Navigation Bar Top Applications Support Documentation Vendors Search Index Top Top

Vulnerabilities

2007-01-17 joomla -- multiple remote vulnerabilities
2007-01-15 sircd -- remote reverse DNS buffer overflow
2007-01-15 sircd -- remote operator privilege escalation vulnerability
2007-01-12 cacti -- Multiple vulnerabilities
2007-01-08 mplayer -- buffer overflow in the code for RealMedia RTSP streams.
2007-01-06 fetchmail -- crashes when refusing a message bound for an MDA
2007-01-06 fetchmail -- TLS enforcement problem/MITM attack/password exposure
2007-01-05 opera -- multiple vulnerabilities
2007-01-05 drupal -- multiple vulnerabilities
2007-01-03 w3m -- format string vulnerability
2006-12-27 plone -- user can masquerade as a group
2006-12-21 proftpd -- remote code execution vulnerabilities
2006-12-19 gzip -- multiple vulnerabilities
2006-12-19 bind9 -- Denial of Service in named(8)
2006-12-19 openssl -- Incorrect PKCS#1 v1.5 padding validation in crypto(3)
2006-12-18 sql-ledger -- multiple vulnerabilities
2006-12-14 dbus -- match_rule_equal() Weakness
2006-12-14 evince -- Buffer Overflow Vulnerability
2006-12-13 tdiary -- injection vulnerability
2006-12-13 wv -- Multiple Integer Overflow Vulnerabilities
2006-12-13 wv2 -- Integer Overflow Vulnerability
2006-12-11 tnftpd -- Remote root Exploit
2006-12-07 libxine -- multiple buffer overflow vulnerabilities
2006-12-07 gnupg -- remotely controllable function pointer
2006-12-04 ruby -- cgi.rb library Denial of Service
2006-12-02 libmusicbrainz -- multiple buffer overflow vulnerabilities
2006-12-02 tdiary -- cross site scripting vulnerability
2006-12-02 ImageMagick -- SGI Image File heap overflow vulnerability
2006-11-30 gtar -- GNUTYPE_NAMES directory traversal vulnerability
2006-11-30 kronolith -- arbitrary local file inclusion vulnerability
2006-11-27 gnupg -- buffer overflow
2006-11-14 proftpd -- Remote Code Execution Vulnerability
2006-11-14 unzoo -- Directory Traversal Vulnerability
2006-11-11 bugzilla -- multiple vulnerabilities
2006-11-08 Imlib2 -- multiple image file processing vulnerabilities
2006-11-04 ruby -- cgi.rb library Denial of Service
2006-10-29 screen -- combined UTF-8 characters vulnerability
2006-10-29 mysql -- database suid privilege escalation
2006-10-29 mysql -- database "case-sensitive" privilege escalation
2006-10-22 kdelibs -- integer overflow in khtml
2006-10-21 Serendipity -- XSS Vulnerabilities
2006-10-20 opera -- URL parsing heap overflow vulnerability
2006-10-20 asterisk -- remote heap overwrite vulnerability
2006-10-19 plone -- unprotected MembershipTool methods
2006-10-18 drupal -- HTML attribute injection
2006-10-18 drupal -- cross site request forgeries
2006-10-18 drupal -- multiple XSS vulnerabilities
2006-10-18 ingo -- local arbitrary shell command execution
2006-10-16 nvidia-driver -- arbitrary root code execution vulnerability
2006-10-16 clamav -- CHM unpacker and PE rebuilding vulnerabilities
2006-10-15 tkdiff -- temporary file symlink privilege escalation
2006-10-15 vtiger -- multiple remote file inclusion vulnerabilities
2006-10-14 google-earth -- heap overflow in the KML engine
2006-10-12 clamav -- Multipart Nestings Denial of Service
2006-10-07 torrentflux -- User-Agent XSS Vulnerability
2006-10-07 python -- buffer overrun in repr() for unicode strings
2006-10-06 php -- _ecalloc Integer Overflow Vulnerability
2006-10-05 mambo -- multiple SQL injection vulnerabilities
2006-10-05 tin -- buffer overflow vulnerabilities
2006-10-05 openldap -- slapd acl selfwrite Security Issue
2006-10-05 mono -- "System.CodeDom.Compiler" Insecure Temporary Creation
2006-10-05 php -- open_basedir Race Condition Vulnerability
2006-10-04 phpbb -- NULL byte injection vulnerability
2006-10-03 postnuke -- admin section SQL injection
2006-10-02 freetype -- LWFN Files Buffer Overflow Vulnerability
2006-10-02 cscope -- Buffer Overflow Vulnerabilities
2006-10-02 gnutls -- RSA Signature Forgery Vulnerability
2006-10-02 MT -- Search Unspecified XSS
2006-10-02 phpmyadmin -- XSRF vulnerabilities
2006-09-30 openssh -- multiple vulnerabilities
2006-09-30 dokuwiki -- multiple vulnerabilities
2006-09-30 dokuwiki -- multiple vulnerabilities
2006-09-30 tikiwiki -- multiple vulnerabilities
2006-09-30 punbb -- NULL byte injection vulnerability
2006-09-26 freeciv -- Denial of Service Vulnerabilities
2006-09-26 freeciv -- Packet Parsing Denial of Service Vulnerability
2006-09-26 plans -- multiple vulnerabilities
2006-09-25 eyeOS -- multiple XSS security bugs
2006-09-22 zope -- restructuredText "csv_table" Information Disclosure
2006-09-22 libmms -- stack-based buffer overflow
2006-09-22 opera -- RSA Signature Forgery
2006-09-15 mozilla -- multiple vulnerabilities
2006-09-14 win32-codecs -- multiple vulnerabilities
2006-09-13 php -- multiple vulnerabilities
2006-09-13 drupal-pubcookie -- authentication may be bypassed
2006-09-12 linux-flashplugin7 -- arbitrary code execution vulnerabilities
2006-09-04 mailman -- Multiple Vulnerabilities
2006-09-02 hlstats -- multiple cross site scripting vulnerabilities
2006-09-02 gtetrinet -- remote code execution
2006-08-30 joomla -- multiple vulnerabilities
2006-08-23 sppp -- buffer overflow vulnerability
2006-08-17 horde -- Phishing and Cross-Site Scripting Vulnerabilities
2006-08-15 globus -- Multiple tmpfile races
2006-08-13 x11vnc -- authentication bypass vulnerability
2006-08-13 alsaplayer -- multiple vulnerabilities
2006-08-13 postgresql -- encoding based SQL injection
2006-08-13 postgresql -- multiple vulnerabilities
2006-08-13 mysql -- format string vulnerability
2006-08-12 squirrelmail -- random variable overwrite vulnerability
2006-08-10 rubygem-rails -- evaluation of ruby code
2006-08-08 clamav -- heap overflow vulnerability
2006-08-02 drupal -- XSS vulnerability
2006-08-02 gnupg -- 2 more possible memory allocation attacks
2006-07-29 ruby - multiple vulnerabilities
2006-07-28 apache -- mod_rewrite buffer overflow vulnerability
2006-07-27 mozilla -- multiple vulnerabilities
2006-07-14 zope -- information disclosure vulnerability
2006-07-13 drupal -- multiple vulnerabilities
2006-07-11 shoutcast -- cross-site scripting, information exposure
2006-07-10 samba -- memory exhaustion DoS in smbd
2006-07-10 twiki -- multiple file extensions file upload vulnerability
2006-07-07 trac -- reStructuredText breach of privacy and denial of service vulnerability
2006-07-05 horde -- various problems in dereferrer
2006-07-05 mambo -- SQL injection vulnerabilities
2006-07-03 phpmyadmin -- cross site scripting vulnerability
2006-07-02 webmin, usermin -- arbitrary file disclosure vulnerability
2006-06-30 mutt -- Remote Buffer Overflow Vulnerability
2006-06-30 Joomla -- multiple vulnerabilities
2006-06-27 hashcash -- heap overflow vulnerability
2006-06-25 gnupg -- user id integer overflow vulnerability
2006-06-17 horde -- multiple parameter cross site scripting vulnerabilities
2006-06-16 webcalendar -- information disclosure vulnerability
2006-06-14 sendmail -- Incorrect multipart message handling
2006-06-11 dokuwiki -- multiple vulnerabilities
2006-06-11 libxine -- buffer overflow vulnerability
2006-06-09 smbfs -- chroot escape
