CERT Bulgaria - Alerts

Alerts

These are technical alerts for recent vulnerabilities in the IT Systems. Ways to protect against them are described in details.

Alerts

SA-2011-080

(09.08.2011)

Microsoft Windows TCP/IP Stack Denial of Service Vulnerabilities

medium

SA-2011-079

(09.08.2011)

Microsoft .NET Framework Socket Restriction Bypass Vulnerability

medium

SA-2011-078

(09.08.2011)

Microsoft Windows Remote Desktop Protocol Denial of Service Vulnerability

medium

SA-2011-077

(09.08.2011)

Microsoft Windows DNS Service Two Vulnerabilities

high

SA-2011-076

(05.08.2011)

Fedora update for phpMyAdmin

high

SA-2011-075

(04.08.2011)

Apple QuickTime Multiple Vulnerabilities

high

SA-2011-074

(26.07.2011)

Joomla! AlphaRegistration Component "email" and "couponcode" SQL Injection Vulnerabilities

medium

SA-2011-073

(21.07.2011)

Foxit Reader ActiveX Control Buffer Overflow and Insecure Library Loading Vulnerabilities

high

SA-2011-072

(20.07.2011)

Oracle Solaris Multiple Vulnerabilities

high

SA-2011-071

(20.07.2011)

Oracle JRockit Multiple Vulnerabilities

high

SA-2011-070

(20.07.2011)

Oracle Secure Backup Multiple Vulnerabilities

medium

SA-2011-069

(18.07.2011)

Fedora update for phpMyAdmin

high

SA-2011-068

(12.07.2011)

Microsoft Windows win32k.sys Driver Multiple Vulnerabilities

low

SA-2011-067

(11.07.2011)

Sun Java JRE Insecure Executable Loading Vulnerability

high

SA-2011-066

(21.06.2011)

Mozilla Firefox / Thunderbird Multiple Vulnerabilities

high

SA-2011-065

(17.06.2011)

Microsoft Word Insufficient Pointer Validation Vulnerability

high

SA-2011-064

(17.06.2011)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2011-063

(15.06.2011)

Adobe Flash Player Unspecified Memory Corruption Vulnerability

high

SA-2011-062

(15.06.2011)

Adobe Reader / Acrobat Multiple Vulnerabilities

high

SA-2011-061

(15.06.2011)

Google Chrome Flash Player Unspecified Memory Corruption Vulnerability

high

SA-2011-060

(15.06.2011)

Microsoft .NET Framework JIT Object Validation Vulnerability

high

SA-2011-059

(15.06.2011)

Microsoft Internet Explorer Multiple Vulnerabilities

high

SA-2011-058

(14.06.2011)

Microsoft Windows Distributed File System Two Vulnerabilities

high

SA-2011-057

(15.06.2011)

Microsoft Threat Management Gateway Firewall Client Vulnerability

high

SA-2011-056

(14.06.2011)

Microsoft .NET Framework / Silverlight Array Offset Vulnerability

high

SA-2011-055

(14.06.2011)

Microsoft Office Excel Unspecified Record Parsing Vulnerability

high

SA-2011-054

(14.06.2011)

Microsoft Office Excel Multiple Vulnerabilities

high

SA-2011-053

(08.06.2011)

Sun Java JDK / JRE / SDK Multiple Vulnerabilities

high

SA-2011-052

(08.06.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-051

(06.06.2011)

Adobe Flash Player Unspecified Cross-Site Scripting Vulnerability

high

SA-2011-050

(29.04.2011)

Data Dynamics ActiveBar ActiveX Control "SetLayoutData()" Vulnerability

high

SA-2011-049

(29.04.2011)

Mozilla Thunderbird Multiple Vulnerabilities

high

SA-2011-048

(29.04.2011)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2011-047

(29.04.2011)

Mozilla Firefox / SeaMonkey Multiple Vulnerabilities

high

SA-2011-046

(28.04.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-045

(21.04.2011)

HP Systems Insight Manager Multiple Vulnerabilities

high

SA-2011-044

(12.04.2011)

Microsoft Windows Messenger ActiveX Control Unspecified Vulnerability

high

SA-2011-043

(12.04.2011)

Microsoft Internet Explorer Multiple Vulnerabilities

high

SA-2011-042

(12.04.2011)

Microsoft Windows JScript and VBScript Integer Overflow Vulnerability

high

SA-2011-041

(12.04.2011)

Microsoft Windows DNS LLMNR Query Processing Vulnerability

medium

SA-2011-040

(12.04.2011)

Microsoft Office Two Vulnerabilities

high

SA-2011-039

(12.04.2011)

Microsoft Windows OpenType Compact Font Format Driver Vulnerability

high

SA-2011-038

(12.04.2011)

Microsoft Excel Multiple Vulnerabilities

high

SA-2011-037

(12.04.2011)

Microsoft Windows win32k.sys Driver Privilege Escalation Vulnerabilities

low

SA-2011-036

(12.04.2011)

