Vulnerabilities

Vulnerabilities are originated from system's security Bugs, which may exist in software programs and CMOS chips as well, and often utilized by hackers up to no good as the leaks to disable personal computers and networks.

17 December 2010

• WordPress Comment Rating Plugin Cross Site Request Forgery
• GateSoft Docusafe "ECO.asp" SQL Injection
• Contenido CMS Multiple Cross-Site Scripting Vulnerabilities
• NorduGrid Advanced Resource Connector "LD_LIBRARY_PATH" Local Privilege Escalation
• iFTPStorage FTP Server Directory Traversal
• Cisco IPSec VPN Groupname Enumeration Weakness
• ISC BIND Key Algorithm Rollover Security
• PHP "getSymbol()" Function Denial of Service
• Winamp "in_midi" Plugin Unspecified Vulnerability
• Adobe Device Central DLL Loading Arbitrary Code Execution Vulnerabilities

16 December 2010

• Palm WebOS Contacts Application HTML Injection
• PHP-Nuke Search Module SQL Injection
• Alguest Multiple Cross-Site Scripting Vulnerabilities
• Freefloat FTP Server Directory Traversal
• Google Chrome prior to 8.0.552.215 Multiple Security Vulnerabilities
• ClamAV Prior to 0.96.5 Multiple Vulnerabilities
• Sleipnir Clipboard Access Security Bypass
• ProFTPD Backdoor Unauthorized Access
• HP Data Protector Manager Remote Denial of Service
• OpenJDK "IcedTea" plugin Unspecified Information Disclosure

15 December 2010

• MIT Kerberos Checksum AD-SIGNEDPATH and AD-KDC-ISSUED Security Bypass
• Red Hat SPICE Plugin for Microsoft Internet Explorer Race Condition
• VideoCharge Studio ".vsc" File Remote Buffer Overflow
• Drupal Services Module "node.save" Security Bypass
• DynPG CMS Local File Include and SQL Injection Vulnerabilities
• WordPress WPtouch Plugin "wptouch_settings" Parameter Cross-Site Scripting
• Altova DatabaseSpy 2011 "dwmapi.dll" DLL Loading Arbitrary Code Execution
• Multiple VMware products "vmware-mount" Local Privilege Escalation
• Intel Threading Building Blocks "tbbmalloc.dll" DLL Loading Arbitrary Code Execution
• Kindle for PC Arbitrary Code Execution

14 December 2010

• BugTracker.NET SQL Injection and Cross-Site Scripting Vulnerabilities
• Atlassian JIRA Multiple Cross-Site Scripting Vulnerabilities
• GNU glibc "regcomp()" Stack Exhaustion Denial of Service
• Perl IO::Socket::SSL "verify_mode" Security Bypass
• OpenSSL Ciphersuite Downgrade Security Weakness
• JBoss Enterprise Application Platform Multiple Remote Vulnerabilities
• MIT Kerberos 5 Key Distribution Center "KrbFastReq" Forgery Security Bypass
• HP-UX Threaded Processes Unspecified Remote Denial of Service
• Altova Diffdog 2011 "dwmapi.dll" DLL Loading Arbitrary Code Execution
• Image Viewer CP Pro/Gold ActiveX Control "Image2PDF()" Method Stack Buffer Overflow

13 December 2010

• Techno Dreams FAQ Manager Package
• Register Plus Redux "wp-login.php" Multiple Cross-Site Scripting Vulnerabilities
• Python Libcloud Man In The Middle Issue
• Freefloat FTP Server "USER" Command Remote Buffer Overflow
• FontForge Bitmap Distribution Format (.BDF) Font File Stack-Based Buffer Overflow
• Perl CGI.pm Header Values Newline Handling Unspecified Vulnerability
• Awstats Configuration File Remote Arbitrary Command Execution
• Linux Kernel "pipe_fcntl()" Local Denial of Service
• WebEx Meeting Manager WebexUCFObject ActiveX DLL Loading Arbitrary Code Execution
• J-Integra "SetIdentity()" Method ActiveX Control Buffer Overflow

10 December 2010

• D-Link DIR-300 WiFi Key Security Bypass Issue
• SmartBox "page_id" Parameter SQL Injection
• FreeTicket "contact.php" Multiple SQL Injection Vulnerabilities
• WordPress Register Plus "wp-login.php" Multiple Cross-Site Scripting Issues
• Xen "fixup_page_fault()" Denial of Service
• xine-lib "asfheader.c" Remote Memory Corruption
• Fedora "Dracut" Package Insecure File Permissions Issue
• Linux Kernel Information Disclosure Issue
• Linux Kernel "inotify_init()" Memory Leak Local Denial of Service

09 December 2010

• PHP Web Scripts Easy Banner Free Multiple SQL Injection and HTML Injection Vulnerabilities
• E-lokaler CMS Admin Login Multiple SQL Injection Vulnerabilities
• JE Ajax Event Calendar "event_id" Parameter SQL Injection
• Register Plus "wp-login.php" Multiple Cross-Site Scripting Vulnerabilities
• Apache Archiva Cross-Site Request Forgery Issue
• Xen "blkback/blktap/netback" Leaked Kernel Thread Local Denial of Service
• Winamp Prior to 5.6 Multiple Vulnerabilities

08 December 2010

• DaDaBIK HTML Injection
• Site2Nite Big Truck Broker "news_default.asp" SQL Injection
• phpMyAdmin Database Search Cross-Site Scripting Issue
• MCG GuestBook Multiple Cross-Site Scripting Vulnerabilities
• Lightweight Rich Text Editor Plugin for jQuery
• NetBSD "udp6_output()" Remote Denial of Service Issue
• Linux Kernel Econet Protocol Multiple Local Issues
• Google Desktop "schannel.dll" DLL Loading Arbitrary Code Execution