2006-06-09 ypserv -- Inoperative access controls in ypserv
2006-06-08 freeradius -- multiple vulnerabilities
2006-06-08 freeradius -- authentication bypass vulnerability
2006-06-05 squirrelmail -- plugin.php local file inclusion vulnerability
2006-06-05 dokuwiki -- spellchecker remote PHP code execution
2006-06-05 drupal -- multiple vulnerabilities
2006-06-01 MySQL -- SQL-injection security vulnerability
2006-06-01 MySQL -- Information Disclosure and Buffer Overflow Vulnerabilities
2006-05-23 frontpage -- cross site scripting vulnerability
2006-05-23 cscope -- buffer overflow vulnerabilities
2006-05-22 coppermine -- Multiple File Extensions Vulnerability
2006-05-22 coppermine -- "file" Local File Inclusion Vulnerability
2006-05-22 coppermine -- File Inclusion Vulnerabilities
2006-05-21 phpmyadmin -- XSRF vulnerabilities
2006-05-18 vnc - authentication bypass vulnerability
2006-05-14 phpldapadmin -- Cross-Site Scripting and Script Insertion vulnerabilities
2006-05-06 fswiki -- XSS vulnerability
2006-05-06 mysql50-server -- COM_TABLE_DUMP arbitrary code execution
2006-05-05 awstats -- arbitrary command execution vulnerability
2006-05-03 phpwebftp -- "language" Local File Inclusion
2006-05-03 firefox -- denial of service vulnerability
2006-05-03 clamav -- Freshclam HTTP Header Buffer Overflow Vulnerability
2006-05-02 trac -- Wiki Macro Script Insertion Vulnerability
2006-05-01 jabberd -- SASL Negotiation Denial of Service Vulnerability
2006-04-27 cacti -- ADOdb "server.php" Insecure Test Script Security Issue
2006-04-27 amaya -- Attribute Value Buffer Overflow Vulnerabilities
2006-04-27 lifetype -- ADOdb "server.php" Insecure Test Script Security Issue
2006-04-27 ethereal -- Multiple Protocol Dissector Vulnerabilities
2006-04-25 asterisk -- denial of service vulnerability, local system access
2006-04-23 zgv, xzgv -- heap overflow vulnerability
2006-04-23 crossfire-server -- denial of service and remote code execution vulnerability
2006-04-23 p5-DBI -- insecure temporary file creation vulnerability
2006-04-23 wordpress -- full path disclosure
2006-04-23 xine -- multiple remote string vulnerabilities
2006-04-22 cyrus-sasl -- DIGEST-MD5 Pre-Authentication Denial of Service
2006-04-19 FreeBSD -- FPU information disclosure
2006-04-18 plone -- "member_id" Parameter Portrait Manipulation Vulnerability
2006-04-16 mozilla -- multiple vulnerabilities
2006-04-16 mailman -- Private Archive Script Cross-Site Scripting
2006-04-10 f2c -- insecure temporary files
2006-04-07 mplayer -- Multiple integer overflows
2006-04-07 kaffeine -- buffer overflow vulnerability
2006-04-07 thunderbird -- javascript execution
2006-04-06 phpmyadmin -- XSS vulnerabilities
2006-04-06 phpmyadmin -- 'set_theme' Cross-Site Scripting
2006-04-06 clamav -- Multiple Vulnerabilities
2006-04-05 mediawiki -- hardcoded placeholder string security bypass vulnerability
2006-04-05 netpbm -- buffer overflow in pnmtopng
2006-04-05 zoo -- stack based buffer overflow
2006-04-05 mediawiki -- cross site scripting vulnerability
2006-04-05 dia -- XFig Import Plugin Buffer Overflow
2006-04-05 openvpn -- LD_PRELOAD code execution on client through malicious or compromised server
2006-04-05 samba -- Exposure of machine account credentials in winbind log files
2006-04-05 mod_pubcookie -- cross site scripting vulnerability
2006-04-05 pubcookie-login-server -- cross site scripting vulnerability
2006-03-29 freeradius -- EAP-MSCHAPv2 Authentication Bypass
2006-03-28 horde -- remote code execution vulnerability in the help viewer
2006-03-27 linux-realplayer -- buffer overrun
2006-03-27 linux-realplayer -- heap overflow
2006-03-24 sendmail -- race condition vulnerability
2006-03-24 OPIE -- arbitrary password change
2006-03-24 ipsec -- reply attack vulnerability
2006-03-21 xorg-server -- privilege escalation
2006-03-20 heimdal -- Multiple vulnerabilities
2006-03-20 curl -- TFTP packet buffer overflow vulnerability
2006-03-17 drupal -- multiple vulnerabilities
2006-03-15 horde -- "url" disclosure of sensitive information vulnerability
2006-03-15 linux-flashplugin -- arbitrary code execution vulnerability
2006-03-12 nfs -- remote denial of service
2006-03-12 openssh -- remote denial of service
2006-03-10 GnuPG does not detect injection of unsigned data
2006-03-09 mplayer -- heap overflow in the ASF demuxer
2006-03-04 SSH.COM SFTP server -- format string vulnerability
2006-03-03 gtar -- invalid headers buffer overflow
2006-02-27 bugzilla -- multiple vulnerabilities
2006-02-24 squirrelmail -- multiple vulnerabilities
2006-02-20 gedit -- format string vulnerability
2006-02-20 WebCalendar -- unauthorized access vulnerability
2006-02-20 abiword, koffice -- stack based buffer overflow vulnerabilities
2006-02-18 postgresql81-server -- SET ROLE privilege escalation
2006-02-17 gnupg -- false positive signature verification
2006-02-16 rssh -- privilege escalation vulnerability
2006-02-16 tor -- malicious tor server can locate a hidden service
2006-02-16 sudo -- arbitrary command execution
2006-02-16 libtomcrypt -- weak signature scheme with ECC keys
2006-02-16 mantis -- "view_filters_page.php" cross site scripting vulnerability
2006-02-16 phpbb -- multiple vulnerabilities
2006-02-16 postgresql -- character conversion and tsearch2 vulnerabilities
2006-02-16 heartbeat -- insecure temporary file creation vulnerability
2006-02-15 kpdf -- heap based buffer overflow
2006-02-15 perl, webmin, usermin -- perl format string integer wrap vulnerability
2006-02-15 phpicalendar -- cross site scripting vulnerability
2006-02-15 phpicalendar -- file disclosure vulnerability
2006-02-14 FreeBSD -- Infinite loop in SACK handling
2006-02-14 pf -- IP fragment handling panic
2006-02-14 FreeBSD -- Local kernel memory disclosure
2006-02-14 IEEE 802.11 -- buffer overflow
2006-02-14 ipfw -- IP fragment denial of service
2006-02-07 kpopup -- local root exploit and local denial of service
2006-01-27 cpio -- multiple vulnerabilities
2006-01-27 ee -- temporary file privilege escalation
2006-01-27 texindex -- temporary file privilege escalation
2006-01-27 cvsbug -- race condition
2006-01-23 sge -- local root exploit in bundled rsh executable
2006-01-23 fetchmail -- crash when bouncing a message
2006-01-10 clamav -- possible heap overflow in the UPX code
2006-01-09 milter-bogom -- headerless message crash
2006-01-07 bogofilter -- heap corruption through excessively long words
2006-01-07 bogofilter -- heap corruption through malformed input
2006-01-04 rxvt-unicode -- restore permissions on tty devices
2006-01-01 apache -- mod_imap cross-site scripting flaw
2005-12-22 nbd-server -- buffer overflow vulnerability
2005-12-22 scponly -- local privilege escalation exploits
2005-12-19 fetchmail -- null pointer dereference in multidrop mode with headerless email
2005-12-14 mantis -- "t_core_path" file inclusion vulnerability
2005-12-14 mantis -- "view_filters_page.php" cross-site scripting vulnerability
2005-12-11 mnemo -- Cross site scripting vulnerabilities in several of the notepad name and note data fields
2005-12-11 nag -- Cross site scripting vulnerabilities in several of the tasklist name and task data fields