Microsoft Windows/Office GDI+ Integer Overflow Vulnerability

high

SA-2011-035

(12.04.2011)

Microsoft .NET Framework JIT Compiler Stack Corruption Vulnerability

high

SA-2011-034

(12.04.2011)

Microsoft Windows Wordpad Word 97 Converter Vulnerabilities

high

SA-2011-033

(12.04.2011)

Microsoft PowerPoint Three Vulnerabilities

high

SA-2011-032

(12.04.2011)

Microsoft Windows SMB Transaction Parsing Vulnerability

medium

SA-2011-031

(12.04.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-030

(12.04.2011)

Adobe Reader/Acrobat authplay.dll Code Execution Vulnerability

high

SA-2011-029

(12.04.2011)

Adobe Flash Player SharedObject Type Confusion Vulnerability

high

SA-2011-028

(15.03.2011)

Google Chrome Flash Player Unspecified Code Execution Vulnerability

high

SA-2011-027

(15.03.2011)

Adobe Flash Player / AIR AVM2 Instruction Sequence Handling Vulnerability

high

SA-2011-026

(14.03.2011)

Google Chrome Style Handling Memory Corruption Vulnerability

high

SA-2011-025

(09.03.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-024

(08.03.2011)

Microsoft Windows DirectShow/Windows Media Two Vulnerabilities

high

SA-2011-023

(08.03.2011)

Microsoft Windows Remote Desktop Client Insecure Library Loading Vulnerability

high

SA-2011-022

(02.03.2011)

Mozilla Firefox / SeaMonkey Multiple Vulnerabilities

high

SA-2011-021

(01.03.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-020

(24.02.2011)

Microsoft Products Malware Protection Engine Privilege Escalation

low

SA-2011-019

(15.02.2011)

Microsoft Windows SMB Browser Election Request Parsing Vulnerability

medium

SA-2011-018

(09.02.2011)

Sun Java JDK / JRE / SDK "doubleValue()" Denial of Service Vulnerability

medium

SA-2011-017

(09.02.2011)

Adobe Reader / Acrobat Multiple Vulnerabilities

high

SA-2011-016

(09.02.2011)

Adobe Flash Player Multiple Vulnerabilities

high

SA-2011-015

(08.02.2011)

Microsoft Windows OpenType Compact Font Format Driver Vulnerability

high

SA-2011-014

(08.02.2011)

Microsoft Visio Two Memory Corruption Vulnerabilities

high

SA-2011-013

(08.02.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-012

(08.02.2011)

Microsoft Office Excel OfficeArt Container Parsing Vulnerability

high

SA-2011-011

(08.02.2011)

Microsoft Office Excel Axis Properties Record Parsing Buffer Overflow

high

SA-2011-010

(08.02.2011)

Microsoft Office Excel Shape Data Parsing Use-After-Free Vulnerability

high

SA-2011-009

(08.02.2011)

Microsoft Office Excel Invalid Object Type Vulnerability

high

SA-2011-008

(08.02.2011)

Microsoft Office PowerPoint OfficeArt Container Parsing Vulnerability

high

SA-2011-007

(04.02.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-006

(29.01.2011)

Microsoft Windows MHTML Cross-Site Scripting Vulnerability

low

SA-2011-005

(26.01.2011)

Opera Multiple Vulnerabilities

high

SA-2011-004

(17.01.2011)

Cisco ASA 5500 Series Multiple Vulnerabilities

medium

SA-2011-003

(13.01.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-002

(11.01.2011)

Microsoft Data Access Components Two Vulnerabilities

high

SA-2011-001

(05.01.2011)

Microsoft Windows Thumbnail Bitmap Parsing Buffer Overflow

high

SA-2010-105

(27.12.2010)

Microsoft Windows Fax Cover Page Editor Buffer Overflow Vulnerability

high

SA-2010-104

(22.12.2010)

Microsoft IIS FTP Server Telnet IAC Character Encoding Vulnerability

high

SA-2010-103

(22.12.2010)

Microsoft WMI Administrative Tools WMI Object Viewer ActiveX Control Vulnerabilities

high

SA-2010-102

(16.12.2010)

Opera Multiple Vulnerabilities

medium

SA-2010-101

(16.12.2010)

Symantec Endpoint Protection Manager "fw_charts.php" Code Execution Vulnerability

medium

SA-2010-100

(14.12.2010)

Microsoft Windows Internet Connection Signup Wizard Insecure Library Loading Vulnerability

medium

SA-2010-099

(14.12.2010)

Microsoft Office Publisher Multiple Vulnerabilities

high

SA-2010-098

(14.12.2010)

Microsoft Windows BranchCache Insecure Library Loading Vulnerability

high

SA-2010-097

(14.12.2010)

Microsoft Windows OpenType Font Driver Three Vulnerabilities

high

SA-2010-096

(14.12.2010)

