Bugtraq: by date

272 messages starting Feb 01 11 and ending Feb 28 11
Date index | Thread index | Author index


Tuesday, 01 February

ZDI-11-034: HP OpenView Performance Insight Server Backdoor Account Code Execution Vulnerability ZDI Disclosures
ZDI-11-035: IBM DB2 db2dasrrm validateUser Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-036: IBM DB2 db2dasrrm receiveDASMessage Remote Code Execution Vulnerability ZDI Disclosures
[security bulletin] HPSBMA02627 SSRT090246 rev.1 - HP OpenView Performance Insight Server, Remote Execution of Arbitrary Code security-alert
ZDI-11-037: Symantec IM Manager Administrative Interface IMAdminSchedTask.asp Eval Code Injection Remote Code Execution Vulnerability ZDI Disclosures
[USN-1053-1] Subversion vulnerabilities Marc Deslauriers
HTB22798: Path disclosure in Pluck CMS advisory
HTB22799: Path disclosure in Pluck CMS advisory
HTB22803: Path disclosure in Razor CMS advisory
HTB22805: Path disclosure in Redaxscript advisory
HTB22804: SQL Injection in Redaxscript advisory
Aruba Mobility Controller - multiple advisories: DoS and authentication bypass Robbie Gill
TinyWebGallery: XSS + Directory Traversal Yam Mesicka
[CORE-2010-1001] Cisco WebEx .atp and .wrf Overflow Vulnerabilities CORE Security Technologies Advisories
Zikula CMS 1.2.4 <= Cross Site Request Forgery (CSRF) Vulnerability YGN Ethical Hacker Group
Cisco Security Advisory: Multiple Cisco WebEx Player Vulnerabilities Cisco Systems Product Security Incident Response Team

Wednesday, 02 February

fix for Nvidia CUDA drivers security breach Massimo Bernaschi
[USN-1054-1] Linux kernel vulnerabilities Kees Cook
[USN-1055-1] OpenJDK vulnerabilities Steve Beattie
Cisco Security Advisory: Default Credentials for Root Account on Tandberg E, EX and C Series Endpoints Cisco Systems Product Security Incident Response Team

Thursday, 03 February

HTB22809: SQL Injection in ReOS advisory
HTB22801: Local File Inclusion in Podcast Generator advisory
HTB22808: Local File Inclusion in ReOS advisory
HTB22807: SQL Injection in ReOS advisory
HTB22800: Path disclosure in Podcast Generator advisory
HTB22810: SQL Injection in ReOS advisory
HTB22806: SQL Injection in ReOS advisory
HTB22802: XSS in Podcast Generator advisory
Majordomo2 - Directory Traversal (SMTP/HTTP) mike
WOOT '11 Call for Papers Michal Zalewski

Friday, 04 February

[ MDVSA-2011:020 ] pango security
(TAD-2011-001) Vulnerability in HTC Peep: Twitter Credentials Disclosure Raul Siles
ZDI-11-039: BMC PATROL Agent Service Daemon BGS_MULTIPLE_READS Remote Code Execution Vulnerability ZDI Disclosures
[USN-1058-1] PostgreSQL vulnerability Steve Beattie
[SECURITY] [DSA-2157-1] PostgreSQL security update Florian Weimer
[USN-1057-1] Linux kernel vulnerabilities Kees Cook

Monday, 07 February

TWSL2011-002:Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways (SMCD3G-CCR) Trustwave Advisories
[SECURITY] CVE-2010-3718 Apache Tomcat Local bypass of security manger file permissions Mark Thomas
Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure beford
[SECURITY] CVE-2010-3718 Apache Tomcat Local bypass of security manger file permissions Mark Thomas
Re: [DSECRG-09-038] Sun Glassfish Woodstock Project - Linked XSS Vulnerability simpsoed
Re: TinyWebGallery: XSS + Directory Traversal tinywebgallery
[SECURITY] Oracle JVM bug causes denial of service in Apache Tomcat Mark Thomas
Troopers11 - Security Conference in Germany mozilla
[SECURITY] CVE-2011-0534 Apache Tomcat DoS vulnerability Mark Thomas
[SECURITY] CVE-2011-0013 Apache Tomcat Manager XSS vulnerability Mark Thomas
[ MDVSA-2011:021 ] postgresql security

