Mail Index

• Thread Index

• [USN-905-1] sudo vulnerabilities
  • From: Jamie Strandboge
• ARISg5 (Version 5.0) Cross Site Scripting Vulnerability
  • From: lament
• Month of PHP Security 2010 - CALL FOR PAPERS
  • From: Stefan Esser
• Re: Information disclosure vulnerability in Drupal's Realname User Reference Widget contributed module (version 6.x-1.0)
  • From: mori
• Re: Re: Circumventing Critical Security in Windows XP
  • From: anonym
• CONFidence 2010 /25-26 May/, CfP
  • From: andrzej . targosz
• Oracle Siebel 7.x CRM Cross Site Scripting Vulnerability
  • From: lament
• [SECURITY] [DSA 2004-1] New samba packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2004-1] New Linux 2.6.24 packages fix several vulnerabilities
  • From: dann frazier
• Re: Easy FTP Server 1.7.0.2 Remote BoF
  • From: Paul Makowski
• [ MDVSA-2010:051 ] mozilla-thunderbird
  • From: security
• 1024CMS Blind SQL Injection Vulnerability
  • From: admin
• Eshbel Priority MarketGate module Cross Site Scripting Vulnerability
  • From: lament
• ZDI-10-023: Multiple Vendor librpc.dll Signedness Error Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-10-022: IBM Informix librpc.dll Multiple Remote Code Execution Vulnerabilities
  • From: ZDI Disclosures
• [ MDVSA-2010:052 ] sudo
  • From: security
• [xss] i found a Cross Site Scripting Vulnerability about Discuz! 'uid' Parameter
  • From: lis cker
• Re: Re: Circumventing Critical Security in Windows XP
  • From: Jann Horn
• Todd Miller Sudo local root exploit discovered by Slouching
  • From: Kingcope
• Re: Circumventing Critical Security in Windows XP
  • From: Ansgar Wiechers
• iDefense Security Advisory 03.02.10: IBM Lotus Domino Web Access ActiveX Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• Sparta Systems TrackWise TeamAccess module Multiple Cross Site Scripting Vulnerabilities
  • From: lament
• Luxology Modo 401 .LXO Integer Overflow
  • From: CORE Security Technologies Advisories
• [ MDVSA-2010:053 ] apache
  • From: security
• [SECURITY] [DSA 2006-1] New sudo packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• ZDI-10-024: Novell eDirectory SOAP Request Parsing Denial of Service Vulnerability
  • From: ZDI Disclosures
• NSOADV-2010-004: McAfee LinuxShield remote/local code execution
  • From: NSO Research
• Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• RE: NSOADV-2010-004: McAfee LinuxShield remote/local code execution
  • From: Veal, Richard
• Re: NSOADV-2010-004: McAfee LinuxShield remote/local code execution
  • From: NSO Research
• Re: Todd Miller Sudo local root exploit discovered by Slouching
  • From: andy
• Re: Todd Miller Sudo local root exploit discovered by Slouching
  • From: Kingcope
• [ GLSA 201003-01 ] sudo: Privilege escalation
  • From: Alex Legler
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Digital Media Player Remote Display Unauthorized Content Injection Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• CORRECTION: CORE-2009-0913 - Luxology Modo 401 .LXO Integer Overflow
  • From: CORE Security Technologies Advisories
• Re: Todd Miller Sudo local root exploit discovered by Slouching
  • From: Jann Horn
• [USN-906-1] CUPS vulnerabilities
  • From: Marc Deslauriers
• [SECURITY] [DSA 2007-1] New cups packages fix arbitrary code execution
  • From: Nico Golde
• IETF effort: Security Assesment of the Internet Protocol
  • From: Fernando Gont
• NSOADV-2010-006: Authentium Command Free Scan ActiveX Control buffer overflow