2005-12-11 turba -- Cross site scripting vulnerabilities in several of the address book name and contact data fields
2005-12-11 kronolith -- Cross site scripting vulnerabilities in several of the calendar name and event data fields
2005-12-11 horde -- Cross site scripting vulnerabilities in several of Horde's templates
2005-12-09 curl -- URL buffer overflow vulnerability
2005-12-07 phpmyadmin -- register_globals emulation "import_blacklist" manipulation
2005-12-07 phpmyadmin -- XSS vulnerabilities
2005-12-07 ffmpeg -- libavcodec buffer overflow vulnerability
2005-12-07 trac -- search module SQL injection vulnerability
2005-12-01 drupal -- multiple vulnerabilities
2005-11-30 opera -- multiple vulnerabilities
2005-11-30 opera -- command line URL shell command injection
2005-11-30 mambo -- "register_globals" emulation layer overwrite vulnerability
2005-11-27 ghostscript -- insecure temporary file creation vulnerability
2005-11-22 horde -- Cross site scripting vulnerabilities in MIME viewers
2005-11-16 phpmyadmin -- HTTP Response Splitting vulnerability
2005-11-13 phpSysInfo -- "register_globals" emulation layer overwrite vulnerability
2005-11-13 Macromedia flash player -- swf file handling arbitrary code
2005-11-10 flyspray -- cross-site scripting vulnerabilities
2005-11-10 p5-Mail-SpamAssassin -- long message header denial of service
2005-11-07 qpopper -- multiple privilege escalation vulnerabilities
2005-11-04 pear-PEAR -- PEAR installer arbitrary code execution vulnerability
2005-11-01 openvpn -- potential denial-of-service on servers in TCP mode
2005-11-01 openvpn -- arbitrary code execution on client through malicious or compromised server
2005-11-01 PHP -- multiple vulnerabilities
2005-11-01 skype -- multiple buffer overflow vulnerabilities
2005-11-01 squid -- FTP server response handling denial of service
2005-10-31 base -- PHP SQL injection vulnerability
2005-10-30 fetchmail -- fetchmailconf local password exposure
2005-10-30 lynx -- remote buffer overflow
2005-10-27 ruby -- vulnerability in the safe level settings
2005-10-20 xloadimage -- buffer overflows in NIFF image title handling
2005-10-18 snort -- Back Orifice preprocessor buffer overflow vulnerability
2005-10-15 webcalendar -- remote file inclusion vulnerability
2005-10-15 gallery2 -- file disclosure vulnerability
2005-10-12 openssl -- potential SSL 2.0 rollback
2005-10-11 phpmyadmin -- local file inclusion vulnerability
2005-10-11 zope -- expose RestructuredText functionality to untrusted users
2005-10-09 libxine -- format string vulnerability
2005-10-05 imap-uw -- mailbox name handling remote buffer vulnerability
2005-10-02 weex -- remote format string vulnerability
2005-10-02 picasm -- buffer overflow vulnerability
2005-10-01 uim -- privilege escalation vulnerability
2005-10-01 cfengine -- arbitrary file overwriting vulnerability
2005-09-29 phpmyfaq -- SQL injection, takeover, path disclosure, remote code execution
2005-09-24 clamav -- arbitrary code execution and DoS vulnerabilities
2005-09-23 firefox & mozilla -- multiple vulnerabilities
2005-09-22 firefox & mozilla -- command line URL shell command injection
2005-09-17 apache -- Certificate Revocation List (CRL) off-by-one vulnerability
2005-09-17 squirrelmail -- _$POST variable handling allows for various attacks
2005-09-15 X11 server -- pixmap allocation vulnerability
2005-09-15 squid -- possible denial of service condition regarding NTLM authentication
2005-09-13 unzip -- permission race vulnerability
2005-09-10 firefox & mozilla -- buffer overflow vulnerability
2005-09-04 htdig -- cross site scripting vulnerability
2005-09-04 squid -- Denial Of Service Vulnerability in sslConnectTimeout
2005-09-04 squid -- Possible Denial Of Service Vulnerability in store.c
2005-09-03 bind9 -- denial of service
2005-09-03 bind -- buffer overrun vulnerability
2005-09-02 urban -- stack overflow vulnerabilities
2005-08-29 fswiki - command injection vulnerability
2005-08-27 evolution -- remote format string vulnerabilities
2005-08-27 pam_ldap -- authentication bypass vulnerability
2005-08-26 pcre -- regular expression buffer overflow
2005-08-23 elm -- remote buffer overflow in Expires header
2005-08-19 openvpn -- multiple TCP clients connecting with the same certificate at the same time can crash the server
2005-08-19 openvpn -- denial of service: malicious authenticated "tap" client can deplete server virtual memory
2005-08-19 openvpn -- denial of service: undecryptable packet from authorized client can disconnect unrelated clients
2005-08-19 openvpn -- denial of service: client certificate validation can disconnect unrelated clients
2005-08-17 tor -- diffie-hellman handshake flaw
2005-08-16 acroread -- plug-in buffer overflow vulnerability
2005-08-15 pear-XML_RPC -- remote PHP code injection vulnerability
2005-08-14 awstats -- arbitrary code execution vulnerability
2005-08-12 libgadu -- multiple vulnerabilities
2005-08-12 gaim -- AIM/ICQ non-UTF-8 filename crash
2005-08-12 gaim -- AIM/ICQ away message buffer overflow
2005-08-12 xpdf -- disk fill DoS vulnerability
2005-08-09 gforge -- XSS and email flood vulnerabilities
2005-08-08 postnuke -- multiple vulnerabilities
2005-08-05 mambo -- multiple vulnerabilities
2005-08-05 ipsec -- Incorrect key usage in AES-XCBC-MAC
2005-08-05 zlib -- buffer overflow vulnerability
2005-08-05 devfs -- ruleset bypass
2005-08-03 proftpd -- format string vulnerabilities
2005-08-01 nbsmtp -- format string vulnerability
2005-07-31 sylpheed -- MIME-encoded file name buffer overflow vulnerability
2005-07-31 phpmyadmin -- cross site scripting vulnerability
2005-07-31 gnupg -- OpenPGP symmetric encryption vulnerability
2005-07-31 vim -- vulnerabilities in modeline handling: glob, expand
2005-07-30 tiff -- buffer overflow vulnerability
2005-07-30 opera -- image dragging vulnerability
2005-07-30 opera -- download dialog spoofing vulnerability
2005-07-30 ethereal -- multiple protocol dissectors vulnerabilities
2005-07-30 jabberd -- 3 buffer overflows
2005-07-26 apache -- http request smuggling
2005-07-25 clamav -- multiple remote buffer overflows
2005-07-23 isc-dhcpd -- format string vulnerabilities
2005-07-23 egroupware -- multiple cross-site scripting (XSS) and SQL injection vulnerabilities
2005-07-22 fetchmail -- denial of service/crash from malicious POP3 server
2005-07-21 dnrd -- remote buffer and stack overflow vulnerabilities
2005-07-21 PowerDNS -- LDAP backend fails to escape all queries
2005-07-20 fetchmail -- remote root/code injection from malicious POP3 server
2005-07-18 kdebase -- Kate backup file permission leak
2005-07-16 firefox & mozilla -- multiple vulnerabilities
2005-07-16 drupal -- PHP code execution vulnerabilities
2005-07-09 phpSysInfo -- cross site scripting vulnerability
2005-07-09 mysql-server -- insecure temporary file creation
2005-07-09 net-snmp -- fixproc insecure temporary file creation
2005-07-09 phpbb -- multiple vulnerabilities
2005-07-09 shtool -- insecure temporary file creation
2005-07-08 phppgadmin -- "formLanguage" local file inclusion vulnerability
2005-07-08 pear-XML_RPC -- information disclosure vulnerabilities
2005-07-08 ekg -- insecure temporary file creation