Tuesday, 08 February

ZDI-11-043: Microsoft Excel 2007 Office Drawing Layer Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-044: Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-045: IBM Lotus Domino IMAP/POP3 Non-Printable Character Expansion Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-041: Microsoft Office Excel Office Art Object Parsing Remote Code Execution Vulnerability ZDI Disclosures
HTB22811: XSS vulnerability in UMI.CMS advisory
ZDI-11-046: IBM Lotus Domino Calendar Request Attachment Name Parsing Remote Code Execution Vulnerability ZDI Disclosures
Re: Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure info
ZDI-11-047: IBM Lotus Domino LDAP Bind Request Remote Code Execution Vulnerability ZDI Disclosures
HTB22815: XSS vulnerability in ViArt Shop advisory
ZDI-11-048: IBM Lotus Domino iCalendar Meeting Request Parsing Remote Code Execution Vulnerability ZDI Disclosures
HTB22816: XSS vulnerability in ViArt Shop advisory
ZDI-11-049: IBM Lotus Domino SMTP Multiple Filename Arguments Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-050: IBM Informix Dynamic Server SET ENVIRONMENT Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-040: Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability ZDI Disclosures
HTB22814: XSS vulnerability in ViArt Shop advisory
ZDI-11-051: IBM Lotus Notes cai URI Handler Remote Code Execution Vulnerability ZDI Disclosures
R7-0039: Accellion File Transfer Appliance Multiple Vulnerabilities HD Moore
ZDI-11-052: Lotus Domino Server diiop Client Request Operation Remote Code Execution Vulnerability ZDI Disclosures
R7-0038: Check Point Endpoint Security Server Information Disclosure HD Moore
ZDI-11-053: Lotus Domino Server diiop getEnvironmentString Remote Code Execution Vulnerability ZDI Disclosures
HTB22819: XSS vulnerability in WebAsyst Shop-Script advisory
HTB22817: XSS vulnerability in WebAsyst Shop-Script advisory
Re: Microsoft Terminal Services vulnerable to MITM-attacks. sam . vaughey
[ MDVSA-2011:023 ] proftpd security
HTB22813: XSS vulnerability in UMI.CMS advisory
ZDI-11-054: Hewlett-Packard Data Protector Client EXEC_CMD omni_chk_ds.sh Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-055: Hewlett-Packard Data Protector Client EXEC_CMD Perl Remote Code Execution Vulnerability ZDI Disclosures
[USN-1059-1] Dovecot vulnerabilities Marc Deslauriers
Data Encryption Systems - DESLock+ - Local Kernel Code Execution/Denial of Service Digit Security Research
ZDI-11-056: Hewlett-Packard Data Protector Client EXEC_SETUP Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-057: Hewlett-Packard Data Protector Cell Manager Service Authentication Bypass Vulnerability ZDI Disclosures
ZDI-11-063: Microsoft Visio 2007 LZW Stream Decompression Exception Vulnerability ZDI Disclosures
ZDI-11-058: SCO Openserver IMAP Daemon Long Verb Parsing Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-064: Microsoft Windows WmiTraceMessageVa Local Kernel Vulnerability ZDI Disclosures
ZDI-11-059: CA ETrust Secure Content Manager Common Services Transport Remote Code Execution Vulnerability ZDI Disclosures
HTB22812: XSRF (CSRF) in UMI.CMS advisory
ZDI-11-060: Novell eDirectory Malformed NCP Request Denial of Service Vulnerability ZDI Disclosures
ZDI-11-061: EMC Replication Manager Client irccd.exe Remote Code Execution Vulnerability ZDI Disclosures
rPSA-2011-0010-1 kernel rPath Update Announcements
ZDI-11-042: Microsoft Office Excel Axis Properties Record Parsing Remote Code Execution Vulnerability ZDI Disclosures
VMSA-2011-0002 Cisco Nexus 1000V VEM updates address denial of service in VMware ESX/ESXi VMware Security Team
[security bulletin] HPSBST02630 SSRT1000385 rev.1 - HP StorageWorks X9000 Network Storage Systems, Remote Unauthenticated Access security-alert
ZDI-11-062: Multiple Vendor Calendar Manager RPC Service Remote Code Execution Vulnerability ZDI Disclosures
HTB22818: Stored XSS vulnerability in WebAsyst Shop-Script advisory
[security bulletin] HPSBMA02629 SSRT100381 rev.1 - HP Power Manager (HPPM) Running on Linux and Windows, Cross Site Request Forgery (CSRF) security-alert
ESA-2011-004: EMC Replication Manager remote code execution vulnerability Security_Alert
DC4420 - London DEFCON - February meet - Tuesday 22nd February 2011 Major Malfunction
iDefense Security Advisory 02.08.11: Microsoft Windows Picture and Fax Viewer Library labs-no-reply
MITKRB5-SA-2011-001 kpropd denial of service [CVE-2010-4022] Tom Yu
MITKRB5-SA-2011-002 KDC denial of service attacks [CVE-2011-0281 CVE-2011-0282 CVE-2011-0283] Tom Yu