Internet Explorer CSS Import Rule Processing Memory Corruption Vulnerability

high

SA-2010-095

(10.12.2010)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2010-094

(03.12.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-093

(10.11.2010)

Adobe Flash Media Server Multiple Vulnerabilities

high

SA-2010-092

(09.11.2010)

Microsoft Office Multiple Vulnerabilities

high

SA-2010-091

(09.11.2010)

Microsoft Office PowerPoint Two Vulnerabilities

high

SA-2010-090

(04.11.2010)

Adobe Reader "Doc.printSeps()" Memory Corruption Vulnerability

high

SA-2010-089

(04.11.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-088

(03.11.2010)

Internet Explorer CSS Tag Parsing Code Execution Vulnerability

high

SA-2010-087

(28.10.2010)

Adobe Reader / Acrobat Unspecified Code Execution Vulnerability

high

SA-2010-086

(28.10.2010)

Adobe Flash Player Unspecified Code Execution Vulnerability

high

SA-2010-085

(27.10.2010)

Mozilla Firefox / SeaMonkey "document.write()" and DOM Insertion Vulnerability

high

SA-2010-084

(20.10.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-083

(20.10.2010)

Mozilla Thunderbird Multiple Vulnerabilities

high

SA-2010-082

(18.10.2010)

Windows Server 2008 Color Control Panel Insecure Library Loading Vulnerability

high

SA-2010-081

(13.10.2010)

Sun Java JDK / JRE / SDK Multiple Vulnerabilities

high

SA-2010-080

(12.10.2010)

Microsoft Office Excel Multiple Vulnerabilities

high

SA-2010-079

(12.10.2010)

Microsoft Windows Embedded OpenType Font Parsing Integer Overflow

high

SA-2010-078

(12.10.2010)

Microsoft .NET Framework JIT Compiler Vulnerability

high

SA-2010-077

(12.10.2010)

Microsoft Windows Shell/WordPad COM Validation Vulnerability

high

SA-2010-076

(12.10.2010)

Microsoft Office Word 2003 / Word Viewer Two Vulnerabilities

high

SA-2010-075

(12.10.2010)

Microsoft Office Word Buffer Overflow Vulnerability

high

SA-2010-074

(12.10.2010)

Microsoft Office XP Word Multiple Vulnerabilities

high

SA-2010-073

(12.10.2010)

Microsoft Windows Common Control Library Integer Truncation Vulnerability

high

SA-2010-072

(12.10.2010)

Microsoft Windows SChannel Client Certificate Request Denial of Service

medium

SA-2010-071

(12.10.2010)

Opera Multiple Vulnerabilities

high

SA-2010-070

(08.10.2010)

Microsoft Windows LPC Message Handling Buffer Overflow Vulnerability

low

SA-2010-069

(06.10.2010)

Foxit Reader Title Parsing Buffer Overflow Vulnerability

high

SA-2010-068

(04.10.2010)

MySQL Multiple Vulnerabilities

low

SA-2010-067

(14.09.2010)

Microsoft Exchange Server Outlook Web Access Cross-Site Request Forgery

low

SA-2010-066

(14.09.2010)

Microsoft Outlook Content Parsing Integer Underflow Vulnerability

high

SA-2010-065

(14.09.2010)

Microsoft Windows Client/Server Runtime Subsystem Privilege Escalation

low

SA-2010-064

(14.09.2010)

Microsoft Windows Print Spooler Service Insufficient User Permission Restrictions

high

SA-2010-063

(14.09.2010)

Microsoft Windows LSASS Implementation Buffer Overflow Vulnerability

medium

SA-2010-062

(14.09.2010)

Microsoft Products Unicode Scripts Processor Memory Corruption Vulnerability

high

SA-2010-061

(14.09.2010)

Microsoft Windows MPEG-4 Codec Content Parsing Vulnerability

high

SA-2010-060

(14.09.2010)

Microsoft Windows RPC Response Processing Vulnerability

medium

SA-2010-059

(14.09.2010)

Microsoft Windows WordPad Text Converters Document Parsing Vulnerability

high

SA-2010-058

(14.09.2010)

Microsoft IIS Repeated Parameter Request Denial of Service

medium

SA-2010-057

(14.09.2010)

Microsoft IIS FastCGI Request Header Buffer Overflow Vulnerability

high

SA-2010-056

(14.09.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-055

(14.09.2010)

Adobe Flash Player Unspecified Code Execution Vulnerability

high

SA-2010-054

(13.09.2010)

Microsoft Visual C++ Redistributable Insecure Library Loading Vulnerability

high

SA-2010-053

(08.09.2010)

Adobe Reader / Acrobat Font Parsing Buffer Overflow Vulnerability

high

SA-2010-052

(08.09.2010)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2010-051

(06.09.2010)

Internet Explorer Cross-Origin CSS Style Sheet Handling Vulnerability

low

SA-2010-050

(02.09.2010)

Microsoft Windows SDK for Windows 7 and .NET Framework 4 GraphEdit Insecure Library Loading Vulnerability

high

SA-2010-049

(11.08.2010)

