Mail Index

• Thread Index

• Re: djbdns misformats some long response packets; patch and example attack
  • From: Matthew Dempsky
• Afian Document Manager Local File Inclusion
  • From: contact
• Re: Nokia N95-8 browser denial of service
  • From: MustLive
• [SECURITY] [DSA 1719-2] New GNUTLS packages fix regression
  • From: Florian Weimer
• Weekly Web Hacking Incidents update for Feb 25th
  • From: Ofer Shezaf
• YEKTA WEB Academic Web Tools CMS Multiple XSS
  • From: mr . faghani
• BlogMan 0.45 Multiple Vulnerabilities
  • From: Salvatore \"drosophila\" Fresta
• [CFP] FRHACK 2nd Call For Papers
  • From: Jerome Athias
• [security bulletin] HPSBUX02401 SSRT090005 rev.3 - HP-UX Running Apache Web Server Suite, Remote Denial of Service (DoS), Cross-site Scripting (XSS), Execution of Arbitrary Code, Cross-Site Request Forgery (CSRF)
  • From: security-alert
• EZ-Blog Beta 1 Multiple SQL Injection
  • From: Salvatore \"drosophila\" Fresta
• Announcing Cap'r Mak'r
  • From: kowsik
• [SECURITY] [DSA 1729-1] New gst-plugins-bad0.10 packages fix multiple vulnerabilities
  • From: Steffen Joeris
• rPSA-2009-0035-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl
  • From: rPath Update Announcements
• [ISecAuditors Security Advisories] eXtplorer Remote Code Execution
  • From: ISecAuditors Security Advisories
• [SECURITY] [DSA 1730-1] New proftpd-dfsg packages fix SQL injection vulnerabilites
  • From: Steffen Joeris
• [ MDVSA-2009:062 ] shadow-utils
  • From: security
• Re: Re: Local vulnerability in suexec + FastCGI + PHP configurations
  • From: security . 432
• RitsBlog 0.4.2 (Authentication Bypass) SQL Injection Vulnerability / XSS Persistent Vulnerability
  • From: Salvatore \"drosophila\" Fresta
• Blogsa <= 1.0 Beta 3 XSS Vulnerability
  • From: contact
• [SECURITY] [DSA 1731-1] New ndiswrapper packages fix arbitrary code execution vulnerability
  • From: Steffen Joeris
• [SECURITY] [DSA 1732-1] New squid3 packages fix denial of service
  • From: Steffen Joeris
• WARNING - CORRECT: BlindBlog 1.3.1 Multiple Vulnerabilities (SQL Inj - Auth Bypass - LFI)
  • From: Salvatore \"drosophila\" Fresta
• [ MDVSA-2009:063 ] eog
  • From: security
• Zabbix 1.6.2 Frontend Multiple Vulnerabilities
  • From: ascii
• Secunia Research: Winamp CAF Processing Integer Overflow Vulnerability
  • From: Secunia Research
• [SECURITY] [DSA 1733-1] New vim packages fix multiple vulnerabilities
  • From: Steffen Joeris
• Secunia Research: libsndfile CAF Processing Integer Overflow Vulnerability
  • From: Secunia Research
• BlindBlog 1.3.1 Multiple Vulnerabilities (SQL Inj - Auth Bypass - LFI)
  • From: Salvatore \"drosophila\" Fresta
• [USN-727-1] network-manager-applet vulnerabilities
  • From: Marc Deslauriers
• [USN-726-1] curl vulnerability
  • From: Marc Deslauriers
• NovaBoard <= 1.0.1 / XSS Vulnerability
  • From: Jose Luis
• [ MDVSA-2009:064 ] imap
  • From: security
• [USN-727-2] NetworkManager vulnerability
  • From: Marc Deslauriers
• [USN-726-2] curl regression
  • From: Marc Deslauriers
• Cisco Security Advisory: Cisco 7600 Series Router Session Border Controller Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• CelerBB 0.0.2 Multiple Vulnerabilities
  • From: Salvatore \"drosophila\" Fresta
• Re: djbdns misformats some long response packets; patch and example attack
  • From: Matthew Dempsky
