] New devscripts packages fix regressions Florian Weimer (Sep 11)
• [ MDVSA-2009:229 ] cyrus-imapd security (Sep 11)
• Siemens Gigaset SE361 Wlan - Remote Reboot crashbrz (Sep 11)
• Regular Expression Denial of Service Alex Roichman (Sep 11)
  • Re: Regular Expression Denial of Service Gadi Evron (Sep 11)
    • Re[2]: Regular Expression Denial of Service Thierry Zoller (Sep 11)
      • Re: Regular Expression Denial of Service Gadi Evron (Sep 11)
      • Re: Re[2]: Regular Expression Denial of Service Jeffrey Walton (Sep 14)
  • Re: Regular Expression Denial of Service Pavel Kankovsky (Sep 14)
  • Re: Regular Expression Denial of Service Pavel Kankovsky (Sep 14)
  • <Possible follow-ups>
  • Re: Regular Expression Denial of Service hackerwebzine (Sep 28)
• [ MDVSA-2009:230 ] pidgin security (Sep 11)
• iphone email client does not validate ssl certificates Bill Borskey (Sep 11)
  • Re: iphone email client does not validate ssl certificates Pavel Machek (Sep 28)
    • Re: iphone email client does not validate ssl certificates Steve Shockley (Sep 29)
• [ MDVSA-2009:231 ] htmldoc security (Sep 11)
• ShmooCon 2010 CFP Bruce Potter (Sep 11)
• [ MDVSA-2009:228 ] libneon security (Sep 11)
• [ MDVSA-2009:197-2 ] nss security (Sep 11)
• [ MDVSA-2009:232 ] libsamplerate security (Sep 11)
• vBulletin 3.8.2 Denial of Service Exploit snip3r ir4Q (Sep 14)
• nullcon Goa 2010 Call For Papers nullcon nullcon (Sep 14)
• [ GLSA 200909-12 ] HTMLDOC: User-assisted execution of arbitrary code Alex Legler (Sep 14)
• [ GLSA 200909-13 ] irssi: Execution of arbitrary code Alex Legler (Sep 14)
• [ GLSA 200909-14 ] Horde: Multiple vulnerabilities Alex Legler (Sep 14)
• [ GLSA 200909-15 ] Lynx: Arbitrary command execution Alex Legler (Sep 14)
• War FTP Daemon Remote Denial Of Service Vulnerability Jarle Aase (Sep 14)
• Re: [Full-disclosure] FreeBSD <= 6.1 kqueue() NULL pointer dereference Przemyslaw Frasunek (Sep 14)
• [ GLSA 200909-16 ] Wireshark: Denial of Service Tobias Heinlein (Sep 14)
• [ GLSA 200909-17 ] ZNC: Directory traversal Tobias Heinlein (Sep 14)
• [SECURITY] [DSA 1883-2] New nagios2 packages fix regression Steffen Joeris (Sep 14)
• [ECHO_ADV_111$2009] Joomla Hotel Booking System Component XSS/SQL Injection Multiple Vulnerability adv (Sep 14)
• [SECURITY] [DSA 1884-1] New nginx packages fix arbitrary code execution Nico Golde (Sep 14)
• [SECURITY] [DSA 1885-1] New xulrunner packages fix several vulnerabilities Moritz Muehlenhoff (Sep 14)
• [SECURITY] [DSA 1886-1] New iceweasel packages fix several vulnerabilities Moritz Muehlenhoff (Sep 14)
• [USN-831-1] OpenEXR vulnerabilities Marc Deslauriers (Sep 14)
• [USN-830-1] OpenSSL vulnerability Marc Deslauriers (Sep 14)
• [TKADV2009-007] Apple iPhone OS AudioCodecs Heap Buffer Overflow Tobias Klein (Sep 14)
• [ MDVSA-2009:233 ] kernel security (Sep 15)
• Local privilege escalation vulnerability in Protector Plus Antivirus (Proland Software) ss_contacts (Sep 15)
• [ MDVSA-2009:234-1 ] silc-toolkit security (Sep 15)
• [ MDVSA-2009:235 ] silc-toolkit security (Sep 15)
• [ MDVSA-2009:234 ] silc-toolkit security (Sep 15)
• [SECURITY] [DSA 1887-1] New rails packages fix cross-site scripting Steffen Joeris (Sep 15)
• 3rd party patch for XP for MS09-048? Aras "Russ" Memisyazici (Sep 15)
  • Re: 3rd party patch for XP for MS09-048? Jeffrey Walton (Sep 15)
    • Re: 3rd party patch for XP for MS09-048? Eric Kimminau (Sep 16)
    • Re: 3rd party patch for XP for MS09-048? Susan Bradley (Sep 16)