Adobe Flash Player Multiple Vulnerabilities

high

SA-2010-048

(10.08.2010)

Microsoft Windows Cinepak Codec Decompression Vulnerability

high

SA-2010-047

(10.08.2010)

Microsoft Office Word Multiple Vulnerabilities

high

SA-2010-046

(10.08.2010)

Windows TCP/IP Implementation Denial of Service and Privilege Escalation

medium

SA-2010-045

(10.08.2010)

Microsoft Internet Explorer Multiple Vulnerabilities

high

SA-2010-044

(10.08.2010)

Microsoft XML Core Services Invalid HTTP Response Handling Vulnerability

high

SA-2010-043

(10.08.2010)

Microsoft Windows SChannel Two Vulnerabilities

high

SA-2010-042

(10.08.2010)

Microsoft .NET Framework / Silverlight Code Execution Vulnerabilities

high

SA-2010-041

(10.08.2010)

Microsoft Office Excel SXDB Record Parsing Buffer Overflow

high

SA-2010-040

(06.08.2010)

Microsoft Windows win32k.sys Driver "CreateDIBPalette()" Buffer Overflow

low

SA-2010-039

(05.08.2010)

Cisco ASA 5500 Series Multiple Denial of Service Vulnerabilities

medium

SA-2010-038

(26.07.2010)

QuickTime Player Streaming Debug Error Logging Buffer Overflow

high

SA-2010-037

(26.07.2010)

Mozilla Firefox Plugin Parameter Array Dangling Pointer Vulnerability

high

SA-2010-036

(21.07.2010)

Mozilla Thunderbird Multiple Vulnerabilities

high

SA-2010-035

(20.07.2010)

Microsoft DirectX DirectPlay Denial of Service Vulnerabilities

medium

SA-2010-034

(17.07.2010)

Microsoft Windows Shell Shortcut Parsing Vulnerability

high

SA-2010-033

(13.07.2010)

Microsoft Office Access ActiveX Controls Two Vulnerabilities

high

SA-2010-032

(13.07.2010)

Microsoft Office Outlook Linked Attachment Verification Vulnerability

high

SA-2010-031

(05.07.2010)

Microsoft Windows MFC Document Title Updating Buffer Overflow

medium

SA-2010-030

(05.07.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-029

(02.07.2010)

Microsoft Internet Information Services Basic Authentication Security Bypass

medium

SA-2010-028

(23.06.2010)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2010-027

(08.06.2010)

Microsoft Windows Media Decompression Two Vulnerabilities

high

SA-2010-026

(08.06.2010)

Microsoft Office Excel Multiple Vulnerabilities

high

SA-2010-025

(08.06.2010)

Microsoft Data Analyzer ActiveX Control Vulnerability

high

SA-2010-024

(08.06.2010)

Microsoft Internet Explorer Multiple Vulnerabilities

high

SA-2010-023

(11.05.2010)

Outlook Express / Windows Mail STAT Response Integer Overflow

low

SA-2010-022

(03.05.2010)

Adobe Photoshop CS4 TIFF File Processing Vulnerabilities

high

SA-2010-021

(30.04.2010)

Microsoft SharePoint Server / SharePoint Services "help.aspx" Cross-Site Scripting

low

SA-2010-020

(28.04.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-019

(27.04.2010)

Opera Content Writing Uninitialised Memory Vulnerability

high

SA-2010-018

(14.04.2010)

Adobe Reader / Acrobat Multiple Vulnerabilities

high

SA-2010-017

(13.04.2010)

Microsoft Windows Kernel Denial of Service Vulnerabilities

low

SA-2010-016

(13.04.2010)

Microsoft Windows MPEG Layer-3 Codecs Buffer Overflow

high

SA-2010-015

(09.03.2010)

Microsoft Office Excel Multiple Vulnerabilities

high

SA-2010-014

(09.03.2010)

Internet Explorer Unspecified Code Execution Vulnerability

high

SA-2010-011

(12.02.2010)

Adobe Products XML Processing Information Disclosure

medium

SA-2010-010

(11.02.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-009

(09.02.2010)

Microsoft DirectShow AVI File Parsing Buffer Overflow Vulnerability

high

SA-2010-008

(09.02.2010)

Microsoft Windows TCP/IP Implementation Vulnerabilities

medium

SA-2010-012

(18.02.2010)

Mozilla Firefox Unspecified Code Execution Vulnerability

high

SA-2010-013

(04.03.2010)

Opera "Content-Length" Processing Buffer Overflow Vulnerability

high

SA-2010-006

(09.02.2010)

Microsoft Windows "ShellExecute()" Input Validation Vulnerability

high

SA-2010-007

(09.02.2010)

Microsoft Data Analyzer ActiveX Control Vulnerability

high

SA-2010-005

(09.02.2010)

Microsoft Windows SMB Client Implementation Vulnerabilities

high

SA-2010-004

(09.02.2010)