• Re: iDefense COMRaider 'DeleteFile()' Method Arbitrary File Deletion Vulnerability
  • From: iDefense Labs
• SupportSoft DNA Editor Module (dnaedit.dll v6.9.2205) remote code execution exploit (IE6/7)
  • From: nospam
• libc:fts_*():multiple vendors, Denial-of-service
  • From: cxib
• ZDI-09-013: Mozilla Firefox XUL Linked Clones Double Free Vulnerability
  • From: ZDI Disclosures
• iDefense COMRaider, ActiveX controls, and browser configuration
  • From: Steven M. Christey
• [ MDVSA-2009:065 ] php4
  • From: security
• [ MDVSA-2009:066 ] php
  • From: security
• [USN-729-1] Python Crypto vulnerability
  • From: Kees Cook
• [USN-728-1] Firefox and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• [USN-728-2] Firefox vulnerabilities
  • From: Jamie Strandboge
• Re: [Full-disclosure] Zabbix 1.6.2 Frontend Multiple Vulnerabilities
  • From: Roberto Muñoz Fernandez
• [USN-728-3] Firefox vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2009:067 ] libsndfile
  • From: security
• [USN-730-1] libpng vulnerabilities
  • From: Jamie Strandboge
• [Positive Technologies SA:2009-12] UMI.CMS Cross-Site Scripting vulnerability
  • From: aanisimov
• Wili-CMS 0.4.0 Multiple Vulnerabilities (Remote/Local File Inclusion - Authentication Bypass)
  • From: Salvatore \"drosophila\" Fresta
• Re: iDefense COMRaider, ActiveX controls, and browser configuration
  • From: Vladimir '3APA3A' Dubrovin
• DEFCON CTF Submissions are in, DC-16 video online!
  • From: The Dark Tangent
• [SECURITY] CVE-2009-0781 XSS in Apache Tomcat examples web application
  • From: Mark Thomas
• WarVOX 1.0.0 Released
  • From: H D Moore
• [Positive Technologies SA:2009-13] TinX CMS 3.x SQL Injection Vulnerability
  • From: aanisimov
• [ MDVSA-2009:068 ] poppler
  • From: security
• [ GLSA 200903-01 ] Vinagre: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• nForum 1.5 Multiple SQL Injection
  • From: Salvatore \"drosophila\" Fresta
• [ GLSA 200903-02 ] ZNC: Privilege escalation
  • From: Tobias Heinlein
• [ GLSA 200903-03 ] Audacity: User-assisted execution of arbitrary code
  • From: Tobias Heinlein
• [ GLSA 200903-04 ] DevIL: User-assisted execution of arbitrary code
  • From: Tobias Heinlein
• [ MDVSA-2009:069 ] curl
  • From: security
• [ MDVSA-2009:068-1 ] poppler
  • From: security
• [ GLSA 200903-05 ] PDFjam: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200903-06 ] nfs-utils: Access restriction bypass
  • From: Robert Buchholz
• [ GLSA 200903-07 ] Samba: Data disclosure
  • From: Robert Buchholz
• [ GLSA 200903-08 ] gEDA: Insecure temporary file creation
  • From: Robert Buchholz
• [ GLSA 200903-09 ] OpenTTD: Execution of arbitrary code
  • From: Robert Buchholz
• phpCommunity 2 2.1.8 Multiple Vulnerabilities (SQL Injection / Directory Traversal / XSS)
  • From: Salvatore \"drosophila\" Fresta
• [ GLSA 200903-10 ] Irrlicht: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• Re: Vulnerability CVE-2008-3671 - MyReview's vulnerability in the access control system
  • From: alexchf . fyp
• Re: Zabbix 1.6.2 Frontend Multiple Vulnerabilities
  • From: Eygene Ryabinkin
• Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability
  • From: Secunia Research
• [ GLSA 200903-11 ] PyCrypto: Execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200903-12 ] OptiPNG: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200903-13 ] MPFR: Denial of Service