  • From: NSO Research
• VMSA-2010-0004 ESX Service Console and vMA third party updates
  • From: VMware Security Team
• Re: Re: Todd Miller Sudo local root exploit discovered by Slouching
  • From: noone
• Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass
  • From: Sabahattin Gucukoglu
• Unspecified EMC Documentum Remote Code Execution Vulnerability
  • From: dr_ch1na
• fcrontab Information Disclosure Vulnerability
  • From: Dan Rosenberg
• Open redirection vulnerability in the Drupal API function drupal_goto (Drupal 6.15 and 5.21)
  • From: Martin Barbella
• CA20100304-01: Security Notice for CA SiteMinder
  • From: Williams, James K
• [xss] a xss on "ThreadID" parameter in BBSXP 2008 from china
  • From: lis cker
• [ MDVSA-2010:054 ] pam_krb5
  • From: security
• Juniper SA Series Cross Site Scripting Issue
  • From: Security Lists NL
• Re: Todd Miller Sudo local root exploit discovered by Slouching
  • From: Steve Shockley
• iDefense Security Advisory 03.04.10: Autonomy KeyView OLE Document Integer Overflow Vulnerability
  • From: iDefense Labs
• SQL injection vulnerability in Natychmiast CMS
  • From: Maciej Gojny
• Call for Papers: EC2ND 2010
  • From: Konrad Rieck
• ncpfs, Multiple Vulnerabilities
  • From: Dan Rosenberg
• [ MDVSA-2010:055 ] poppler
  • From: security
• Re: ncpfs, Multiple Vulnerabilities
  • From: dan . j . rosenberg
• [ MDVSA-2010:056 ] openoffice.org
  • From: security
• Apache mod_isapi Dangling Pointer Vulnerability - Security Advisory - SOS-10-002
  • From: Lists
• [xss] a xss on "action" parameter in BBSMAX
  • From: lis cker
• Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass
  • From: drstrangep0rk
• phpinfo() XSS Vulnerability
  • From: info
• [XSS] i found a xss on "page" parameter in "eccredit.php" in Dvbbs < 8.3.0
  • From: lis cker
• "Writing JIT-Spray Shellcode for fun and profit" by DSecRG
  • From: DSecRG
• ZoneAlarm Security Circumvention
  • From: Andrew Barkley
• [ MDVSA-2010:057 ] apache
  • From: security
• rPSA-2010-0011-1 gnome-ssh-askpass openssh openssh-client openssh-server
  • From: rPath Update Announcements
• rPSA-2010-0012-1 postgresql postgresql-contrib postgresql-server
  • From: rPath Update Announcements
• rPSA-2010-0014-1 mysql mysql-bench mysql-server
  • From: rPath Update Announcements
• [USN-907-1] gnome-screensaver vulnerabilities
  • From: Marc Deslauriers
• rPSA-2010-0013-1 gzip
  • From: rPath Update Announcements
• Re: phpinfo() XSS Vulnerability
  • From: Salvatore Fresta aka Drosophila
• Croogo CMS 1.2 Cross Site Scripting Vulnerabilities
  • From: Paulino Calderon
• SQL injection vulnerability in wILD CMS
  • From: Maciej Gojny
• Re: Apple Airport Wireless Products: Promiscuous FTP PORT Allowed in FTP Proxy Provides Security Bypass
  • From: Sabahattin Gucukoglu
• IBM ENOVIA SmarTeam v5 Cross Site Scripting Vulnerability
  • From: lament
• [SECURITY] [DSA 2008-1] New typo3-src packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBMA02489 SSRT090065 rev.1 - HP Performance Insight , Remote Execution of Arbitrary Commands
  • From: security-alert
• ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• CORE-2009-0813: Windows Movie Maker and Microsoft Producer IsValidWMToolsStream() Heap Overflow
  • From: CORE Security Technologies Advisories
• [xss] a xss on "threadid" parameter in BBSMAX
  • From: lis cker
• Secunia Research: Employee Timeclock Software SQL Injection Vulnerabilities