Microsoft Office File Parsing Buffer Overflow Vulnerability

high

SA-2010-003

(09.02.2010)

Microsoft Office PowerPoint Multiple Vulnerabilities

high

SA-2010-002

(26.01.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-001

(15.01.2010)

Microsoft Internet Explorer Arbitrary Code Execution

high

SA-2009-108

(15.12.2009)

Adobe Reader/Acrobat "Doc.media.newPlayer()" Memory Corruption

high

SA-2009-107

(09.12.2009)

Adobe Flash Player Multiple Vulnerabilities

high

SA-2009-106

(08.12.2009)

Microsoft Windows Indeo Codec Multiple Vulnerabilities

high

SA-2009-105

(08.12.2009)

Microsoft Office Project Memory Validation Vulnerability

high

SA-2009-104

(08.12.2009)

Microsoft WordPad / Office Text Converters Memory Corruption Vulnerability

high

SA-2009-103

(08.12.2009)

Microsoft Windows Internet Authentication Service Vulnerability

high

SA-2009-102

(23.11.2009)

Internet Explorer Layout Handling Memory Corruption Vulnerability

high

SA-2009-101

(10.11.2009)

Microsoft Windows Win32k Kernel-Mode Driver Multiple Vulnerabilities

high

SA-2009-100

(10.11.2009)

Microsoft Excel Multiple Vulnerabilities

high

SA-2009-099

(10.11.2009)

Microsoft Office Word File Information Block Parsing Buffer Overflow

high

SA-2009-098

(14.10.2009)

Microsoft Products GDI+ Multiple Vulnerabilities

high

SA-2009-097

(09.20.2009)

Adobe Reader/Acrobat Arbitrary Code Execution Vulnerability

high

SA-2009-096

(10.09.2009)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2009-095

(08.09.2009)

Microsoft Windows Media Format Two Code Execution Vulnerabilities

high

SA-2009-094

(08.09.2009)

Microsoft Windows TCP/IP Implementation Multiple Vulnerabilities

high

SA-2009-093

(08.09.2009)

Microsoft Windows SMB Processing Array Indexing Vulnerability

medium

SA-2009-092

(04.09.2009)

Microsoft IIS FTP Server Recursive Listing Denial of Service

low

SA-2009-091

(11.08.2009)

Microsoft Remote Desktop Connection Two Vulnerabilities

high

SA-2009-090

(11.08.2009)

Microsoft Windows Telnet NTLM Credential Reflection Vulnerability

medium

SA-2009-089

(11.08.2009)

Microsoft Windows WINS Service Two Vulnerabilities

medium

SA-2009-088

(11.08.2009)

Microsoft Windows AVI Media File Parsing Vulnerabilities

high

SA-2009-087

(03.08.2009)

Mozilla Firefox Network Security Services Multiple Vulnerabilities

high

SA-2009-086

(23.07.2009)

Adobe Reader/Acrobat SWF Content Arbitrary Code Execution

high

SA-2009-085

(23.07.2009)

Adobe Flash Player Arbitrary Code Execution Vulnerability

high

SA-2009-084

(14.07.2009)

Microsoft ISA Server Security Bypass Vulnerability

medium

SA-2009-083

(14.07.2009)

Microsoft Office Publisher Pointer Dereference Vulnerability

high

SA-2009-082

(14.07.2009)

Windows Embedded OpenType Font Engine Two Vulnerabilities

high

SA-2009-081

(14.07.2009)

Mozilla Firefox Memory Corruption Vulnerability

high

SA-2009-080

(13.07.2009)

Microsoft Office Web Components Code Execution Vulnerability

high

SA-2009-079

(09.07.2009)

Adobe ColdFusion FCKeditor "CurrentFolder" Vulnerability

high

SA-2009-078

(06.07.2009)

Microsoft DirectShow MPEG2TuneRequest ActiveX Control Buffer Overflow

high

SA-2009-077

(01.07.2009)

VMware ESX Server update for krb5

high

SA-2009-076

(12.06.2009)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2009-075

(10.06.2009)

Microsoft PowerPoint Freelance Layout Parsing Vulnerability

medium

SA-2009-074

(10.06.2009)

Adobe Reader/Acrobat Multiple Vulnerabilities

high

SA-2009-073

(09.06.2009)

Apple Safari Multiple Vulnerabilities

high

SA-2009-072

(29.05.2009)

Microsoft DirectShow QuickTime Parsing Arbitrary Code Execution

high

SA-2009-071

(12.05.2009)

Microsoft PowerPoint Multiple Vulnerabilities

high

SA-2009-070

(29.04.2009)

Symantec Products Alert Management System 2 Multiple Vulnerabilities

medium

SA-2009-069

(28.04.2009)

Mozilla Firefox "nsTextFrame::ClearTextRun()" Memory Corruption

high

SA-2009-068

(22.04.2009)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2009-067

(16.04.2009)