  • From: Robert Buchholz
• [ GLSA 200903-14 ] BIND: Incorrect signature verification
  • From: Robert Buchholz
• [ GLSA 200903-15 ] git: Multiple vulnerabilties
  • From: Robert Buchholz
• [ GLSA 200903-16 ] Epiphany: Untrusted search path
  • From: Robert Buchholz
• [ GLSA 200903-17 ] Real VNC: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200903-18 ] Openswan: Insecure temporary file creation
  • From: Robert Buchholz
• [ GLSA 200903-19 ] Xerces-C++: Denial of Service
  • From: Robert Buchholz
• [ GLSA 200903-20 ] WebSVN: Multiple vulnerabilities
  • From: Robert Buchholz
• DDIVRT-2009-22 SMART Board Whiteboard Directory Traversal Vulnerability
  • From: ddivulnalert
• DDIVRT-2009-21 vBook Login Application Cross-site Scripting Vulnerability
  • From: ddivulnalert
• Belkin BullDog Plus UPS-Service Buffer Overflow Vulnerability
  • From: Elazar Broad
• Re: Vulnerability CVE-2008-3671 - MyReview's vulnerability in the access control system
  • From: Julien Thomas
• [ GLSA 200903-21 ] cURL: Arbitrary file access
  • From: Tobias Heinlein
• Re: [ GLSA 200903-18 ] Openswan: Insecure temporary file creation
  • From: Paul Wouters
• Foxit Reader Multiple Vulnerabilities (CORE-2009-0218)
  • From: Core Security Technologies Advisories
• SEC Consult SA-20090305-1 :: IBM Director CIM Server Remote Denial of Service Vulnerability
  • From: Bernhard Mueller
• Re: [ GLSA 200903-18 ] Openswan: Insecure temporary file creation
  • From: Robert Buchholz
• FINAL: Call for Papers on Cyber Warfare
  • From: k g
• SEC Consult SA-20090305-2 :: IBM Director CIM Server Local Privilege Escalation Vulnerability
  • From: Bernhard Mueller
• SEC Consult SA-20090305-0 :: NextApp Echo XML Injection Vulnerability
  • From: Bernhard Mueller
• Aryanic HighCMS and HighPortal multiple Vulnerabilities
  • From: mr . faghani
• [ GLSA 200903-22 ] Ganglia: Execution of arbitrary code
  • From: Robert Buchholz
• Multiple Vulnerabilities in iAntiVirus
  • From: Carsten Eilers
• [ MDVSA-2009:070 ] openoffice.org
  • From: security
• Paper: Socket Capable Browser Plugins Result In Transparent Proxy Abuse
  • From: robert
• Addonics NAS Adapter Post-Auth DoS
  • From: mcyr2
• [USN-731-1] Apache vulnerabilities
  • From: Marc Deslauriers
• [USN-732-1] dash vulnerability
  • From: Marc Deslauriers
• AST-2009-002: Remote Crash Vulnerability in SIP channel driver
  • From: Asterisk Security Team
• [ECHO_ADV_104$2009] WeBid <= 0.7.3 RC9 Multiple Remote File Inclution Vulnerabilities
  • From: vuln
• [ MDVSA-2009:071 ] kernel
  • From: security
• [ISecAuditors Security Advisories] WordPress MU HTTP Header XSS Vulnerability
  • From: ISecAuditors Security Advisories
• [SECURITY] [DSA 1735-1] New znc packages fix privilege escalation
  • From: Florian Weimer
• Sun Java System Communications Express [HTML Injection]
  • From: sosoblood
• [ GLSA 200903-24 ] Shadow: Privilege escalation
  • From: Pierre-Yves Rofes
• [ GLSA 200903-23 ] Adobe Flash Player: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1736-1] New mahara packages fix cross-site scripting
  • From: Steffen Joeris
• [security bulletin] HPSBUX02411 SSRT080111 rev.1 - HP-UX Running Java, Remote Execution of Arbitrary Code and Other Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBMA02412 SSRT080040 rev.1 - WMI Mapper for HP Systems Insight Manager Running on Windows, Remote Unauthorized Access to Data, Local Unauthorized Access