Wednesday, 09 February

ZDI-11-066: Adobe Acrobat Reader U3D Texture .iff RLE Decompression Remote Code Execution Vulnerability ZDI Disclosures
[ MDVSA-2011:024 ] krb5 security
ZDI-11-067: Adobe Acrobat Reader U3D Texture rgba RLE Decompression Remote Code Execution Vulnerability ZDI Disclosures
CVE-2010-4435 - Multiple Vendor Calendar Manager Remote Code Execution Rodrigo Rubira Branco (BSDaemon)
ZDI-11-068: Adobe Acrobat Reader U3D Texture bmp RLE Decompression Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-069: Adobe Acrobat Reader U3D Texture psd RLE Decompression Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-065: Adobe Reader Controlled memset Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-070: Adobe Acrobat Reader U3D Texture .fli RLE Decompression Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-071: Adobe Reader BMP RLE_8 Decompression Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-072: Adobe Reader BMP ColorData Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-073: Adobe Reader ICC Parsing Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-074: Adobe Reader u3d Parent Node Count Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-075: Adobe Acrobat Reader rt3d.dll Multimedia Playing Arbitrary Memory Overwite Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-076: RealNetworks Real Player Predictable Temporary File Remote Code Execution Vulnerability ZDI Disclosures
iDefense Security Advisory 02.08.11: Adobe Reader and Acrobat JP2K Invalid Indexing Vulnerability labs-no-reply
ZDI-11-077: Adobe Acrobat Reader U3D Texture Parser ILBM Remote Code Execution Vulnerability ZDI Disclosures
iDefense Security Advisory 02.08.11: Adobe Shockwave Player Memory Corruption Vulnerability labs-no-reply
ZDI-11-078: Adobe Shockwave Player FFFFFF88 Record Count Element Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-079: Adobe Shockwave Player 0xFFFFFF45 Record Count Element Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-080: Adobe Shockwave CSWV Chunk Substructure Offset Value Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-081: Adobe Flash Player Point Object Remote Code Execution Vulnerability ZDI Disclosures
iDefense Security Advisory 02.08.11: Adobe Flash Player ActionScript Integer Overflow Vulnerability labs-no-reply
iDefense Security Advisory 02.08.11: Adobe Flash Player ActionScript Memory Corruption Vulnerability labs-no-reply
CGI:IRC XSS issue (CVE-2011-0050) David Leadbeater
Re: Microsoft Terminal Services vulnerable to MITM-attacks. Ansgar Wiechers
RE: Microsoft Terminal Services vulnerable to MITM-attacks. Jim Harrison
[HITB-Announce] HITB Magazine Issue 005 Released Hafez Kamal
TPTI-11-04: Adobe Shockwave GIF Logical Screen Descriptor Parsing Remote Code Execution Vulnerability ZDI Disclosures
TPTI-11-03: Adobe Shockwave Font Xtra String Decoding Remote Code Execution Vulnerability ZDI Disclosures
TPTI-11-02: Adobe Shockwave TextXtra Invalid Seek Remote Code Execution Vulnerability ZDI Disclosures
TPTI-11-05: Adobe Shockwave PFR1 Font Chunk Parsing Remote Code Execution Vulnerability ZDI Disclosures
SourceBans Version 1.4.7 XSS null
TPTI-11-01: Adobe Shockwave dirapi.dll IFWV Trusted Offset Remote Code Execution Vulnerability ZDI Disclosures