2005-07-08 bugzilla -- multiple vulnerabilities
2005-07-08 nwclient -- multiple vulnerabilities
2005-07-06 acroread -- insecure temporary file creation
2005-07-06 clamav -- cabinet file handling DoS vulnerability
2005-07-06 clamav -- MS-Expand file handling DoS vulnerability
2005-07-06 zlib -- buffer overflow vulnerability
2005-07-06 acroread -- buffer overflow vulnerability
2005-07-05 net-snmp -- remote DoS vulnerability
2005-07-05 cacti -- multiple vulnerabilities
2005-07-05 wordpress -- multiple vulnerabilities
2005-07-05 wordpress -- multiple vulnerabilities
2005-07-03 phpbb -- remote PHP code execution vulnerability
2005-07-03 pear-XML_RPC -- arbitrary remote code execution
2005-06-29 kernel -- ipfw packet matching errors with address tables
2005-06-29 bzip2 -- denial of service and permission race vulnerabilities
2005-06-29 kernel -- TCP connection stall denial of service
2005-06-24 ethereal -- multiple protocol dissectors vulnerabilities
2005-06-24 tor -- information disclosure
2005-06-24 linux-realplayer -- RealText parsing heap overflow
2005-06-23 ruby -- arbitrary command execution on XMLRPC server
2005-06-21 cacti -- potential SQL injection and cross site scripting attacks
2005-06-20 opera -- XMLHttpRequest security bypass
2005-06-20 opera -- "javascript:" URL cross-site scripting vulnerability
2005-06-20 opera -- redirection cross-site scripting vulnerability
2005-06-20 sudo -- local race condition vulnerability
2005-06-20 trac -- file upload/download vulnerability
2005-06-20 razor-agents -- denial of service vulnerability
2005-06-18 p5-Mail-SpamAssassin -- denial of service vulnerability
2005-06-18 squirrelmail -- Several cross site scripting vulnerabilities
2005-06-18 acroread -- XML External Entity vulnerability
2005-06-18 gzip -- directory traversal and permission race vulnerabilities
2005-06-18 tcpdump -- infinite loops in protocol decoding
2005-06-17 gaim -- Yahoo! remote crash vulnerability
2005-06-17 gaim -- MSN Remote DoS vulnerability
2005-06-17 gallery -- remote code injection via HTTP_POST_VARS
2005-06-17 gallery -- cross-site scripting
2005-06-17 kstars -- exploitable set-user-ID application fliccd
2005-06-17 fd_set -- bitmap index overflow in multiple applications
2005-06-09 leafnode -- denial of service vulnerability
2005-06-03 gforge -- directory traversal vulnerability
2005-06-03 imap-uw -- authentication bypass when CRAM-MD5 is enabled
2005-06-03 squid -- denial-of-service vulnerabilities
2005-06-03 racoon -- remote denial-of-service
2005-06-03 xli -- integer overflows in image size calculations
2005-06-03 xloadimage -- arbitrary command execution when handling compressed files
2005-06-03 xloadimage -- buffer overflow in FACES image handling
2005-06-03 yamt -- buffer overflow and directory traversal issues
2005-06-01 xview -- multiple buffer overflows in xv_parse_one
2005-06-01 xtrlock -- X display locking bypass
2005-06-01 linux_base -- vulnerabilities in Red Hat 7.1 libraries
2005-06-01 squirrelmail -- XSS and remote code injection vulnerabilities
2005-06-01 sympa -- buffer overflow in "queue"
2005-06-01 mailman -- generated passwords are poor quality
2005-06-01 mailman -- password disclosure
2005-06-01 tomcat -- Tomcat Manager cross-site scripting
2005-05-29 fswiki -- XSS problem in file upload form
2005-05-22 freeradius -- sql injection and denial of service vulnerability
2005-05-22 ppxp -- local root exploit
2005-05-22 oops -- format string vulnerability
2005-05-19 cdrdao -- unspecified privilege escalation vulnerability
2005-05-19 squid -- possible abuse of cachemgr.cgi
2005-05-19 squid -- DNS lookup spoofing vulnerability
2005-05-14 gaim -- MSN remote DoS vulnerability
2005-05-14 gaim -- remote crash on some protocols
2005-05-13 kernel -- information disclosure when using HTT
2005-05-13 leafnode -- fetchnews denial-of-service triggered by transmission abort/timeout
2005-05-12 mozilla -- privilege escalation via non-DOM property overrides
2005-05-12 mozilla -- "Wrapped" javascript: urls bypass security checks
2005-05-11 mozilla -- code execution via javascript: IconURL vulnerability
2005-05-09 groff -- pic2graph and eqn2graph are vulnerable to symlink attack through temporary files
2005-05-09 groff -- groffer uses temporary files unsafely
2005-05-01 sharutils -- unshar insecure temporary file creation
2005-05-01 rsnapshot -- local privilege escalation
2005-05-01 coppermine -- IP spoofing and XSS vulnerability
2005-04-27 ImageMagick -- ReadPNMImage() heap overflow vulnerability
2005-04-25 mplayer & libxine -- MMS and Real RTSP buffer overflow vulnerabilities
2005-04-25 gaim -- AIM/ICQ remote denial of service vulnerability
2005-04-25 gaim -- remote DoS on receiving malformed HTML
2005-04-23 kdewebdev -- kommander untrusted code execution vulnerability
2005-04-22 junkbuster -- heap corruption vulnerability and configuration modification vulnerability
2005-04-22 kdelibs -- kimgio input validation errors
2005-04-19 gld -- format string and buffer overflow vulnerabilities
2005-04-17 axel -- remote buffer overflow
2005-04-16 firefox -- PLUGINSPAGE privileged javascript execution
2005-04-16 jdk -- jar directory traversal vulnerability
2005-04-16 mozilla -- privilege escalation via DOM property overrides
2005-04-16 mozilla -- code execution through javascript: favicons
2005-04-16 mozilla -- javascript "lambda" replace exposes memory contents
2005-04-16 firefox -- arbitrary code execution in sidebar panel
2005-04-13 openoffice -- DOC document heap overflow vulnerability
2005-04-12 portupgrade -- insecure temporary file handling vulnerability
2005-04-10 gaim -- jabber remote crash
2005-04-10 gaim -- remote DoS on receiving certain messages over IRC
2005-04-10 gaim -- remote DoS on receiving malformed HTML
2005-04-10 php -- readfile() DoS vulnerability
2005-04-10 squid -- DoS on failed PUT/POST requests vulnerability
2005-04-05 horde -- Horde Page Title Cross-Site Scripting Vulnerability
2005-04-04 wu-ftpd -- remote globbing DoS vulnerability
2005-04-02 hashcash -- format string vulnerability
2005-03-26 clamav -- zip handling DoS vulnerability
2005-03-24 wine -- information disclosure due to insecure temporary file handling
2005-03-24 firefox -- arbitrary code execution from sidebar panel
2005-03-24 mozilla -- heap buffer overflow in GIF image processing
2005-03-23 sylpheed -- buffer overflow in header processing
2005-03-21 xv -- filename handling format string vulnerability
2005-03-21 kdelibs -- local DCOP denial of service vulnerability
2005-03-15 phpmyadmin -- increased privilege vulnerability
2005-03-14 ethereal -- multiple protocol dissectors vulnerabilities
2005-03-14 grip -- CDDB response multiple matches buffer overflow vulnerability
2005-03-14 mysql-server -- multiple remote vulnerabilities
2005-03-13 rxvt-unicode -- buffer overflow vulnerability
2005-03-08 phpmyadmin -- information disclosure vulnerability
2005-03-08 phpmyadmin -- arbitrary file include and XSS vulnerabilities
2005-03-08 libexif -- buffer overflow vulnerability
2005-03-05 phpbb - Insuffient check against HTML code in usercp_register.php
2005-03-04 postnuke -- SQL injection vulnerabilities