  • From: security-alert
• Re: Adobe Flash Player plug-in null pointer dereference and browser crash
  • From: Matthew Dempsky
• [SECURITY] [DSA 1738-1] New curl packages fix arbitrary file access
  • From: Nico Golde
• Cisco Security Advisory: Cisco Unified Communications Manager IP Phone Personal Address Book Synchronizer Privilege Escalation Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• TOORCAMP 2009 CALL FOR PARTICIPATION
  • From: h1kari
• TikiWiki 2.2 XSS Vulnerability in URI
  • From: iliz-z
• [ MDVSA-2009:072 ] perl-MDK-Common
  • From: security
• POP Peeper 3.4.0.0 Date Remote Buffer Overflow Vulnerability
  • From: Krakow Labs
• [ MDVSA-2009:073 ] sarg
  • From: security
• [USN-724-1] Squid vulnerability
  • From: Jamie Strandboge
• [SECURITY] [DSA 1737-1] New wesnoth packages fix several vulnerabilities
  • From: Steffen Joeris
• [ GLSA 200903-25 ] Courier Authentication Library: SQL Injection vulnerability
  • From: Pierre-Yves Rofes
• [ GLSA 200903-26 ] TMSNC: Execution of arbitrary code
  • From: Robert Buchholz
• Trellis Desk v1.0 XSS Vulnerability
  • From: larry
• Re: Adobe Flash Player plug-in null pointer dereference and browser crash
  • From: Alex Legler
• flv2mpeg4: Malformed parameters Denial of Service
  • From: Anon
• [ MDVSA-2009:074 ] libneon0.27
  • From: security
• Re: Sun Java System Communications Express [HTML Injection]
  • From: sosoblood
• [security bulletin] HPSBMA02413 SSRT080040 rev.1 - HP WMI Mapper for Windows Server 2003 and Windows Server 2008 for Itanium-based Servers, Remote Unauthorized Access to Data, Local Unauthorized Access
  • From: security-alert
• [Suspected Spam][PT-2009-11] SlySoft Multiple Products ElbyCDIO.sys Denial of Service
  • From: Valery Marchuk
• [oCERT-2008-015] glib and glib-predecessor heap overflows
  • From: Will Drewry
• rPSA-2009-0042-1 curl
  • From: rPath Update Announcements
• rPSA-2009-0041-1 dhclient dhcp libdhcp4client
  • From: rPath Update Announcements
• [ GLSA 200903-27 ] ProFTPD: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• rPSA-2009-0040-1 tshark wireshark
  • From: rPath Update Announcements
• Apple iTunes DAAP Messages Handling Denial of Service Vulnerability 
  • From: secresearch@xxxxxxxxxxxx
• rPSA-2009-0046-1 libpng
  • From: rPath Update Announcements
• Re: TikiWiki 2.2 XSS Vulnerability in URI
  • From: danny
• rPSA-2009-0045-1 glib
  • From: rPath Update Announcements
• [Positive Technologies SA:2009-15] Living CMS Cross-Site Scripting vulnerability
  • From: aanisimov
• [Positive Technologies SA:2009-14] BLOG CMS Cross-Site Scripting vulnerability
  • From: aanisimov
• [Positive Technologies SA:2009-20] A.CMS Multiple Vulnerabilities
  • From: aanisimov
• [ MDVSA-2009:075 ] firefox
  • From: security
• [SECURITY] [DSA 1739-1] New mldonkey packages fix information disclosure
  • From: Florian Weimer
• Infopop UBB.Threads Admin Credentials via SQL Injection
  • From: swhite
• [SECURITY] [DSA 1740-1] New yaws packages fix denial of service
  • From: Steffen Joeris
• [SECURITY] [DSA 1741-1] New psi packages fix denial of service
  • From: Moritz Muehlenhoff
• [ MDVSA-2009:076 ] avahi
  • From: security