  • From: Secunia Research
• iDefense Security Advisory 03.09.10: Microsoft Excel FNGROUPNAME Record Uninitialized Memory Vulnerability
  • From: iDefense Labs
• ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• CORE-2009-1103: Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability
  • From: CORE Security Technologies Advisories
• VUPEN Security Research - Microsoft Office Excel Record Processing Code Execution Vulnerability
  • From: VUPEN Security Research
• [ MDVSA-2010:058 ] php
  • From: security
• Secunia Research: Employee Timeclock Software "mysqldump" Password Disclosure
  • From: Secunia Research
• Vulnerabilities in Hydra Engine
  • From: MustLive
• iDefense Security Advisory 03.09.10: Microsoft Excel Sheet Object Type Confusion Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 03.09.10: Microsoft Excel MDXTUPLE Record Heap Overflow Vulnerability
  • From: iDefense Labs
• Secunia Research: Employee Timeclock Software Backup Information Disclosure
  • From: Secunia Research
• iDefense Security Advisory 03.09.10: Microsoft Excel MDXSET Record Heap Overflow Vulnerability
  • From: iDefense Labs
• [ MDVSA-2010:059 ] virtualbox
  • From: security
• Secunia Research: XnView DICOM Parsing Integer Overflow Vulnerability
  • From: Secunia Research
• [USN-908-1] Apache vulnerabilities
  • From: Marc Deslauriers
• [SECURITY] [DSA 2009-1] New tdiary packages fix cross-site scripting
  • From: Steffen Joeris
• [SECURITY] [DSA-2010-1] New kvm packages fix several vulnerabilities
  • From: dann frazier
• CVE-2010-0624: Heap-based buffer overflow in GNU Tar and GNU Cpio
  • From: Jakob Lell
• Friendly-Tech FriendlyTR69 CPE Remote Management V2.8.9 SQL Injection Vulnerability
  • From: lament
• [USN-909-1] dpkg vulnerability
  • From: Kees Cook
• Multiple vulnerabilities in SUPERAntiSpyware and Super Ad Blocker
  • From: Luka Milkovic
• Vulnerabilities in Abton
  • From: MustLive
• Skype URI Handler Input Validation
  • From: Paul Craig
• [ MDVSA-2010:060 ] squid
  • From: security
• [SECURITY] [DSA 2011-1] New dpkg packages fix path traversal
  • From: Nico Golde
• [ MDVSA-2010:061 ] ncpfs
  • From: security
• [USN-911-1] MoinMoin vulnerabilities
  • From: Jamie Strandboge
• iDefense Security Advisory 03.11.10: Multiple Vendor WebKit HTML Element Use After Free Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 2014-1] New moin packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• [SECURITY] [DSA 2013-1] New egroupware packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [XSS] I found a xss in phpmyadmin 3.3.0 when we create new database in interface!
  • From: lis cker
• VUPEN Security Research - Apple Safari ColorSync Profile Integer Overflow Vulnerability
  • From: VUPEN Security Research
• [SECURITY] [DSA 2012-1] New Linux 2.6.26 packages fix several issues
  • From: dann frazier
• ZDI-10-028: Skype URI Processing Arbitrary XML File Deletion Vulnerability
  • From: ZDI Disclosures
• ZDI-10-027: Skype Protocol Handler datapath Argument Injection Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Sun Java System Communication Express CSRF via HPP
  • From: edgard . chammas
• Vulnerability in phpAdsNew, OpenAds and OpenX
  • From: MustLive
• SyScan'10 CFP
  • From: thomas@xxxxxxxxxx
• [HITB-Announce] HITBSecConf2010 - Dubai Agenda Released
  • From: Hafez Kamal
• [Tool] sqlmap 0.8 released
  • From: Bernardo Damele A. G.