      • Re: 3rd party patch for XP for MS09-048? Susan Bradley (Sep 16)
      • Re: 3rd party patch for XP for MS09-048? Jeffrey Walton (Sep 16)
      • Re: 3rd party patch for XP for MS09-048? Susan Bradley (Sep 16)
      • Re: 3rd party patch for XP for MS09-048? Tom Grace (Sep 16)
    • Re: 3rd party patch for XP for MS09-048? Eric C. Lukens (Sep 16)
      • RE: [Full-disclosure] 3rd party patch for XP for MS09-048? Thor (Hammer of God) (Sep 16)
      • RE: [Full-disclosure] 3rd party patch for XP for MS09-048? Larry Seltzer (Sep 16)
      • RE: [Full-disclosure] 3rd party patch for XP for MS09-048? Thor (Hammer of God) (Sep 16)
      • RE: [Full-disclosure] 3rd party patch for XP for MS09-048? Thor (Hammer of God) (Sep 16)
      • Re: [Full-disclosure] 3rd party patch for XP for MS09-048? Susan Bradley (Sep 16)
      • RE: [Full-disclosure] 3rd party patch for XP for MS09-048? Thor (Hammer of God) (Sep 16)
      • Re: [Full-disclosure] 3rd party patch for XP for MS09-048? Susan Bradley (Sep 16)
      • RE: [Full-disclosure] 3rd party patch for XP for MS09-048? Larry Seltzer (Sep 16)
      • RE: [Full-disclosure] 3rd party patch for XP for MS09-048? Aras "Russ" Memisyazici (Sep 17)
      • Re: [Full-disclosure] 3rd party patch for XP for MS09-048? John Morrison (Sep 17)
      • Re: [Full-disclosure] 3rd party patch for XP for MS09-048? Susan Bradley (Sep 17)
      • Message not available
      • Re: [Full-disclosure] 3rd party patch for XP for MS09-048? Susan Bradley (Sep 17)
      • Re: [Full-disclosure] 3rd party patch for XP for MS09-048? Mailing lists at Core Security Technologies (Sep 23)
    • Re: 3rd party patch for XP for MS09-048? Matt Riddell (Sep 16)
  • <Possible follow-ups>
  • Re: Re: 3rd party patch for XP for MS09-048? Elizabeth . a . greene (Sep 16)
    • Re: 3rd party patch for XP for MS09-048? Susan Bradley (Sep 16)
      • Re: 3rd party patch for XP for MS09-048? Rob Thompson (Sep 16)
      • Re: 3rd party patch for XP for MS09-048? Susan Bradley (Sep 16)
• Improper Authentication Mechanism in 3Com Wireless8760 Dual Radio 11a/b/g Poe Access Point Yossi Yakubov (Sep 15)
  • Re: Improper Authentication Mechanism in 3Com Wireless8760 Dual Radio 11a/b/g Poe Access Point Tom Neaves (Sep 16)
• [SECURITY] [DSA 1888-1] New openssl packages deprecate MD2 hash signatures Moritz Muehlenhoff (Sep 16)
• [security bulletin] HPSBUX02458 SSRT090104 rev.1 - HP-UX Running bootpd, Remote Denial of Service (DoS) security-alert (Sep 16)
• ANNOUNCE: RFIDIOt release - v0.z - 16th September, 2009 Adam Laurie (Sep 16)
• Exploiting Chrome and Opera's inbuilt ATOM/RSS reader with Script Execution and more Inferno (Sep 16)
• Iret #GP on pre-commit handling failure: the NetBSD case (CVE-2009-2793) Julien TINNES (Sep 16)
• [SECURITY] [DSA 1889-1] New icu packages correct multibyte sequence parsing Moritz Muehlenhoff (Sep 16)
• [USN-832-1] FreeRADIUS vulnerability Marc Deslauriers (Sep 16)
• nginx internal DNS cache poisoning Matthew Dempsky (Sep 17)
  • Re: nginx internal DNS cache poisoning Maxim Dounin (Sep 17)
• Quiksoft EasyMail 6.0.3.0 imap connect() ActiveX stack overflow exploit Sebastian Wolfgarten (Sep 17)
• SEC Consult SA-20090917-0 :: RADactive I-Load Multiple Vulnerabilities Stefan Streichsbier (Sep 17)
• Peiter "Mudge" Zatko petition to be named U.S. Cybersecurity Chief The Sp3ctacle (Sep 17)
• Multiple Remote Command Execution vulnerabilities on Avaya Intuity Audix LX (plus some client-side bugs) Adrian P (Sep 18)