2005-03-04 postnuke -- cross-site scripting (XSS) vulnerabilities
2005-03-04 realplayer -- remote heap overflow
2005-03-03 ImageMagick -- format string vulnerability
2005-03-01 uim -- privilege escalation vulnerability
2005-03-01 lighttpd -- script source disclosure vulnerability
2005-02-28 phpbb -- privilege elevation and path disclosure
2005-02-27 curl -- authentication buffer overflow vulnerability
2005-02-27 cyrus-imapd -- multiple buffer overflow vulnerabilities
2005-02-27 sup -- format string vulnerability
2005-02-26 mozilla -- insecure temporary directory vulnerability
2005-02-26 mozilla -- arbitrary code execution vulnerability
2005-02-24 mkbold-mkitalic -- format string vulnerability
2005-02-23 phpbb -- multiple information disclosure vulnerabilities
2005-02-22 unace -- multiple vulnerabilities
2005-02-20 putty -- pscp/psftp heap corruption vulnerabilities
2005-02-18 kdelibs -- insecure temporary file creation
2005-02-18 bidwatcher -- format string vulnerability
2005-02-18 gftp -- directory traversal vulnerability
2005-02-18 opera -- "data:" URI handler spoofing vulnerability
2005-02-18 opera -- kfmclient exec command execution vulnerability
2005-02-17 postgresql -- multiple buffer overflows in PL/PgSQL parser
2005-02-16 awstats -- arbitrary command execution
2005-02-14 powerdns -- DoS vulnerability
2005-02-14 emacs -- movemail format string vulnerability
2005-02-13 ngircd -- format string vulnerability
2005-02-13 ngircd -- buffer overflow vulnerability
2005-02-13 mod_python -- information leakage vulnerability
2005-02-12 mailman -- directory traversal vulnerability
2005-02-11 enscript -- multiple vulnerabilities
2005-02-08 postgresql -- privilege escalation vulnerability
2005-02-08 ethereal -- multiple protocol dissectors vulnerabilities
2005-02-08 squid -- correct handling of oversized HTTP reply headers
2005-02-03 python -- SimpleXMLRPCServer.py allows unrestricted traversal
2005-02-02 perl -- vulnerabilities in PERLIO_DEBUG handling
2005-02-01 newsgrab -- insecure file and directory creation
2005-02-01 newsgrab -- directory traversal vulnerability
2005-02-01 newspost -- server response buffer overflow vulnerability
2005-02-01 newsfetch -- server response buffer overflow vulnerability
2005-01-28 squid -- buffer overflow in WCCP recvfrom() call
2005-01-26 xpdf -- makeFileKey2() buffer overflow vulnerability
2005-01-25 zhcon -- unauthorized file access
2005-01-25 evolution -- arbitrary code execution vulnerability
2005-01-24 mod_dosevasive -- insecure temporary file creation
2005-01-24 squid -- possible cache-poisoning via malformed HTTP responses
2005-01-24 bugzilla -- cross-site scripting vulnerability
2005-01-24 web browsers -- window injection vulnerabilities
2005-01-24 opera -- multiple vulnerabilities in Java implementation
2005-01-23 yamt -- arbitrary command execution vulnerability
2005-01-22 squid -- HTTP response splitting cache pollution attack
2005-01-22 horde -- XSS vulnerabilities
2005-01-21 mc -- multiple vulnerabilities
2005-01-21 perl -- File::Path insecure file/directory permissions
2005-01-21 sudo -- environmental variable CDPATH is not cleared
2005-01-21 fcron -- multiple vulnerabilities
2005-01-21 realplayer -- arbitrary file deletion and other vulnerabilities
2005-01-21 imlib -- xpm heap buffer overflows and integer overflows
2005-01-21 egroupware -- arbitrary file download in JiNN
2005-01-21 quake2 -- multiple critical vulnerabilities
2005-01-19 konversation -- shell script command injection
2005-01-19 squid -- no sanity check of usernames in squid_ldap_auth
2005-01-18 cups-base -- CUPS server remote DoS vulnerability
2005-01-18 tiff -- divide-by-zero denial-of-service
2005-01-18 zgv -- exploitable heap overflows
2005-01-18 mozilla -- insecure permissions for some downloaded files
2005-01-18 awstats -- remote command execution vulnerability
2005-01-18 ImageMagick -- PSD handler heap overflow vulnerability
2005-01-17 cups-lpr -- lppasswd multiple vulnerabilities
2005-01-17 cups-base -- HPGL buffer overflow vulnerability
2005-01-16 mysql-scripts -- mysqlaccess insecure temporary file creation
2005-01-16 unrtf -- buffer overflow vulnerability
2005-01-13 mozilla -- heap overflow in NNTP handler
2005-01-13 mpg123 -- buffer overflow vulnerability
2005-01-12 squid -- denial of service with forged WCCP messages
2005-01-12 squid -- buffer overflow vulnerability in gopherToHTML
2005-01-12 libxine -- DVD subpicture decoder heap overflow
2005-01-12 libxine -- multiple vulnerabilities in VideoCD handling
2005-01-12 libxine -- multiple buffer overflows in RTSP
2005-01-11 hylafax -- unauthorized login vulnerability
2005-01-11 xshisen -- local buffer overflows
2005-01-10 helvis -- arbitrary file deletion problem
2005-01-10 helvis -- information leak vulnerabilities
2005-01-08 dillo -- format string vulnerability
2005-01-07 tnftp -- mget does not check for directory escapes
2005-01-06 tiff -- tiffdump integer overflow vulnerability
2005-01-06 tiff -- directory entry count integer overflow vulnerability
2005-01-06 vim -- vulnerabilities in modeline handling
2005-01-06 pcal -- buffer overflow vulnerabilities
2005-01-05 exim -- two buffer overflow vulnerabilities
2005-01-03 mpg123 -- playlist processing buffer overflow vulnerability
2005-01-03 greed -- insecure GRX file processing
2005-01-03 golddig -- local buffer overflow vulnerabilities
2005-01-02 up-imapproxy -- multiple vulnerabilities
2005-01-01 kdelibs3 -- konqueror FTP command injection vulnerability
2004-12-30 a2ps -- insecure temporary file creation
2004-12-29 libxine -- buffer-overflow vulnerability in aiff support
2004-12-26 jabberd -- denial-of-service vulnerability
2004-12-23 squid -- confusing results on empty acl declarations
2004-12-23 ethereal -- multiple vulnerabilities
2004-12-23 xpdf -- buffer overflow vulnerability
2004-12-22 phpbb -- arbitrary command execution and other vulnerabilities
2004-12-21 acroread5 -- mailListIsPdf() buffer overflow vulnerability
2004-12-21 ecartis -- unauthorised access to admin interface
2004-12-21 mplayer -- multiple vulnerabilities
2004-12-21 krb5 -- heap buffer overflow vulnerability in libkadm5srv
2004-12-21 samba -- integer overflow vulnerability
2004-12-17 php -- multiple vulnerabilities
2004-12-16 mysql -- GRANT access restriction problem
2004-12-16 mysql -- ALTER MERGE denial of service vulnerability
2004-12-16 mysql -- FTS request denial of service vulnerability
2004-12-16 mysql -- mysql_real_connect buffer overflow vulnerability
2004-12-16 mysql -- erroneous access restrictions applied to table renames
2004-12-15 phpmyadmin -- command execution vulnerability
2004-12-15 phpmyadmin -- file disclosure vulnerability
2004-12-14 wget -- multiple vulnerabilities
2004-12-12 konqueror -- Password Disclosure for SMB Shares
2004-12-11 mod_access_referer -- null pointer dereference vulnerability
2004-12-09 squid -- possible information disclosure
2004-12-08 viewcvs -- information leakage
2004-12-07 cscope -- symlink attack vulnerability
2004-12-04 bnc -- remotely exploitable buffer overflow in getnickuserhost
2004-12-02 rssh & scponly -- arbitrary command execution