• [ GLSA 200903-28 ] libpng: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1742-1] New libsnd packages fix arbitrary code execution
  • From: Nico Golde
• [Bkis-04-2009] GOM Encoder Heap-based Buffer Overflow
  • From: Bkis
• NGENUITY-2009-005 OpenCart Order By Blind SQL Injection
  • From: Adam Baldwin
• reporting CVE
  • From: rahimeh . khodadadi
• [Bkis-03-2009] Multiple Vulnerabilities found in Rapidleech rev.36
  • From: Bkis
• rosoft media player local BOF exploit multi tagets
  • From: maroc-anti-connexion
• [USN-734-1] FFmpeg vulnerabilities
  • From: Marc Deslauriers
• [USN-738-1] GLib vulnerability
  • From: Jamie Strandboge
• [USN-733-1] evolution-data-server vulnerability
  • From: Marc Deslauriers
• CPANEL File Manager XSS Vulnerability
  • From: rizki . wicaksono
• [USN-736-1] GStreamer Good Plugins vulnerabilities
  • From: Marc Deslauriers
• [ GLSA 200903-29 ] BlueZ: Arbitrary code execution
  • From: Pierre-Yves Rofes
• HP Laserjet multiple models web management CSRF vulnerability & insecure default configuration
  • From: Henri Lindberg
• [SECURITY] [DSA 1743-1] New libtk-img packages fix arbitrary code execution
  • From: Steffen Joeris
• PHPRunner SQL Injection
  • From: admin
• [USN-735-1] GStreamer Base Plugins vulnerability
  • From: Marc Deslauriers
• [ GLSA 200903-30 ] Opera: Multiple vulnerabilities
  • From: Tobias Heinlein
• [USN-737-1] libsoup vulnerability
  • From: Marc Deslauriers
• [ECHO_ADV_107$2009] FubarForum <= 1.6 Critical File Disclosure Vulnerability
  • From: vuln
• [USN-739-1] Amarok vulnerabilities
  • From: Marc Deslauriers
• DEFCON London DC4420 March meeting - Thursday 19th March
  • From: Major Malfunction
• [ECHO_ADV_106$2009] FireAnt <= 1.3 Critical File Disclosure Vulnerability
  • From: vuln
• [ECHO_ADV_105$2009] chaozzDB <= 1.2 Critical File Disclosure Vulnerability
  • From: vuln
• [ GLSA 200903-31 ] libcdaudio: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• iDefense Security Advisory 03.17.09: Autonomy KeyView Word Perfect File Parsing Buffer Overflow Vulnerability
  • From: iDefense Labs
• Sitecore .NET 5.3.x - web service information disclosure
  • From: security . assurance
• Layered Defense Research Advisory: Format String Vulnerablity in Symantec PcAnywhere v10-12.5
  • From: dh
• [USN-740-1] NSS vulnerability
  • From: Jamie Strandboge
• Re: iDefense Security Advisory 03.17.09: Autonomy KeyView Word Perfect File Parsing Buffer Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1744-1] New weechat packages fix denial of service
  • From: Nico Golde
• CDex v1.70b2 (.ogg) local buffer overflow exploit poc
  • From: nospam
• [ISecAuditors Security Advisories] ModSecurity < 2.5.9 remote Denial of Service (DoS)
  • From: ISecAuditors Security Advisories
• [ GLSA 200903-32 ] phpMyAdmin: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [USN-742-1] JasPer vulnerabilities
  • From: Marc Deslauriers
• Command Execution in Hannon Hill Cascade Server
  • From: Elliot Kendall
• rPSA-2009-0050-1 ghostscript
  • From: rPath Update Announcements
• Slides from uCon Security Conference 2009 available online
  • From: uCon Security Conference
• [ MDVSA-2009:060-1 ] nfs-utils
  • From: security
• [USN-741-1] Thunderbird vulnerabilities
  • From: Jamie Strandboge
• [SECURITY] [DSA 1745-1] New lcms packages fix arbitrary code execution
  • From: Steffen Joeris