Thursday, 10 February

[SECURITY] CVE-2010-3449: Apache Continuum CSRF vulnerability Brett Porter
Linksys WAP610N Unauthenticated Root Consle Matteo Ignaccolo
[SECURITY] CVE-2011-0533: Apache Continuum cross-site scripting vulnerability Brett Porter
[SECURITY] [DSA-2158-1] cgiirc security update Steve Kemp
RE: Microsoft Terminal Services vulnerable to MITM-attacks. Ziots, Edward

Monday, 14 February

[USN-1060-1] Exim vulnerabilities Marc Deslauriers
VUPEN Security Research - Adobe Shockwave DIRAPI LCTX Chunck Memory Corruption Vulnerability (APSB11-01) VUPEN Security Research
[SECURITY] [DSA 2159-1] vlc security update Moritz Muehlenhoff
HTB22852: SQL Injection in WP Forum Server wordpress plugin advisory
HTB22851: SQL Injection in WP Forum Server wordpress plugin advisory
CORE-2011-0103 - ZOHO ManageEngine ADSelfService multiple vulnerabilities CORE Security Technologies Advisories
VUPEN Security Research - Microsoft Internet Explorer "mshtml.dll" Dangling Pointer Vulnerability (CVE-2011-0036) VUPEN Security Research
ASPR #2011-02-11-1: Remote Binary Planting in Adobe Reader ACROS Security Lists
HTB22820: SQL Injection in RunCMS advisory
HTB22821: Path disclosure in RunCMS advisory
[SECURITY] [DSA 2160-1] tomcat6 security update Moritz Muehlenhoff
HTB22822: XSS vulnerability in RunCMS advisory
Kunena SQL Injection Vulnerability & Information Leakage Red Matter
VUPEN Security Research - Microsoft Windows Shell Graphics BMP "width" Integer Overflow Vulnerability VUPEN Security Research
VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX VMware Security team
VUPEN Security Research - Microsoft Windows Shell Graphics BMP "height" Integer Overflow Vulnerability VUPEN Security Research
ASPR #2011-02-11-2: Remote Binary Planting in Adobe Flash Player ACROS Security Lists
VUPEN Security Research - Microsoft Windows Shell Graphics biCompression Buffer Overflow Vulnerability VUPEN Security Research
[ MDVSA-2011:026 ] phpmyadmin security
[USN-1061-1] iTALC vulnerability Kees Cook
[SECURITY] [DSA 2161-1] OpenJDK security update Florian Weimer
[SECURITY] [DSA 2163-1] python-django security update Nico Golde
[SECURITY] [DSA 2162-1] openssl security update Nico Golde
[SECURITY] [DSA 2161-2] OpenJDK security update Florian Weimer
[ MDVSA-2011:027 ] openoffice.org security

Tuesday, 15 February

Re: Linksys WAP610N Unauthenticated Root Console Matteo Ignaccolo
[USN-1063-1] QEMU vulnerability Kees Cook
[USN-1062-1] Kerberos vulnerabilities Steve Beattie
HTB22831: XSS vulnerability in Gollos advisory
HTB22830: Multiple XSS vulnerabilities in Gollos advisory
HTB22832: Path disclosure in ArtGK CMS advisory
HTB22826: Multiple XSS vulnerabilities in Wikipad advisory
HTB22828: Multiple XSS vulnerabilities in Photopad advisory
HTB22824: SQL Injection in Seo Panel advisory
HTB22823: SQL Injection in Seo Panel advisory
[ MDVSA-2011:028 ] openssl security
HTB22833: Information Disclosure in Arctic Fox CMS advisory
HTB22829: Path disclosure in Xaraya advisory
HTB22827: File Content Disclosure in Wikipad advisory
HTB22825: SQL Injection in Seo Panel advisory
Tembria Server Monitor Weak Cryptographic Password Storage Vulnerability robkraus
Tembria Server Monitor Multiple Cross-site Scripting (XSS) Vulnerabilities robkraus