2004-12-02 rockdodger -- buffer overflows
2004-12-01 zip -- long path buffer overflow
2004-12-01 sudoscript -- signal delivery vulnerability
2004-11-30 jabberd -- remote buffer overflow vulnerability
2004-11-27 Open DC Hub -- remote buffer overflow vulnerability
2004-11-26 unarj -- long filename buffer overflow
2004-11-26 unarj -- directory traversal vulnerability
2004-11-25 jdk/jre -- Security Vulnerability With Java Plugin
2004-11-25 ProZilla -- server response buffer overflow vulnerabilities
2004-11-22 Cyrus IMAPd -- APPEND command uses undefined programming construct
2004-11-22 Cyrus IMAPd -- FETCH command out of bounds memory corruption
2004-11-22 Cyrus IMAPd -- PARTIAL command out of bounds memory corruption
2004-11-22 Cyrus IMAPd -- IMAPMAGICPLUS preauthentification overflow
2004-11-20 phpMyAdmin -- cross-site scripting vulnerabilities
2004-11-18 Overflow error in fetch
2004-11-17 smbd -- buffer-overrun vulnerability
2004-11-15 twiki -- arbitrary shell command execution
2004-11-15 proxytunnel -- format string vulnerability
2004-11-13 sudo -- privilege escalation with bash scripts
2004-11-13 ruby -- CGI DoS
2004-11-12 samba -- potential remote DoS vulnerability
2004-11-12 gnats -- format string vulnerability
2004-11-12 squirrelmail -- cross site scripting vulnerability
2004-11-11 hafiye -- lack of terminal escape sequence filtering
2004-11-11 ez-ipupdate -- format string vulnerability
2004-11-11 ImageMagick -- EXIF parser buffer overflow
2004-11-10 apache2 multiple space header denial-of-service vulnerability
2004-11-10 socat -- format string vulnerability
2004-11-09 libxml -- remote buffer overflows
2004-11-08 p5-Archive-Zip -- virus detection evasion
2004-11-06 apache mod_include buffer overflow vulnerability
2004-11-06 postgresql-contrib -- insecure temporary file creation
2004-11-05 gd -- integer overflow
2004-11-04 putty -- buffer overflow vulnerability in ssh2 support
2004-11-03 wzdftpd -- remote DoS
2004-10-27 horde -- cross-site scripting vulnerability in help window
2004-10-26 bogofilter -- RFC 2047 decoder denial-of-service vulnerability
2004-10-25 rssh -- format string vulnerability
2004-10-25 xpdf -- integer overflow vulnerabilities
2004-10-25 gaim -- MSN denial-of-service vulnerabilities
2004-10-25 gaim -- Content-Length header denial-of-service vulnerability
2004-10-25 gaim -- multiple buffer overflows
2004-10-25 gaim -- heap overflow exploitable by malicious GroupWise server
2004-10-25 gaim -- malicious smiley themes
2004-10-25 gaim -- buffer overflow in MSN protocol support
2004-10-23 mod_ssl -- SSLCipherSuite bypass
2004-10-23 mpg123 -- buffer overflow in URL handling
2004-10-21 apache2 -- SSL remote DoS
2004-10-20 phpmyadmin -- remote command execution vulnerability
2004-10-20 cabextract -- insecure directory handling
2004-10-20 a2ps -- insecure command line argument handling
2004-10-19 ifmail -- unsafe set-user-ID application
2004-10-19 imwheel -- insecure handling of PID file
2004-10-17 cacti -- SQL injection
2004-10-17 apache13-modssl -- format string vulnerability in proxy support
2004-10-15 tor -- remote DoS and loss of anonymity
2004-10-13 icecast -- Cross-Site Scripting Vulnerability
2004-10-13 icecast -- HTTP header overflow
2004-10-13 freeradius -- denial-of-service vulnerability
2004-10-13 xerces-c2 -- Attribute blowup denial-of-service
2004-10-13 wordpress -- XSS in administration panel
2004-10-13 tiff -- multiple integer overflows
2004-10-13 CUPS -- local information disclosure
2004-10-13 tiff -- RLE decoder heap overflows
2004-10-13 sharutils -- buffer overflows
2004-10-12 zinf -- potential buffer overflow playlist support
2004-10-12 mail-notification -- denial-of-service vulnerability
2004-10-12 squid -- SNMP module denial-of-service vulnerability
2004-10-12 cyrus-sasl -- potential buffer overflow in DIGEST-MD5 plugin
2004-10-08 cyrus-sasl -- dynamic library loading and set-user-ID applications
2004-10-05 imp3 -- XSS hole in the HTML viewer
2004-10-05 bmon -- unsafe set-user-ID application
2004-10-05 gnutls -- certificate chain verification DoS
2004-10-05 php -- php_variables memory disclosure
2004-10-05 xv -- exploitable buffer overflows
2004-10-04 getmail -- symlink vulnerability during maildir delivery
2004-10-04 Boundary checking errors in syscons
2004-10-03 racoon -- improper certificate handling
2004-10-03 distcc -- incorrect parsing of IP access control rules
2004-09-30 mozilla -- scripting vulnerabilities
2004-09-30 mozilla -- users may be lured into bypassing security dialogs
2004-09-30 mozilla -- hostname spoofing bug
2004-09-30 samba -- remote file disclosure
2004-09-28 mozilla -- BMP decoder vulnerabilities
2004-09-28 mozilla -- vCard stack buffer overflow
2004-09-28 mozilla -- multiple heap buffer overflows
2004-09-27 php -- strip_tags cross-site scripting vulnerability
2004-09-27 php -- memory_limit related vulnerability
2004-09-26 subversion -- WebDAV fails to protect metadata
2004-09-23 lha -- numerous vulnerabilities when extracting archives
2004-09-23 mysql -- heap buffer overflow with prepared statements
2004-09-22 mozilla -- security icon spoofing
2004-09-22 mozilla -- NULL bytes in FTP URLs
2004-09-22 mozilla -- automated file upload
2004-09-22 mozilla -- built-in CA certificates may be overridden
2004-09-21 rssh -- file name disclosure bug
2004-09-20 gnu-radius -- SNMP-related denial-of-service
2004-09-20 sudo -- sudoedit information disclosure
2004-09-19 apache -- heap overflow in mod_proxy
2004-09-15 php -- vulnerability in RFC 1867 file upload processing
2004-09-15 gdk-pixbuf -- image decoding vulnerabilities
2004-09-15 xpm -- image decoding vulnerabilities
2004-09-15 cups -- print queue browser denial-of-service
2004-09-15 apache -- apr_uri_parse IPv6 address handling vulnerability
2004-09-15 mod_dav -- lock related denial-of-service
2004-09-15 apache -- ap_resolve_env buffer overflow
2004-09-14 webmin -- insecure temporary file creation at installation time
2004-09-14 samba3 DoS attack
2004-09-14 mozilla -- POP client heap overflow
2004-09-14 mozilla -- SOAPParameter integer overflow
2004-09-14 openoffice -- document disclosure
2004-09-14 mpg123 buffer overflow
2004-09-03 vpopmail multiple vulnerabilities
2004-09-03 multiple vulnerabilities in LHA
2004-08-31 ImageMagick -- BMP decoder buffer overflow
2004-08-31 imlib -- BMP decoder heap buffer overflow
2004-08-31 krb5 -- double-free vulnerabilities
2004-08-31 krb5 -- ASN.1 decoder denial-of-service vulnerability
2004-08-31 imlib2 -- BMP decoder buffer overflow
2004-08-30 cdrtools local privilege escalation
2004-08-27 nss -- exploitable buffer overflow in SSLv2 protocol handler
2004-08-27 ripMIME -- decoding bug allowing content filter bypass
2004-08-26 moinmoin -- ACL group bypass
2004-08-26 rsync -- path sanitizing vulnerability
2004-08-26 gnomevfs -- unsafe URI handling
2004-08-26 SoX buffer overflows when handling .WAV files
2004-08-26 kdelibs -- konqueror cross-domain cookie injection
2004-08-23 SpamAssassin -- denial-of-service in tokenize_headers
2004-08-22 fidogate -- write files as `news' user
2004-08-22 qt -- image loader vulnerabilities
2004-08-22 courier-imap -- format string vulnerability in debug mode