07 December 2010

• MicroNetSoft RV Dealer Websites Multiple SQL Injection Vulnerabilities
• Wernhart Guestbook Multiple SQL Injection Vulnerabilities
• eSyndiCat Directory Software Multiple Cross-Site Scripting Vulnerabilities
• SimpLISTic SQL "email.cgi" Cross-Site Scripting
• collectd "cu_rrd_create_file()" Remote Denial of Service
• Red Hat Enterprise MRG Messaging and Grid Security Bypass Issue
• Linux Kernel "hmid_ds structure" Local Information Disclosure
• Microsoft Outlook File Attachment Denial of Service

06 December 2010

• SiteEngine "comments.php" SQL Injection Issue
• Diferior "views/post.php" Cross-Site Scripting
• Orbis CMS "fileman_file_upload.php" Arbitrary File Upload Issue
• CA Internet Security Suite 2010 "KmxSbx.sys" Local Privilege Escalation
• Linux Kernel TIOCGICOUNT Information Disclosure Issue
• Linux Kernel Unix Sockets Local Denial of Service
• Microsoft Windows User Access Control (UAC) Bypass Local Privilege Escalation
• MemHT Portal "User-Agent" HTTP Header HTML Injection

03 December 2010

• webApp.secure "Content-Length" Remote Denial of Service
• MuPDF "pdf_shade4.c" Multiple Stack Buffer Overflow Issue
• Wireshark Multiple Security Issues
• Linux Kernel "hci_uart_tty_open()" Local Denial of Service Issue
• Mozilla Firefox "js/src/jsstr.cpp" UTF-8 Input Validation Issue
• Hitachi Multiple Groupmax Products Unspecified Buffer Overflow Issue
• Linux Kernel "posix-cpu-timers.c" Local Race Condition

02 December 2010

• Fujitsu Interstage Multiple Products IP Evasion Security Bypass Issue
• phpBB "includes/message_parser.php" HTML Injection
• Pidgin MSN Use After Free Denial of Service Issue
• PHP "ext/imap/php_imap.c" Use After Free Denial of Service
• Apple iOS Networking Packet Filter Rules Local Privilege Escalation
• SAP NetWeaver XRFC SOAP Request Stack Buffer Overflow Issue
• SAP NetWeaver SQL Monitor Multiple Cross-Site Scripting Issues
• Linux Kernel Reliable Datagram Sockets "rds_cmsg_rdma_args()" Local Integer Overflow

01 December 2010

• Cisco Unified Videoconferencing Hardcoded User Credentials Authentication Bypass Issue
• Free Simple Software "download_id" SQL Injection
• Pidgin Google Relay (V/V) Double Free Memory Corruption Issue
• Novell iPrint Client "ienipp.ocx" ActiveX 'GetDriverSettings()' Buffer Overflow Issue
• Apple Safari Prior Multiple Security Issues
• IBM WebSphere MQ FDC Processing Denial of Service
• SAP NetWeaver Security Bypass Denial of Service
• Linux Kernel "execve()" Memory Expansion "OOM-killer" Local Denial of Service

30 November 2010

• Apache Tomcat "sort" Parameter Cross-Site Scripting
• Pidgin Media Code Use Afer Free Race Condition Denial of Service
• PHP NULL Character Security Bypass Issue
• Symantec PGP Desktop OpenPGP Message Data Insertion Issue
• Apple iPhone/iPod/iPad Configuration Profile Signature Validation Bypass Issue
• Apache "mod_fcgid" Module Unspecified Stack Buffer Overflow Issue
• Apple Mac OS X Apple Type Services "CFF" Font Remote Code Execution

29 November 2010

• HP Multiple LaserJet Printers PJL Directory Traversal Issue
• Juniper NetScreen Remote VPN Client Security Bypass Issue
• DotNetNuke Logging Provider Information Disclosure
• IBM OmniFind "ESSearchApplication" Security Bypass Issue
• ProFTPD "mod_sql" Remote Heap Based Buffer Overflow
• VLC Media Player Calling Convention Remote Buffer Overflow Issue
• Perl MIME Boundary "multipart_init" Unspecified Security Issue
• Serv-U Empty Password Authentication Bypass

26 November 2010

• IBM WebSphere Application Server JAX-WS Denial Of Service Issue
• WeBid Multiple Input Validation Issues
• Free WMA MP3 Converter ".wav" File Buffer Overflow
• FreeBSD Kernel "pseudofs" Local Memory Overwrite Issue

25 November 2010

• IceBB SQL Injection and Information Disclosure Vulnerabilities
• IBM WebSphere Commerce Unspecified SQL Injection
• AT-TFTP Server Directory Traversal
• Linux Kernel "perf_event_mmap()" Local Denial of Service Issue

24 November 2010

• SEO Tools Plugin for WordPress "file" Parameter Directory Traversal
• IBM WebSphere Application Server Unspecified Cross-Site Scripting Issue
• QtWeb Browser Buffer Overflow Issue
• Linux Kernel "net/core/filter.c" Local Information Disclosure Issue

23 November 2010

• vBulletin "Profile Customization" Feature HTML Injection
• IBM WebSphere Portal "SemanticTagService.js" Cross-Site Scripting Issue
• libxml2 "XPATH" Memory Corruption Issue
• Linux Kernel Futex Macros Local Denial of Service Issue