Microsoft Whale IAG / Client Components ActiveX Control Buffer Overflows

high

SA-2009-066

(14.04.2009)

Microsoft Windows HTTP Services Multiple Vulnerabilities

high

SA-2009-065

(14.04.2009)

Microsoft Internet Explorer Multiple Vulnerabilities

high

SA-2009-064

(09.04.2009)

HP OpenView Performance Agent DynaZip Buffer Overflow Vulnerability

high

SA-2009-063

(09.04.2009)

Cisco ASA and PIX Multiple Vulnerabilities

medium

SA-2009-062

(03.04.2009)

PowerPoint Unspecified Code Execution Vulnerability

high

SA-2009-061

(01.04.2009)

VMware ESX Server Update for Multiple Packages

medium

SA-2009-060

(26.03.2009)

Cisco IOS Multiple Vulnerabilities

medium

SA-2009-059

(26.03.2009)

Windows 2008 / Windows Services for UNIX gzip Libraries Vulnerabilities

medium

SA-2009-058

(24.03.2009)

HP OpenView Network Node Manager Buffer Overflow Vulnerabilities

medium

SA-2009-057

(05.03.2009)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2009-056

(03.03.2009)

Opera Multiple Vulnerabilities

high

SA-2009-055

(03.03.2009)

Winamp libsndfile.dll CAF Processing Integer Overflow Vulnerability

high

SA-2009-054

(27.02.2009)

PHP Multiple Vulnerabilities

medium

SA-2009-053

(25.02.2009)

Adobe Flash Player Multiple Vulnerabilities

high

SA-2009-052

(24.02.2009)

VMware Multiple Products Tomcat Vulnerabilities

medium

SA-2009-051

(20.02.2009)

Adobe Reader/Acrobat Unspecified Buffer Overflow Vulnerability

high

SA-2009-050

(13.02.2009)

Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

high

SA-2009-049

(13.02.2009)

Mac OS X update for Java

high

SA-2009-048

(12.02.2009)

Trend Micro InterScan Web Security "Proxy-Authorization" Information Disclosure

low

SA-2009-047

(12.02.2009)

Becky! Internet Mail Read Receipt Request Vulnerability

high

SA-2009-046

(11.02.2009)

Sun Java System Directory Server Denial of Service

medium

SA-2009-045

(11.02.2009)

Auth PHP "username" SQL Injection Vulnerability

medium

SA-2009-044

(11.02.2009)

Netgear SSL312 Web Interface Denial of Service Vulnerability

low

SA-2009-043

(10.02.2009)

BlackBerry Application Web Loader ActiveX Control Buffer Overflow

high

SA-2009-042

(10.02.2009)

Exchange Server TNEF Decoding and MAPI Command Processing Vulnerabilities

high

SA-2009-041

(10.02.2009)

Microsoft Internet Explorer Two Code Execution Vulnerabilities

high

SA-2009-040

(10.02.2009)

Microsoft Office Visio Multiple Vulnerabilities

medium

SA-2009-039

(10.02.2009)

Debian update for gnutls13

medium

SA-2009-038

(10.02.2009)

Google Chrome URI Handler Registration Vulnerability

high

SA-2009-037

(10.02.2009)

RealPlayer IVR File Processing Two Vulnerabilities

medium

SA-2009-036

(09.02.2009)

HP OpenView Network Node Manager Multiple Vulnerabilities

medium

SA-2009-035

(06.02.2009)

HP OpenView Network Node Manager Arbitrary Code Execution

medium

SA-2009-034

(05.02.2009)

FeedDemon OPML Processing Buffer Overflow Vulnerability

high

SA-2009-033

(05.02.2009)

HP LaserJet / Digital Sender Directory Traversal Vulnerability

low

SA-2009-032

(05.02.2009)

Cisco Products Denial of Service and Security Bypass Vulnerabilities

low

SA-2009-031

(04.02.3009)

TightVNC "ClientConnection" Signedness Vulnerabilities

medium

SA-2009-030

(04.02.3009)

UltraVNC "ClientConnection" Signedness Vulnerabilities

medium

SA-2009-029

(04.02.2009)

Nokia PC Suite Multimedia Player Playlist Processing Buffer Overflow

high

SA-2009-028

(04.02.2009)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2009-027

(04.02.2009)

Mozilla SeaMonkey Multiple Vulnerabilities

high

SA-2009-026

(04.02.2009)

Mozilla Thunderbird Memory Corruption Vulnerabilities

high

SA-2009-025

(03.02.2009)

HP NonStop Server DNS Cache Poisoning Vulnerability

medium

SA-2009-024

(02.02.2009)

VMware ESX Server update for net-snmp and libxml2

high

SA-2009-023

(29.01.2009)

Sony Ericsson Phones WAP Push Denial of Service Vulnerability

medium

SA-2009-022

(29.01.2009)

HP MPE/iX DNS Cache Poisoning Vulnerability

medium

SA-2009-021

(28.01.2009)