2004-08-22 mysql -- mysqlhotcopy insecure temporary file creation
2004-08-20 Qt 3.x BMP heap-based overflow, GIF and XPM DoS NULL pointer dereference
2004-08-17 cvs -- numerous vulnerabilities
2004-08-17 tnftpd -- remotely exploitable vulnerability
2004-08-17 multiple vulnerabilities in the cvs server code
2004-08-16 squid -- NTLM authentication denial-of-service vulnerability
2004-08-16 Ruby insecure file permissions in the CGI session management
2004-08-16 ruby CGI::Session insecure file creation
2004-08-13 Arbitrary code execution via a format string vulnerability in jftpgw
2004-08-13 CVStrac remote code execution vulnerability
2004-08-13 jftpgw remote syslog format string vulnerability
2004-08-12 Mutiple browser frame injection vulnerability
2004-08-12 kdelibs insecure temporary file handling
2004-08-12 gaim remotely exploitable vulnerabilities in MSN component
2004-08-12 acroread uudecoder input validation error
2004-08-12 popfile file disclosure
2004-08-12 KDElibs temporary directory vulnerability
2004-08-12 DCOPServer Temporary Filename Vulnerability
2004-08-12 gaim remotely exploitable vulnerabilities in MSN component
2004-08-11 Konqueror frame injection vulnerability
2004-08-10 SpamAssassin DoS vulnerability
2004-08-04 libpng stack-based buffer overflow and other code concerns
2004-08-04 ImageMagick png vulnerability fix
2004-08-04 Acrobat Reader handling of malformed uuencoded pdf files
2004-08-04 libpng stack-based buffer overflow and other code concerns
2004-08-04 ImageMagick png and bmp vulnerabilities
2004-07-30 Mozilla / Firefox user interface spoofing vulnerability
2004-07-30 Mozilla certificate spoofing
2004-07-30 Mozilla / Firefox user interface spoofing vulnerability
2004-07-30 Mozilla certificate spoofing
2004-07-21 Multiple Potential Buffer Overruns in Samba
2004-07-21 Multiple Potential Buffer Overruns in Samba
2004-07-15 PHP memory_limit and strip_tags() vulnerabilities
2004-07-11 multiple vulnerabilities in ethereal
2004-07-11 multiple vulnerabilities in ethereal
2004-07-11 multiple vulnerabilities in ethereal
2004-07-11 multiple vulnerabilities in ethereal
2004-07-05 MySQL authentication bypass / buffer overflow
2004-07-05 Format string vulnerability in SSLtelnet
2004-07-05 "Content-Type" XSS vulnerability affecting other webmail systems
2004-07-05 MySQL authentication bypass / buffer overflow
2004-07-03 Pavuk HTTP Location header overflow
2004-07-03 Several vulnerabilities found in PHPNuke
2004-07-02 Remote code injection in phpMyAdmin
2004-07-02 GNATS local privilege elevation
2004-06-30 Linux binary compatibility mode input validation error
2004-06-30 SSLtelnet remote format string vulnerability
2004-06-28 XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0
2004-06-28 MoinMoin administrative group name privilege escalation vulnerability
2004-06-25 isc-dhcp3-server buffer overflow in logging mechanism
2004-06-25 Remote Denial of Service of HTTP server and client
2004-06-25 isc-dhcp3-server buffer overflow in logging mechanism
2004-06-24 Gallery 1.4.3 and ealier user authentication bypass
2004-06-09 Buffer overflow in Squid NTLM authentication helper
2004-06-07 jailed processes can manipulate host routing tables
2004-05-26 buffer cache invalidation implementation issues
2004-05-21 leafnode denial-of-service triggered by article request
2004-05-21 leafnode fetchnews denial-of-service triggered by missing header
2004-05-21 leafnode fetchnews denial-of-service triggered by truncated transmission
2004-05-19 neon date parsing vulnerability
2004-05-19 subversion date parsing vulnerability
2004-05-19 cvs pserver remote heap buffer overflow
2004-05-18 URI handler vulnerabilities in several browsers
2004-05-12 Cyrus IMAP pre-authentication heap overflow vulnerability
2004-05-12 Cyrus IMSPd multiple vulnerabilities
2004-05-06 exim buffer overflow when verify = header_syntax is used
2004-05-06 phpBB session table exhaustion
2004-05-05 heimdal kadmind remote heap buffer overflow
2004-05-02 libpng denial-of-service
2004-05-02 Midnight Commander buffer overflows, format string bugs, and insecure temporary file handling
2004-05-02 proftpd IP address access control list breakage
2004-05-02 lha buffer overflows and path traversal issues
2004-05-02 rsync path traversal issue
2004-05-02 xine-lib arbitrary file overwrite
2004-05-02 pound remotely exploitable vulnerability
2004-05-02 libpng denial-of-service
2004-04-23 xchat remotely exploitable buffer overflow (Socks5)
2004-04-23 phpBB IP address spoofing
2004-04-23 TCP denial-of-service attacks against long lived connections
2004-04-23 ident2 double byte buffer overflow
2004-04-16 MySQL insecure temporary file creation (mysqlbug)
2004-04-15 neon format string vulnerabilities
2004-04-15 kdepim exploitable buffer overflow in VCF reader
2004-04-14 CVS path validation errors
2004-04-14 racoon remote denial of service vulnerability (ISAKMP header length field)
2004-04-07 mksnap_ffs clears file system options
2004-04-07 shmat reference counting bug
2004-04-07 jailed processes can attach to other jails
2004-04-07 many out-of-sequence TCP packets denial-of-service
2004-04-07 racoon remote denial of service vulnerability (IKE Generic Payload Header)
2004-04-07 racoon fails to verify signature during Phase 1
2004-04-03 Midnight Commander buffer overflow during symlink resolution
2004-04-02 Incorrect cross-realm trust handling in Heimdal
2004-03-31 isakmpd payload handling denial-of-service vulnerabilities
2004-03-31 Courier mail services: remotely exploitable buffer overflows
2004-03-31 mplayer heap overflow in http requests
2004-03-31 tcpdump ISAKMP payload handling remote denial-of-service
2004-03-30 MPlayer remotely exploitable buffer overflow in the ASX parser
2004-03-30 MPlayer remotely exploitable buffer overflow in the HTTP parser
2004-03-29 ecartis buffer overflows and input validation bugs
2004-03-29 setsockopt(2) IPv6 sockets input validation error
2004-03-29 zebra/quagga denial of service vulnerability
2004-03-28 oftpd denial-of-service vulnerability (PORT command)
2004-03-28 Buffer overflows and format string bugs in Emil
2004-03-28 Critical SQL injection in phpBB
2004-03-26 multiple vulnerabilities in ethereal
2004-03-26 insecure temporary file creation in xine-check, xine-bugreport
2004-03-26 squid ACL bypass due to URL decoding bug
2004-03-26 multiple vulnerabilities in phpBB
2004-03-26 ezbounce remote format string vulnerability
2004-03-25 racoon security association deletion vulnerability
2004-03-18 uudeview buffer overflows
2004-03-17 ModSecurity for Apache 2.x remote off-by-one overflow
2004-03-17 OpenSSL ChangeCipherSpec denial-of-service vulnerability
2004-03-08 Apache 2 mod_ssl denial-of-service
2004-03-08 wu-ftpd ftpaccess `restricted-uid'/`restricted-gid' directive may be bypassed
2004-03-08 Apache 1.3 IP address access control failure on some 64-bit platforms
2004-03-07 mpg123 vulnerabilities
2004-03-06 GNU Anubis buffer overflows and format string vulnerabilities
2004-03-05 multiple buffer overflows in xboing
2004-03-03 mod_python denial-of-service vulnerability in parse_qs
2004-02-25 fetchmail denial-of-service vulnerability