• LittleCMS vulnerabilities (OpenJDK, Firefox, GIMP, etc. impacted)
  • From: Chris Evans
• [ GLSA 200903-33 ] FFmpeg: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [security bulletin] HPSBMA02338 SSRT080024, SSRT080041 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 1746-1] New ghostscript packages fix arbitrary code execution
  • From: Steffen Joeris
• [SECURITY] [DSA 1748-1] New libsoup packages fix arbitrary code execution
  • From: Steffen Joeris
• [SECURITY] [DSA 1747-1] New glib2.0 packages fix arbitrary code execution
  • From: Steffen Joeris
• Bs.Player <= 2.34 Build 980 (.bsl) local buffer overflow 0day exploit (seh)
  • From: nospam
• [oCERT-2009-003] LittleCMS integer errors
  • From: Andrea Barisani
• [ GLSA 200903-34 ] Amarok: User-assisted execution of arbitrary code
  • From: Tobias Heinlein
• [SECURITY] [DSA 1749-1] New Linux 2.6.26 packages fix several vulnerabilities
  • From: dann frazier
• [SECURITY] [DSA 1751-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• ExpressionEngine Persistent Cross-Site Scripting
  • From: Adam Baldwin
• Rittal CMC-TC Processing Unit II multiple vulnerabilities
  • From: Henri Lindberg - Smilehouse Oy
• [ MDVSA-2009:077 ] pam
  • From: security
• [SECURITY] [DSA 1750-1] New libpng packages fix several vulnerabilities
  • From: Florian Weimer
• FreeBSD Security Advisory FreeBSD-SA-09:06.ktimer
  • From: FreeBSD Security Advisories
• CORE-2009-0122: HP OpenView Buffer Overflows
  • From: CORE Security Technologies Advisories
• [SECURITY] [DSA 1752-1] New webcit packages fix potential remote code execution
  • From: Florian Weimer
• [ MDVSA-2009:078 ] evolution-data-server
  • From: security
• [ MDVSA-2009:079 ] postgresql
  • From: security
• [USN-743-1] Ghostscript vulnerabilities
  • From: Marc Deslauriers
• [USN-744-1] LittleCMS vulnerabilities
  • From: Marc Deslauriers
• [ GLSA 200903-35 ] Muttprint: Insecure temporary file usage
  • From: Pierre-Yves Rofes
• [ GLSA 200903-36 ] MLDonkey: Information disclosure
  • From: Pierre-Yves Rofes
• [ GLSA 200903-37 ] Ghostscript: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• PHPizabi v0.848b C1 HFP1 proc.inc.php remote privilege escalation (php.ini independent)
  • From: nospam
• [security bulletin] HPSBMA02416 SSRT090008 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• ZDI-09-014: Adobe Acrobat getIcon() Stack Overflow Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBUX02409 SSRT080171 rev.1 - HP-UX Running VERITAS File System (VRTSvxfs) or VERITAS Oracle Disk Manager (VRTSodm), Local Escalation of Privilege
  • From: security-alert
• iDefense Security Advisory 03.24.09: Adobe Reader and Acrobat JBIG2 Encoded Stream Heap Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1753-1] End-of-life announcement for Iceweasel in oldstable
  • From: Moritz Muehlenhoff
• [ GLSA 200903-38 ] Squid: Multiple Denial of Service vulnerabilities
  • From: Pierre-Yves Rofes
• Secunia Research: Adobe Reader JBIG2 Symbol Dictionary Buffer Overflow
  • From: Secunia Research
• [SECURITY] [DSA 1745-2] New lcms packages fix regression
  • From: Steffen Joeris
• Cisco Security Advisory: Cisco IOS Software Secure Copy Privilege Escalation Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Multiple Features Crafted TCP Sequence Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software WebVPN and SSLVPN Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Re: Secunia Research: Adobe Reader JBIG2 Symbol Dictionary Buffer Overflow