CA Anti-Virus Engine Archive Files Detection Bypass

low

SA-2009-020

(27.01.2009)

Microsoft Windows Mobile Bluetooth Stack OBEX Directory Traversal

low

SA-2009-019

(22.01.2009)

Cisco Security Manager Security Bypass Vulnerability

medium

SA-2009-018

(22.01.2009)

Apple QuickTime MPEG-2 Playback Component Input Validation Vulnerability

high

SA-2009-017

(22.01.2009)

Apple QuickTime Multiple Vulnerabilities

high

SA-2009-016

(20.01.2009)

Trend Micro OfficeScan Client Firewall Multiple Vulnerabilities

low

SA-2009-015

(20.01.2009)

Trend Micro Internet Security Firewall Multiple Vulnerabilities

low

SA-2009-014

(20.01.2009)

Fujitsu SystemcastWizard Lite Multiple Vulnerabilities

medium

SA-2009-013

(16.01.2009)

Symantec AppStream Client LaunchObj ActiveX Control Insecure Methods

high

SA-2009-012

(16.01.2009)

Apple Safari RSS Feed URL Handling Information Disclosure

medium

SA-2009-011

(15.01.2009)

Cisco IronPort Products Multiple Vulnerabilities

medium

SA-2009-010

(13.01.2009)

BlackBerry Products PDF Distiller Multiple Vulnerabilities

high

SA-2009-009

(13.01.2009)

Winamp AIFF Processing Buffer Overflow Vulnerability

high

SA-2009-008

(13.01.2009)

WebSphere DataPower XML Security Gateway XS40 Denial of Service

medium

SA-2009-007

(12.01.2009)

Amarok Audible Audio Processing Multiple Vulnerabilities

high

SA-2009-006

(08.01.2009)

Cisco Global Site Selector DNS Request Denial of Service

medium

SA-2009-005

(08.01.2008)

Winamp gen_msn Plugin Buffer Overflow Vulnerability

high

SA-2009-004

(07.01.2009)

Cain & Abel Cisco IOS Configuration File Buffer Overflow

high

SA-2009-003

(06.01.2009)

PHPAuctions Multiple Vulnerabilities

medium

SA-2009-002

(06.01.2008)

VMware "vmware-authd" Denial of Service Vulnerability

low

SA-2009-001

(05.01.2009)

Destiny Media Player Playlist Processing Buffer Overflow

high

SA-2008-067

(26.12.2008)

BulletProof FTP Client Server Name Handling Buffer Overflow

medium

SA-2008-066

(22.12.2008)

Trend Micro HouseCall ActiveX Control Arbitrary Code Execution

high

SA-2008-065

(21.12.2008)

Trend Micro HouseCall ActiveX Control "notifyOnLoadNative()" Vulnerability

high

SA-2008-064

(19.12.2008)

Fujitsu-Siemens WebTransactions Command Injection Vulnerability

high

SA-2008-063

(19.12.2008)

BitDefender Antivirus Scanner for Unices PE File Parsing Integer Overflows

high

SA-2008-062

(19.12.2008)

Slackware update for mozilla-firefox

high

SA-2008-061

(17.12.2008)

Mozilla Firefox 2 Multiple Vulnerabilities

high

SA-2008-060

(17.12.2008)

Mozilla Firefox 3 Multiple Vulnerabilities

high

SA-2008-059

(17.12.2008)

Mozilla SeaMonkey Multiple Vulnerabilities

high

SA-2008-058

(17.12.2008)

Mozilla Thunderbird Multiple Vulnerabilities

high

SA-2008-057

(16.12.2008)

Realtek Media Player Playlist Processing Buffer Overflow

high

SA-2008-056

(16.12.2008)

Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

high

SA-2008-055

(15.12.2008)

Fedora update for roundcubemail

high

SA-2008-054

(12.12.2008)

IBM WebSphere Portal Unspecified Security Bypass Vulnerability

medium

SA-2008-053

(11.12.2008)

CA ARCserve Backup RPC "handle_t" Argument Vulnerability

medium

SA-2008-052

(10.12.2008)

Internet Explorer XML Processing Memory Corruption

high

SA-2008-051

(10.12.2008)

Microsoft Windows WordPad Text Converter Vulnerability

high

SA-2008-050

(10.12.2008)

Microsoft Visual Basic ActiveX Controls Multiple Vulnerabilities

high

SA-2008-049

(10.12.2008)

Microsoft Windows GDI Image Parsing Vulnerabilities

high

SA-2008-048

(10.12.2008)

Microsoft SQL Server 2000 "sp_replwritetovarbin()" Buffer Overflow

low

SA-2008-047

(10.12.2008)

Microsoft Office SharePoint Server Security Bypass Vulnerability

medium

SA-2008-046

(10.12.2008)

Microsoft Windows Explorer Search Handling Vulnerabilities

medium

SA-2008-045

(10.12.2008)

Microsoft Excel Multiple Vulnerabilities

high

SA-2008-044

(10.12.2008)