• Ananta Gazelle SQL Injection Vulnerability
  • From: admin
• [SECURITY] [DSA 2016-1] New drupal6 packages fix several vulnerabilities
  • From: Giuseppe Iuculano
• ...because you can't get enough of clickjacking
  • From: Michal Zalewski
• Pars CMS SQL Injection Vulnerability
  • From: faghani
• Zigurrat CMS SQL Injection Vulnerability
  • From: faghani
• CVE-2010-0188 Exploit Code
  • From: villys777
• PlumberCon 10 - Call for Papers
  • From: astera
• Re: ZoneAlarm Security Circumvention
  • From: Ansgar Wiechers
• Vulnerability httpdx v1.5.3
  • From: Mehdi Mahdjoub - Sysdream IT Security Services
• ZoneAlarm 9 (ForceField) Security Disclosure
  • From: Andrew Barkley
• New vulnerabilities in Abton
  • From: MustLive
• Multiple DOM-Based XSS in Dojo Toolkit SDK
  • From: labs
• ZDI-10-029: Apple WebKit innerHTML element Substitution Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• QuickZip 0day detailed write-up
  • From: Security
• rPSA-2010-0022-1 sendmail sendmail-cf
  • From: rPath Update Announcements
• ZDI-10-031: Apple Webkit Blink Event Dangling Pointer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [USN-912-1] Audio File Library vulnerability
  • From: Marc Deslauriers
• ZDI-10-032: SAP MaxDB Malformed Handshake Request Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2017-1] New pulseaudio packages fix insecure temporary directory
  • From: Giuseppe Iuculano
• rPSA-2010-0018-1 bind bind-utils caching-nameserver
  • From: rPath Update Announcements
• Last Call for Papers, CONFidence 2010, 25-26May, Last Call for Papers
  • From: Andrzej Targosz
• SugarCRM Stored XSS vulnerability
  • From: Jeromie Jackson
• ZDI-10-030: Apple WebKit CSS run-in Attribute Rendering Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [USN-913-1] libpng vulnerabilities
  • From: Marc Deslauriers
• CORE-2009-0803: Virtual PC Hypervisor Memory Protection Vulnerability
  • From: CORE Security Technologies Advisories
• CORE-2010-0311 - eFront-learning PHP file inclusion vulnerability
  • From: CORE Security Technologies Advisories
• [security bulletin] HPSBGN02511 SSRT100022 rev.2 - HP Small Form Factor or Microtower PC with Broadcom Integrated NIC Firmware, Remote Execution of Arbitrary Code
  • From: security-alert
• [CORELAN-10-13] - Windisc Local Stack BOF
  • From: Security
• Vulnerabilities in VXDate for Joomla
  • From: MustLive
• Miranda IM silent TLS failure
  • From: Jan Schejbal
• Secunia Research: Quicksilver Forums Backup Information Disclosure
  • From: Secunia Research
• Secunia Research: Quicksilver Forums Cross-Site Request Forgery Vulnerability
  • From: Secunia Research
• Secunia Research: Quicksilver Forums "mysqldump" Password Disclosure
  • From: Secunia Research
• Sahana 0.6.2.2 Authentication Bypass
  • From: Christopher
• CA20100318-01: Security Notice for CA ARCserve Backup
  • From: Kotas, Kevin J
• There are lost of xss vul in PHPWind v6.0 !
  • From: lis cker
• IBM Lotus 6.x HTTP Response Splitting Vulnerability
  • From: lament
• [SECURITY] [DSA-2018-1] New php5 packages fix null pointer dereference
  • From: Raphael Geissert
• [USN-915-1] Thunderbird vulnerabilities
  • From: Marc Deslauriers
• Vulnerability Httpdx v1.5.3b
  • From: Mehdi Mahdjoub - Sysdream IT Security Services
• announcing skipfish, an automated web app security scanner
  • From: Michal Zalewski
• Aris AGX agXchange ESM Open Redirection Vulnerability
  • From: lament
• Firefox 3.6 for Windows includes a forged CA cert
  • From: Francis Litterio
• IBM Lotus 6.x names.nsf Cross Site Scripting Vulnerability
  • From: lament
• [SECURITY] [DSA-2019-1] New pango1.0 packages fix denial of service
  • From: Giuseppe Iuculano
• [ MDVSA-2010:062 ] curl
  • From: security
• [SECURITY] [DSA 2020-1] New ikiwiki packages fix cross-site scripting
  • From: Nico Golde
• MX Simulator Server 2010-02-06 Remote Buffer Overflow PoC
  • From: Salvatore Fresta aka Drosophila