  • From: Florian Weimer
• Cisco Security Advisory: Cisco IOS cTCP Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Mobile IP and Mobile IPv6 Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Re: Secunia Research: Adobe Reader JBIG2 Symbol Dictionary Buffer Overflow
  • From: Eric C. Lukens
• Re[2]: Secunia Research: Adobe Reader JBIG2 Symbol Dictionary Buffer Overflow
  • From: Vladimir '3APA3A' Dubrovin
• [SECURITY] [DSA 1755-1] New systemtap packages fix local privilege escalation
  • From: Moritz Muehlenhoff
• CFP RAID 2009
  • From: Corrado Leita
• [ GLSA 200903-39 ] pam_krb5: Privilege escalation
  • From: Pierre-Yves Rofes
• [Bkis-05-2009] PowerCHM Stack-based Buffer Overflow
  • From: Bkis
• ICAP adaptation: missing data flow control to client side
  • From: Martin Huter
• iDefense Security Advisory 03.26.09: Sun Java Runtine Environment (JRE) Type1 Font Parsing Integer Signedness Vulnerability
  • From: iDefense Labs
• [USN-746-1] xine-lib vulnerability
  • From: Marc Deslauriers
• [USN-747-1] ICU vulnerability
  • From: Marc Deslauriers
• iDefense Security Advisory 03.26.09: Sun Java Web Start (JWS ) GIF Decoding Heap Corruption Vulnerability
  • From: iDefense Labs
• [ MDVSA-2009:080 ] glib2.0
  • From: security
• [USN-748-1] OpenJDK vulnerabilities
  • From: Kees Cook
• Aurora Nutritive Analysis Module Multiple XSS
  • From: Bugs NotHugs
• Moodle: Sensitive File Disclosure
  • From: Christian Eibl
• iDefense Security Advisory 03.26.09: Sun Java Runtine Environment (JRE) GIF Decoding Heap Corruption Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 03.26.09: Sun Java Web Start (JWS ) PNG Decoding Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 03.26.09: Sun Java Runtime Environment (JRE) Pack200 Decompression Integer Overflow Vulnerability
  • From: iDefense Labs
• Novell Netstorage Multiple Vulnerabilities
  • From: Bugs NotHugs
• [USN-745-1] Firefox and Xulrunner vulnerabilities
  • From: Jamie Strandboge
• [SECURITY] [DSA 1756-1] New xulrunner packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• [tool release] Watcher v1.0.0 - passive Web-app security testing and compliance auditing
  • From: Chris Weber
• [ GLSA 200903-40 ] Analog: Denial of Service
  • From: Pierre-Yves Rofes
• glFusion <= 1.1.2 COM_applyFilter()/order sql injection exploit
  • From: nospam
• [ MDVSA-2009:081 ] libsoup
  • From: security
• Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow
  • From: Bugs NotHugs
• [SECURITY] [DSA 1757-1] New auth2db packages fix SQL injection
  • From: Steffen Joeris
• CVE-2009-0790: ISAKMP DPD Remote Vulnerability with Openswan & Strongswan IPsec
  • From: Paul Wouters
• Positron Security Advisory #2009-000: Multiple Vulnerabilities in MapServer v5.2.1 and v4.10.3
  • From: Positron Security
• [ MDVSA-2009:082 ] krb5
  • From: security
• Family Connections 1.8.1 Multiple Remote Vulnerabilities
  • From: Salvatore \"drosophila\" Fresta
• DeepSec 2009 - Call for Papers is open
  • From: DeepSec Conference
• [USN-749-1] libsndfile vulnerability
  • From: Marc Deslauriers
• Community CMS 0.5 Multiple SQL Injection Vulnerabilities
  • From: Salvatore \"drosophila\" Fresta