Wednesday, 16 February

[SECURITY] CVE-2011-0533: Apache Archiva cross-site scripting vulnerability Brett Porter
Gain Windows Domain Admin Privileges - Online Challenge Ivan Buetler
ZDI-11-082: Oracle Java Runtime NTLM Authentication Information Leakage Vulnerability ZDI Disclosures
ZDI-11-084: Oracle Java Unsigned Applet Applet2ClassLoader Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-085: Oracle Java XGetSamplePtrFromSnd Remote Code Execution Vulnerability ZDI Disclosures
[SECURITY] [DSA 2165-1] ffmpeg-debian security update Luciano Bello
[USN-1064-1] OpenSSL vulnerability Steve Beattie
ZDI-11-083: Oracle Java Applet Clipboard Injection Remote Code Execution Vulnerability ZDI Disclosures
[USN-1065-1] shadow vulnerability Kees Cook
[SECURITY] [DSA 2164-1] shadow security update Nico Golde
[SECURITY] [DSA 2166-1] chromium-browser security update Giuseppe Iuculano
ZDI-11-086: Oracle Java Webstart Trusted JNLP Extension Remote Code Execution Vulnerability ZDI Disclosures
Cisco Security Advisory: Management Center for Cisco Security Agent Remote Code Execution Vulnerability Cisco Systems Product Security Incident Response Team
[SECURITY] [DSA 2167-1] phpmyadmin security update Thijs Kinkhorst
[SECURITY] [DSA 2168-1] openafs security update Moritz Muehlenhoff

Thursday, 17 February

[SECURITY] [DSA 2169-1] telepathy-gabble security update Nico Golde
PHP 5.3.5 grapheme_extract() NULL Pointer Dereference cxib
ZDI-11-087: Novell iPrint LPD Remote Code Execution Vulnerability ZDI Disclosures
ZDI-11-088: Cisco Security Agent Management st_upload Remote Code Execution Vulnerability ZDI Disclosures
HTB22836: Path disclosure in Coppermine advisory
HTB22835: DoS (Denial of Service) Risk in FlatnuX advisory
HTB22834: Path disclosure in FlatnuX advisory

Friday, 18 February

[USN-1066-1] Django vulnerabilities Jamie Strandboge
Re: PHP 5.3.5 grapheme_extract() NULL Pointer Dereference Marcin Orlowski
[USN-1067-1] Telepathy Gabble vulnerability Jamie Strandboge
[ MDVSA-2011:029 ] kernel security
www.eVuln.com : "wsnuser" Cookie SQL Injection vulnerability in WSN Guest bt
Re: DC4420 - London DEFCON - February meet - Tuesday 22nd February 2011 Major Malfunction
ZDI-11-089: Novell ZenWorks TFTPD Remote Code Execution Vulnerability ZDI Disclosures

Monday, 21 February

Privacy, Security, Trust (PST 2011) - Call for Papers Serguei A. Mokhov on behalf of PST-11
[SECURITY] [DSA 2170-1] mailman security update Thijs Kinkhorst
[ MDVSA-2011:031 ] python-django security
[ MDVSA-2011:032 ] eclipse security
www.eVuln.com : "time" SQL Injection vulnerability in WSN Guest bt
Domino Sametime Multiple Reflected Cross-Site Scripting david . daly
[security bulletin] HPSBUX02628 SSRT090183 rev.1 - HP-UX Running CDE Calendar Manager, Remote Execution of Arbitrary Code security-alert
[ MDVSA-2011:033 ] awstats security
[ MDVSA-2011:030 ] tomcat5 security