• [USN-833-1] KDE-Libs vulnerability Jamie Strandboge (Sep 18)
• [security bulletin] HPSBST02459 SSRT080134 rev.2 - HP StorageWorks Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders, Denial of Service (DoS) security-alert (Sep 18)
• Advisory 01/2009: Horde_Form_Type_image Arbitrary File Overwrite Vulnerability Stefan Esser (Sep 18)
• [ GLSA 200909-18 ] nginx: Remote execution of arbitrary code Alex Legler (Sep 18)
• Advisory: Crypto backdoor in Qnap storage devices (CVE-2009-3200) Marc Heuse (Sep 18)
• [ GLSA 200909-19 ] Dnsmasq: Multiple vulnerabilities Alex Legler (Sep 21)
• Mambo 4.6.3 arbitrary file upload Paweł Łaskarzewski (Sep 21)
• Dawaween V 1.03 <<----SQL Injection Exploit Dazz . band (Sep 21)
• rubrique 'rubrique.php' SQL Injection Vulnerability CrAzY_CrAcKeR (Sep 21)
• [ MDVSA-2009:236 ] firefox security (Sep 21)
• [SECURITY] [DSA 1890-1] New wxwidgets packages fix arbitrary code execution Steffen Joeris (Sep 21)
• [scip_Advisory 4020] Check Point Connectra R62 Login Script Injection Vulnerability Stefan Friedli (Sep 21)
• [UPRSN] Ubuntu Privacy Remix 9.04r2 fixes security issues Ubuntu Privacy Remix Team (Sep 21)
• [USN-834-1] PostgreSQL vulnerabilities Jamie Strandboge (Sep 21)
• [ MDVSA-2009:237 ] openssl security (Sep 21)
• [Suspected Spam][USN-835-1] neon vulnerabilities Kees Cook (Sep 21)
• [ MDVSA-2009:238 ] openssl security (Sep 21)
• [security bulletin] HPSBGN02441 SSRT090082 rev.1 - HP ProCurve Identity Driven Manager (IDM) Running on Microsoft IAS or NPS, Local Unauthorized Access security-alert (Sep 22)
• ToorCon 11 Preliminary Lineup Announced! h1kari (Sep 22)
• [MajorSecurity Advisory #55]moziloCMS - Directory Traversal, Cross Site Scripting and Session Fixation Issues david (Sep 22)
• [SECURITY] [DSA 1891-1] New changetrack packages fix arbitrary code execution Steffen Joeris (Sep 22)
• [ MDVSA-2009:239 ] openssl security (Sep 22)
• [ MDVSA-2009:240 ] apache security (Sep 22)
• [ MDVSA-2009:241 ] squid security (Sep 22)
• [security bulletin] HPSBUX02457 SSRT090174 rev.1 - HP-UX Running Role-Based Access Control (RBAC), Local Unauthorized Access security-alert (Sep 22)
• [ MDVSA-2009:242 ] dovecot security (Sep 22)
• [ MDVSA-2009:242-1 ] dovecot security (Sep 22)
• [ MDVSA-2009:243 ] freetype2 security (Sep 23)
• [DSECRG-09-055] OSSIM 2.1 - Multiple security vulnerabilities research (Sep 23)
• nginx - low risk webdav destination bug Kingcope (Sep 23)
• [USN-836-1] WebKit vulnerabilities Marc Deslauriers (Sep 23)
• Cisco Security Advisory: Cisco IOS Software Network Time Protocol Packet Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
• Cisco Security Advisory: Cisco IOS Software Internet Key Exchange Resource Exhaustion Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
• Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
• Cisco Security Advisory: Cisco IOS Software H.323 Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
• Cisco Security Advisory: Cisco IOS Software Object-group Access Control List Bypass Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
• Avast aswMon2.sys kernel memory corruption and Local Privilege Escalation. contact . fingers (Sep 23)
• Cisco Security Advisory: Cisco IOS Software Crafted Encryption Packet Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
• [SECURITY] [DSA 1893-1] New cyrus-imapd-2.2/kolab-cyrus-imapd packages fix arbitrary code execution Steffen Joeris (Sep 23)