Microsoft Internet Explorer Multiple Vulnerabilities

high

SA-2008-043

(10.12.2008)

Microsoft Office Word Multiple Vulnerabilities

high

SA-2008-042

(08.12.2008)

Linksys WVC54GC Information Disclosure and ActiveX Control Buffer Overflow

high

SA-2008-041

(08.12.2008)

IBM WebSphere Application Server Multiple Vulnerabilities

low

SA-2008-040

(08.12.2008)

Fedora update for squirrelmail

high

SA-2008-039

(05.12.2008)

Novell Netware ApacheAdmin Console Security Bypass

low

SA-2008-038

(05.12.2008)

Red Hat update for java-1.5.0-sun / java-1.6.0-sun

high

SA-2008-037

(04.12.2008)

Sun Java JDK / JRE Multiple Vulnerabilities

high

SA-2008-036

(03.12.2008)

VMware ESX / ESXi Virtual Hardware Memory Corruption Vulnerability

low

SA-2008-035

(03.12.2008)

VMware ESX Server update for bzip2

low

SA-2008-034

(02.12.2008)

IBM Rational ClearQuest Multiple Vulnerabilities

low

SA-2008-033

(02.12.2008)

IBM Rational ClearCase Cross-Site Scripting Vulnerability

low

SA-2008-032

(02.12.2008)

ASP Portal "ASPPortal.mdb" Database Disclosure Security Issue

medium

SA-2008-031

(01.12.2008)

Microsoft Office Communications Server SIP INVITE Denial of Service

low

SA-2008-030

(01.12.2008)

PHP TV Portal "mid" SQL Injection Vulnerability

medium

SA-2008-029

(28.11.2008)

BlackBerry Desktop Software FlexNET Connect ActiveX Control Vulnerability

high

SA-2008-028

(27.11.2008)

Siemens C450IP / C475IP Denial of Service Vulnerability

medium

SA-2008-027

(27.11.2008)

Nero ShowTime M3U Processing Buffer Overflow Vulnerability

high

SA-2008-026

(26.11.2008)

SUSE Update for Mozilla Products

high

SA-2008-025

(26.11.2008)

HP Secure Web Server/Internet Express for Tru64 UNIX PHP Vulnerability

medium

SA-2008-024

(26.11.2008)

BullGuard Internet Security PDF Processing Memory Corruption

high

SA-2008-023

(25.11.2008)

IBM Tivoli Access Manager WebSEAL Denial of Service Vulnerability

medium

SA-2008-022

(25.11.2008)

Ubuntu update for openoffice.org

high

SA-2008-020

(24.11.2008)

Windows Vista "CreateIpForwardEntry2()" Memory Corruption Vulnerability

low

SA-2008-021

(24.11.2008)

ffdshow URL Processing Buffer Overflow Vulnerability

high

SA-2008-019

(24.11.2008)

Slackware update for mozilla-thunderbird

high

SA-2008-018

(24.11.2008)

Wireshark SMTP Processing Denial of Service Vulnerability

medium

SA-2008-017

(21.11.2008)

Apple iPhone / iPod touch Multiple Vulnerabilities

high

SA-2008-016

(21.11.2008)

Fedora update for thunderbird

high

SA-2008-015

(21.11.2008)

BitDefender Antivirus PDF Processing Memory Corruption Vulnerability

high

SA-2008-014

(20.11.2008)

Alex Multiple Products File Upload Vulnerability

high

SA-2008-013

(20.11.2008)

Symantec Backup Exec for Windows Servers Multiple Vulnerabilities

medium

SA-2008-012

(20.11.2008)

Red Hat update for thunderbird

high

SA-2008-011

(19.11.2008)

Ubuntu update for libxml2

high

SA-2008-010

(19.11.2008)

Ubuntu update for firefox, firefox-3.0, and xulrunner-1.9

high

SA-2008-009

(17.11.2008)

Sun Solaris socket Local Denial of Service

medium

SA-2008-008

(17.11.2008)

SUSE Update for Multiple Packages

medium

SA-2008-007

(06.11.2008)

Cisco IOS / CatOS VLAN Trunking Protocol Vulnerability

low

SA-2008-006

(04.09.2008)

FreeBSD ICMPv6 "Packet Too Big" MTU Denial of Service Vulnerability

medium

SA-2008-005

(04.09.2008)

Cisco ASA and PIX Security Appliances Multiple Vulnerabilities

medium

SA-2008-004

(04.09.2008)

Cisco Secure ACS EAP Packet Denial of Service

low

SA-2008-003

(2008.08.07)

CA Products Ingres Multiple Vulnerabilities

low

SA-2008-002

(2008.08.06)

Linux Kernel "snd_seq_oss_synth_make_info()" Information Disclosure

low

SA-2008-001

(2008.08.06)

Ingres Multiple Utility and Library Privilege Escalation Vulnerabilities

medium

Partnerships

CERT & CSIRT

Alerts