• CFP - GameSec 2010 - Conference on Decision and Game Theory for Security
  • From: Albert Levi
• Re: Firefox 3.6 for Windows includes a forged CA cert
  • From: dveditz
• [ MDVSA-2010:063 ] libpng
  • From: security
• {PRL} Lexmark Multiple Laser Printer Remote Stack Overflow
  • From: Francis Provencher
• REMINDER: Month of PHP Security 2010 - CALL FOR PAPERS - Only 3 weeks left
  • From: Stefan Esser
• Re: Firefox 3.6 for Windows includes a forged CA cert
  • From: adam
• [ MDVSA-2010:064 ] libpng
  • From: security
• Re: Firefox 3.6 for Windows includes a forged CA cert
  • From: Mike Duncan
• [SECURITY] [DSA 2021-1] New spamass-milter packages fix remote command execution
  • From: Giuseppe Iuculano
• IE 6.0 - Local Crash Exploit
  • From: info
• Vulnerability Astaro Security Linux v5
  • From: Mehdi Mahdjoub - Sysdream IT Security Services
• [DSECRG-09-064] SAP GUI - Insecure method, code execution
  • From: Alexandr Polyakov
• Re: IE 6.0 - Local Crash Exploit
  • From: Veg
• Re: Vulnerability Astaro Security Linux v5
  • From: jdaniel
• Vulnerabilities in CaptchaSecurityImages
  • From: MustLive
• [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released!
  • From: Hafez Kamal
• Re: Vulnerability Astaro Security Linux v5
  • From: Akos Szalkai
• Safari browser port blocking bypassed by integer overflow
  • From: Gary Niger
• [ MDVSA-2010:065 ] cpio
  • From: security
• MITKRB5-SA-2010-002 denial of service in SPNEGO [CVE-2010-0628 VU#839413]
  • From: Tom Yu
• Aris AGX agXchange ESM Cross Site Scripting Vulnerability
  • From: lament
• [CORELAN-10-015] - Remote Help 0.0.7 Httpd DoS (Format String)
  • From: Security
• Re: Firefox 3.6 for Windows includes a forged CA cert
  • From: Marcus Meissner
• {PRL} Lexmark Multiple Laser printer FTP Remote Denial of Services
  • From: Francis Provencher
• Insecure SMS authorization scheme at LiqPAY micro-payments of PrivatBank (Ukraine)
  • From: Andriy Tereshchenko
• Vulnerabilities in WordPress
  • From: MustLive
• CVE-2009-4505 OpenCMS OAMP Comments Module XSS
  • From: Cyrill Brunschwiler
• [USN-916-1] Kerberos vulnerabilities
  • From: Kees Cook
• [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! *Correction*
  • From: Hafez Kamal
• CVE-2009-2907: SpringSource Hyperic HQ multiple XSS vulnerabilities
  • From: s2-security
• [SECURITY] [DSA 2022-1] New mediawiki packages fix several vulnerabilities
  • From: Nico Golde
• "$referer" export lead to the cross-site flaws in all versions of Discuz!
  • From: lis cker
• [USN-918-1] Samba vulnerability
  • From: Marc Deslauriers
• Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerability
  • From: Secunia Research
• Secunia Research: Pulse CMS Arbitrary File Writing Vulnerability
  • From: Secunia Research
• Symlink attack with Solaris Update manager
  • From: bugs
• Cisco Security Advisory: Cisco IOS Software NAT Skinny Call Control Protocol Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Secunia Research: Pulse CMS Arbitrary File Deletion Vulnerability
  • From: Secunia Research
• Cisco Security Advisory: Cisco IOS Software IPsec Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [USN-917-1] Puppet vulnerabilities
  • From: Marc Deslauriers
• Multiple vulnerabilities in Deliver
  • From: Dan Rosenberg
• Symlink attack with Solaris Update manager and Sun Patch Cluster
  • From: bugs
• Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Vulnerabilities in WeBAM
  • From: MustLive
• [ MDVSA-2010:066 ] kernel
  • From: security
• [security bulletin] HPSBMA02436 SSRT080064 rev.1 - HP Project and Portfolio Management Center (PPMC), Remote Cross Site Scripting (XSS)
  • From: security-alert
• [security bulletin] HPSBUX02508 SSRT100007 rev.1 - HP-UX Running sendmail with STARTTLS Enabled, Remote Unauthorized Access
  • From: security-alert
• Ruxcon 2010 Call For Papers
  • From: cfp
• There is a Permanent-type Cross-Site Vulnerability in “Personal Signature” in all version of Discuz!. It can be written by the worm!