Tuesday, 22 February

[SECURITY] [DSA 2171-1] asterisk security update Moritz Muehlenhoff
[ MDVSA-2011:034 ] banshee security
Re: Domino Sametime Multiple Reflected Cross-Site Scripting barkley
HTB22845: SQL Injection in cdnvote wordpress plugin advisory
HTB22844: XSS in GD Star Rating wordpress plugin advisory
HTB22843: Path disclosure in GD Star Rating wordpress plugin advisory
[ MDVSA-2011:035 ] tomboy security
HTB22840: Path disclosure in Starbox Voting wordpress plugin advisory
HTB22842: Path disclosure in Comment Rating wordpress plugin advisory
HTB22841: SQL Injection in Comment Rating wordpress plugin advisory
HTB22838: Path disclosure in Vote It Up wordpress plugin advisory
HTB22839: SQL Injection in Z-Vote wordpress plugin advisory
[USN-1068-1] Aptdaemon vulnerability Marc Deslauriers
Vanilla Forums 2.0.17.1 ~ 2.0.17.5 <= Cross Site Scripting Vulnerability YGN Ethical Hacker Group
AST-2011-002: Multiple array overflow and crash vulnerabilities in UDPTL code Asterisk Security Team
[USN-1069-1] Mailman vulnerabilities Marc Deslauriers

Wednesday, 23 February

[SECURITY] [DSA 2172-1] moodle security update Moritz Muehlenhoff
[PRE-SA-2011-01] Multiple Linux kernel vulnerabilities in partition handling code of LDM and MAC partition tables Timo Warns
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Endpoint Devices Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Recording Server Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch Cisco Systems Product Security Incident Response Team
[ MDVSA-2011:036 ] mailman security
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Manager Cisco Systems Product Security Incident Response Team
[USN-1070-1] Bind vulnerability Marc Deslauriers

Thursday, 24 February

ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability ZDI Disclosures
WordPress Uploadify Plugin 1.0 Remote File Upload Leonardo Rota Botelho
ZDI-11-093: CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerability ZDI Disclosures
HTB22846: SQL Injection in IWantOneButton wordpress plugin advisory
HTB22847: XSS in IWantOneButton wordpress plugin advisory
ZDI-11-092: (0day) Cisco Secure Desktop CSDWebInstaller ActiveX Control Cleaner.cab Remote Code Execution Vulnerability ZDI Disclosures
HTB22850: SQL Injection in WP Forum Server wordpress plugin advisory
HTB22851: SQL Injection in WP Forum Server wordpress plugin advisory
[ MDVSA-2011:037 ] avahi security
ZDI-11-091: (0day) Cisco Secure Desktop CSDWebInstaller Remote Code Execution Vulnerability ZDI Disclosures

Friday, 25 February

prestashop vuln: sql injection submitted to bugtraq () securityfocus com Antonio S.M
Linksys Cisco Wag120N CSRF Vulnerability irancrash
[BMSA-2011-01] Insecure secure cookie in web.go Nam Nguyen
CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention System Williams, James K
DoS Condition with Altigen VoIP Phone Systems Patrick Kelley
Re: Linksys Cisco Wag120N CSRF Vulnerability tadeu1
[USN-1071-1] Linux kernel vulnerabilities Marc Deslauriers

Monday, 28 February

[USN-1072-1] Linux vulnerabilities Kees Cook
[USN-1073-1] Linux kernel vulnerabilities Kees Cook
[USN-1074-1] Linux kernel vulnerabilities Kees Cook
[SECURITY] [DSA 2173-1] pam-pgsql security update Thijs Kinkhorst
[SECURITY] [DSA 2174-1] avahi security update Thijs Kinkhorst
Imageview v6.0 Remote [and] Local Directory Traversal Vulnerability difficult-511
CONFidence 2011- CfP only 6 days left, we are still waiting for your submission Andrzej Targosz
[security bulletin] HPSBPI02635 SSRT100391 rev.1 - HP Web Jetadmin Running on Windows, Local Unauthorized Access to Managed Resources security-alert
Re: prestashop vuln: sql injection submitted to bugtraq () securityfocus com nebojsa
FreeBSD crontab information leakage Dan Rosenberg
[ MDVSA-2011:038 ] samba security
[USN-1075-1] Samba vulnerability Marc Deslauriers
[USN-1076-1] ClamAV vulnerability Marc Deslauriers
[USN-1077-1] FUSE vulnerabilities Marc Deslauriers