2004-02-25 mailman denial-of-service vulnerability in MailCommandHandler
2004-02-25 mailman XSS in admin script
2004-02-25 mailman XSS in create script
2004-02-25 mailman XSS in user options page
2004-02-25 SQL injection vulnerability in phpnuke
2004-02-25 lbreakout2 vulnerability in environment variable handling
2004-02-25 hsftp format string vulnerabilities
2004-02-25 Darwin Streaming Server denial-of-service vulnerability
2004-02-25 libxml2 stack buffer overflow in URI parsing
2004-02-22 Vulnerabilities in H.323 implementations
2004-02-22 file disclosure in phpMyAdmin
2004-02-18 metamail format string bugs and buffer overflows
2004-02-15 mnGoSearch buffer overflow in UdmDocToTextBuf()
2004-02-13 GNU libtool insecure temporary file handling
2004-02-12 clamav remote denial-of-service
2004-02-12 Several remotely exploitable buffer overflows in gaim
2004-02-12 Buffer overflows in XFree86 servers
2004-02-12 seti@home remotely exploitable buffer overflow
2004-02-12 icecast 1.x multiple vulnerabilities
2004-02-12 nap allows arbitrary file access
2004-02-12 CCE contains exploitable buffer overflows
2004-02-12 ChiTeX/ChiLaTeX unsafe set-user-id root
2004-02-12 pine remotely exploitable buffer overflow in newmail.c
2004-02-12 pine insecure URL handling
2004-02-12 pine remote denial-of-service attack
2004-02-12 pine remotely exploitable vulnerabilities
2004-02-12 rsync buffer overflow in server mode
2004-02-12 Samba 3.0.x password initialization bug
2004-02-12 Buffer overflow in Mutt 1.4
2004-02-10 Apache-SSL optional client certificate vulnerability
2004-01-19 fsp buffer overflow and directory traversal vulnerabilities
2004-01-19 L2TP, ISAKMP, and RADIUS parsing vulnerabilities in tcpdump
2004-01-08 Buffer overflow in INN control message handling
2004-01-05 ProFTPD ASCII translation bug resulting in remote root compromise
2003-12-12 bind8 negative cache poison attack
2003-12-12 ElGamal sign+encrypt keys created by GnuPG can be compromised
2003-12-12 Mathopd buffer overflow
2003-12-12 lftp HTML parsing vulnerability
2003-12-12 qpopper format string vulnerability
2003-10-25 Fetchmail address parsing vulnerability
2003-10-25 Buffer overflow in pam_smb password handling
2003-10-25 Buffer overflows in libmcrypt
2000-00-00 Mozilla / NSS S/MIME DoS vulnerability
2000-00-00 DBMail: remote exploitable buffer overflow
2000-00-00 phpGroupWare stores passwords in plain text
2000-00-00 Dropbear DSS verification vulnerability
2000-00-00 ISC DHCPD minires library contains multiple buffer overflows
2000-00-00 a2ps: Possible execution of shell commands as local user
2000-00-00 pavuk digest auth buffer overflow
2000-00-00 Sqwebmail XSS vulnerability
2000-00-00 Sympa unauthorized list creation
2000-00-00 GnuTLS certificate chain verification DoS
2000-00-00 phpMyAdmin configuration manipulation and code injection
2000-00-00 xine-lib RTSP handling vulnerabilities
2000-00-00 Possible information leak in multi-gnome-terminal
2000-00-00 Pure-FTPd DoS when maximum number of connections is reached
2000-00-00 super format string vulnerability
2000-00-00 Horde: two XSS vulnerabilities can be exposed by making an authenticated user click on a specially crafted URL and allows to execute JavaScript code in the context of Horde.
2000-00-00 Multiple integer overflow and integer arithmetic flaws in imported xpdf code
2000-00-00 Vulnerability in star versions that support ssh for remote tape access
2000-00-00 XSS hole in the HTML viewer - This vulnerability only exists when using the Internet Explorer to access IMP and only when using the inline MIME viewer for HTML messages.
2000-00-00 multiple vulnerabilities in Bugzilla
2000-00-00 XSS hole in the HTML viewer - The script vulnerabilities can only be exposed with certain browsers and allow XSS attacks when viewing HTML messages with the HTML MIME viewer.
2000-00-00 multiple vulnerabilities in gaim
2000-00-00 Opera "location" object write access vulnerability
2000-00-00 Buffer overflow in word-list-compress
2000-00-00 subversion: remote exploitable buffer overflow in 'svn://' parser
2000-00-00 rssh file existence information disclosure weakness
2000-00-00 SquirrelMail XSS vulnerability
2000-00-00 Nessus "adduser" race condition vulnerability
2000-00-00 mod_authz_svn access control bypass
2000-00-00 chora: hole in the diff code that allowed malicious input
2000-00-00 cfengine authentication heap corruption
2000-00-00 phpGedView: muliple vulnerabilities
2000-00-00 MIT Kerberos 5 krb5_aname_to_localname() buffer overflow
2000-00-00 Roundup remote file disclosure vulnerability
2000-00-00 ircd-hybrid-7 low-bandwidth DoS
2000-00-00 phpGroupWare calendar and infolog SQL injection, calendar server side script execution
2000-00-00 libpng row buffer overflow
2000-00-00 Gallery arbitrary PHP file upload
2000-00-00 Icecast remote DoS vulnerability
2000-00-00 Apache input header folding DoS vulnerability
2000-00-00 CMU SUP logging format string vulnerabilities
2000-00-00 mailman allows 3rd parties to retrieve member passwords
2000-00-00 mod_proxy buffer overflow (CAN-2004-0492)
2000-00-00 phpBB cross site scripting vulnerabilities
2000-00-00 Racoon may validate invalid certificates
2000-00-00 mpg123 layer 2 decoder buffer overflow
2000-00-00 samba printer change notification request DoS
2000-00-00 multiple buffer overflows in xv
2000-00-00 LCDProc buffer overflow/format string vulnerabilities
2000-00-00 BNBT Authorization Header DoS
2000-00-00 isakmpd security association deletion vulnerability
2000-00-00 rlpr "msg()" buffer overflow and format string vulnerabilities
2000-00-00 ISC "dhcrelay" fails to limit hop count when malicious bootp packet is received
2000-00-00 modified server can execute commands on the client
2000-00-00 zlib DoS vulnerability
2000-00-00 Squid NTLM authentication helper DoS
2000-00-00 l2tpd BSS-based buffer overflow
2000-00-00 mod_ssl stack-based buffer overflow
2000-00-00 Multiple integer overflow and integer arithmetic flaws in imported xpdf code
2000-00-00 Multiple vulnerabilities in Webmin
2000-00-00 imp: XSS hole exploited via the Content-type header of malicious emails
2000-00-00 potential security flaws in mod_ssl
2000-00-00 wv library datetime field buffer overflow
2000-00-00 Scorched 3D server chat box format string vulnerability
2000-00-00 Usermin remote shell command injection and insecure installation vulnerability
2000-00-00 XSS vulnerability in phpGroupWare wiki module
2000-00-00 DansGuardian banned extension filter bypass vulnerability
2000-00-00 mod_ssl format string vulnerability
2000-00-00 smtpproxy: remotely exploitable format string vulnerability

[Sorted by package name]

Disclaimer: The data contained on this page is derived from the VuXML document, please refer to the the original document for copyright information. The author of portaudit makes no claim of authorship or ownership of any of the information contained herein.

If you have found a vulnerability in a FreeBSD port not listed in the database, please contact the FreeBSD Security Officer. Refer to "FreeBSD Security Information" for more information.

Oliver Eikemeier <eik@FreeBSD.org>