  • From: lis cker
• Multiple Vulnerabilities in EASY Enterprise DMS
  • From: michael . mueller
• Re: Vulnerabilities in WeBAM
  • From: Salvatore Fresta aka Drosophila
• Hackito Ergo Sum Conference (Paris 8-10 April 2010) : Schedule
  • From: Jonathan Brossard
• [security bulletin] HPSBUX02509 SSRT100032 rev.1 - HP-UX Running NFS/ONCplus, NFS Inadvertently Enabled
  • From: security-alert
• [ MDVSA-2010:067 ] kernel
  • From: security
• Vulnerabilities in TooFAST
  • From: MustLive
• Vulnerabilities in ArcManager
  • From: MustLive
• [security bulletin] HPSBOV02497 SSRT090245 rev.2 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 2023-1] New curl packages fix arbitrary code execution
  • From: Steffen Joeris
• [ MDVSA-2010:068 ] php
  • From: security
• {PRL} Novell Netware FTP Remote Stack Overflow
  • From: Francis Provencher
• London DEFCON March meet - DC4420 - Wednesday March 31st 2010
  • From: Major Malfunction
• [ MDVSA-2010:068 ] php
  • From: security
• Medium security hole in Varnish reverse proxy
  • From: Tim Brown
• Exploiting nano
  • From: Dan Rosenberg
• [ MDVSA-2010:068 ] php
  • From: security
• SQL Injection Vulnerabilitie in PhotoPost vBGallery 2.5
  • From: Andreas Kirbach
• Remote buffer overflow in aircrack-ng causes DOS and possible code execution
  • From: Lukas Lueg
• Joomla Component com_weblinks Sql Injection Vulnerability
  • From: info
• Vulnerabilities in MiniManager for Project MANGOS
  • From: MustLive
• Re: [Full-disclosure] Medium security hole in Varnish reverse proxy
  • From: John Adams
• XSS vulnerability in easy page cms
  • From: info
• Joomla Component com_xmap Sql Injection Vulnerability
  • From: info
• Re: [Full-disclosure] Medium security hole in Varnish reverse proxy
  • From: Tim Brown
• [security bulletin] HPSBUX02514 SSRT100010 rev.1 - HP-UX running AudFilter rules enabled, Local Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMA02513 SSRT090110 rev.1 - Insight Control for Linux (IC-Linux) Remote Execution of Arbitrary Code, Local Unauthorized Elevation of Privilege
  • From: security-alert
• [USN-919-1] Emacs vulnerability
  • From: Kees Cook
• [security bulletin] HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation
  • From: security-alert
• Secunia Research: ViewVC Regular Expression Search Cross-Site Scripting
  • From: Secunia Research
• OXID eShop Enterprise: Session Fixation and XSS Vulnerabilities
  • From: michael . mueller
• VMSA-2010-0005 VMware products address vulnerabilities in WebAccess
  • From: VMware Security Team
• [security bulletin] HPSBOV02506 SSRT090244 rev.1 - HP Secure Web Server for OpenVMS (based on Apache) CSWS, Remote Denial of Service (DoS), Unauthorized Disclosure of Information, Unauthorized Modification of Information
  • From: security-alert
• CVE-2010-0684: Apache ActiveMQ Persistent Cross-Site Scripting (XSS) Vulnerability
  • From: rajat swarup
• iDefense Security Advisory 03.30.10: Microsoft Internet Explorer 'onreadystatechange' Use After Free Vulnerability
  • From: iDefense Labs
• [SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability
  • From: Jan Lehnardt
• OpenDcHub 0.8.1 Remote Code Execution Exploit
  • From: Pierre Noguès
• Secunia Research: Sun Java JDK/JRE Soundbank Resource Parsing Buffer Overflow
  • From: Secunia Research