• Cisco Security Advisory: Cisco IOS Software Zone-Based Policy Firewall Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
• [ MDVSA-2009:244 ] xfig security (Sep 23)
• [SECURITY] [DSA 1892-1] New dovecot packages fix arbitrary code execution Steffen Joeris (Sep 23)
• cour supreme 'index.php' SQL Injection & Local File Include Vulnerability CrAzY_CrAcKeR (Sep 23)
• Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
• Cisco Security Advisory: Cisco Unified Communications Manager Express Vulnerability Cisco Systems Product Security Incident Response Team (Sep 23)
• ZDI-09-066: Adobe RoboHelp Server Arbitrary File Upload and Execute Vulnerability ZDI Disclosures (Sep 23)
• [ MDVSA-2009:243-1 ] freetype2 security (Sep 24)
• [SECURITY] [DSA 1894-1] New newt packages fix arbitrary code execution Steffen Joeris (Sep 24)
• [ MDVSA-2009:245 ] glib2.0 security (Sep 24)
• [USN-837-1] Newt vulnerability Marc Deslauriers (Sep 24)
• Black Hat DC Call for Papers is now OPEN Jeff Moss (Sep 24)
• Engeman - SQL Injection Vulnerability (vendor url erratum) crashbrz (Sep 24)
• Cross-Site Scripting vulnerability in E107 MustLive (Sep 24)
• Call for Participation - ACM Conference on Computer and Communications Security (CCS) Christopher Kruegel (Sep 24)
• [SECURITY] [DSA 1895-1] New xmltooling packages fix potential code execution Florian Weimer (Sep 24)
• COMPENG 2010 - Extended Submission Deadline Federico Maggi (Sep 25)
• Cisco ACE XML Gateway <= 6.0 Internal IP disclosure nitrØus (Sep 25)
• Multiple Vulnerabilities Dr_IDE (Sep 25)
  • <Possible follow-ups>
  • Multiple Vulnerabilities Jerome Athias (Sep 28)
• [ GLSA 200909-20 ] cURL: Certificate validation error Alex Legler (Sep 25)
• [ MDVSA-2009:246 ] php security (Sep 25)
• [ MDVSA-2009:247 ] php security (Sep 25)
• [ MDVSA-2009:248 ] php security (Sep 25)
• [MajorSecurity Advisory #59]PHP <=5.3 - mysqli_real_escape_string() full path disclosure David Vieira-Kurz (Sep 28)
• (edited) [DSECRG-09-044] SAP GUI 7.1 Insecure Methods Alexandr Polyakov (Sep 28)
• [SECURITY] [DSA 1897-1] New horde3 packages fix arbitrary code execution Nico Golde (Sep 28)
• [USN-838-1] Dovecot vulnerabilities Marc Deslauriers (Sep 28)
• [MajorSecurity Advisory #57]PHP <=5.3 - preg_match() full path disclosure David Vieira-Kurz (Sep 28)
• [ MDVSA-2009:249 ] newt security (Sep 28)
• [DSECRG-09-043] SAP GUI 7.1 Insecure Method Alexandr Polyakov (Sep 28)
• Local privilege escalation vulnerability in Trustport security software ss_contacts (Sep 28)
• Vulnerabilities in E107 MustLive (Sep 28)
• [SECURITY] [DSA 1896-1] New Shibboleth 1.x packages fix potential code execution Florian Weimer (Sep 28)
• [security bulletin] HPSBMA02461 SSRT090187 rev.1 - HP Remote Graphics Software (RGS) Sender, Remote Unauthorized Access security-alert (Sep 28)
• Cross-Site Scripting vulnerability in eCaptcha MustLive (Sep 28)
• WinRAR v3.80 - ZIP Filename Spoofing chr1x (Sep 29)
• Adobe Photoshop Elements 8.0 Active File Monitor Service Bad Security Descriptor Local Elevation Of Privileges nospam (Sep 29)
• FlatPress 0.804-0.812.1 Local File Inclusion to Remote Command Execution Giuseppe Fuggiano (Sep 29)
• MD5 hash extension attack breaks API authentication of Flickr and others Juliano Rizzo (Sep 30)
• C4 SCADA Security Advisory - OSISoft PI Server Authentication Weakness Eyal Udassin (Sep 30)
• [ MDVSA-2009:176 ] postgresql security (Sep 30)
• [ MDVSA-2009:177 ] postgresql security (Sep 30)

Previous period

Next period