CERT Bulgaria - Security Alerts

Alerts and Warnings

On this page you could find a list of technical reports of recent vulnerabilities as well as alerts for cyber attacks on the IT systems. Useful security advices are provided on how to protect your systems against malicious attacks.

The list is divided into the following categories:

Warnings - Non-technical reports of recent vulnerabilities, viruses, and other important security information. Warnings are intended for end users who want to be informed about the latest security issues.

Alerts - Technical reports of recent vulnerabilities, viruses, and other important security information. Alerts are intended for system administrators, system and network security professionals.

Security Advices - Security advices are short security best practice documents for end users.

Alerts

SA-2011-080

(09.08.2011)

Microsoft Windows TCP/IP Stack Denial of Service Vulnerabilities

medium

SA-2011-079

(09.08.2011)

Microsoft .NET Framework Socket Restriction Bypass Vulnerability

medium

SA-2011-078

(09.08.2011)

Microsoft Windows Remote Desktop Protocol Denial of Service Vulnerability

medium

SA-2011-077

(09.08.2011)

Microsoft Windows DNS Service Two Vulnerabilities

high

SA-2011-076

(05.08.2011)

Fedora update for phpMyAdmin

high

SA-2011-075

(04.08.2011)

Apple QuickTime Multiple Vulnerabilities

high

SA-2011-074

(26.07.2011)

Joomla! AlphaRegistration Component "email" and "couponcode" SQL Injection Vulnerabilities

medium

SA-2011-073

(21.07.2011)

Foxit Reader ActiveX Control Buffer Overflow and Insecure Library Loading Vulnerabilities

high

SA-2011-072

(20.07.2011)

Oracle Solaris Multiple Vulnerabilities

high

SA-2011-071

(20.07.2011)

Oracle JRockit Multiple Vulnerabilities

high

SA-2011-070

(20.07.2011)

Oracle Secure Backup Multiple Vulnerabilities

medium

SA-2011-069

(18.07.2011)

Fedora update for phpMyAdmin

high

SA-2011-068

(12.07.2011)

Microsoft Windows win32k.sys Driver Multiple Vulnerabilities

low

SA-2011-067

(11.07.2011)

Sun Java JRE Insecure Executable Loading Vulnerability

high

SA-2011-066

(21.06.2011)

Mozilla Firefox / Thunderbird Multiple Vulnerabilities

high

SA-2011-065

(17.06.2011)

Microsoft Word Insufficient Pointer Validation Vulnerability

high

SA-2011-064

(17.06.2011)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2011-063

(15.06.2011)

Adobe Flash Player Unspecified Memory Corruption Vulnerability

high

SA-2011-062

(15.06.2011)

Adobe Reader / Acrobat Multiple Vulnerabilities

high

SA-2011-061

(15.06.2011)

Google Chrome Flash Player Unspecified Memory Corruption Vulnerability

high

SA-2011-060

(15.06.2011)

Microsoft .NET Framework JIT Object Validation Vulnerability

high

SA-2011-059

(15.06.2011)

Microsoft Internet Explorer Multiple Vulnerabilities

high

SA-2011-058

(14.06.2011)

Microsoft Windows Distributed File System Two Vulnerabilities

high

SA-2011-057

(15.06.2011)

Microsoft Threat Management Gateway Firewall Client Vulnerability

high

SA-2011-056

(14.06.2011)

Microsoft .NET Framework / Silverlight Array Offset Vulnerability

high

SA-2011-055

(14.06.2011)

Microsoft Office Excel Unspecified Record Parsing Vulnerability

high

SA-2011-054

(14.06.2011)

Microsoft Office Excel Multiple Vulnerabilities

high

SA-2011-053

(08.06.2011)

Sun Java JDK / JRE / SDK Multiple Vulnerabilities

high

SA-2011-052

(08.06.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-051

(06.06.2011)

Adobe Flash Player Unspecified Cross-Site Scripting Vulnerability

high

SA-2011-050

(29.04.2011)

Data Dynamics ActiveBar ActiveX Control "SetLayoutData()" Vulnerability

high

SA-2011-049

(29.04.2011)

Mozilla Thunderbird Multiple Vulnerabilities

high

SA-2011-048

(29.04.2011)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2011-047

(29.04.2011)

Mozilla Firefox / SeaMonkey Multiple Vulnerabilities

high

SA-2011-046

(28.04.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-045

(21.04.2011)

HP Systems Insight Manager Multiple Vulnerabilities

high

SA-2011-044

(12.04.2011)

Microsoft Windows Messenger ActiveX Control Unspecified Vulnerability

high

SA-2011-043

(12.04.2011)

Microsoft Internet Explorer Multiple Vulnerabilities

high

SA-2011-042

(12.04.2011)

Microsoft Windows JScript and VBScript Integer Overflow Vulnerability

high

SA-2011-041

(12.04.2011)

Microsoft Windows DNS LLMNR Query Processing Vulnerability

medium

SA-2011-040

(12.04.2011)

Microsoft Office Two Vulnerabilities

high

SA-2011-039

(12.04.2011)

Microsoft Windows OpenType Compact Font Format Driver Vulnerability

high

SA-2011-038

(12.04.2011)

Microsoft Excel Multiple Vulnerabilities

high

SA-2011-037

(12.04.2011)

Microsoft Windows win32k.sys Driver Privilege Escalation Vulnerabilities

low

SA-2011-036

(12.04.2011)

Microsoft Windows/Office GDI+ Integer Overflow Vulnerability

high

SA-2011-035

(12.04.2011)

Microsoft .NET Framework JIT Compiler Stack Corruption Vulnerability

high

SA-2011-034

(12.04.2011)

Microsoft Windows Wordpad Word 97 Converter Vulnerabilities

high

SA-2011-033

(12.04.2011)

Microsoft PowerPoint Three Vulnerabilities

high

SA-2011-032

(12.04.2011)

Microsoft Windows SMB Transaction Parsing Vulnerability

medium

SA-2011-031

(12.04.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-030

(12.04.2011)

Adobe Reader/Acrobat authplay.dll Code Execution Vulnerability

high

SA-2011-029

(12.04.2011)

Adobe Flash Player SharedObject Type Confusion Vulnerability

high

SA-2011-028

(15.03.2011)

Google Chrome Flash Player Unspecified Code Execution Vulnerability

high

SA-2011-027

(15.03.2011)

Adobe Flash Player / AIR AVM2 Instruction Sequence Handling Vulnerability

high

SA-2011-026

(14.03.2011)

Google Chrome Style Handling Memory Corruption Vulnerability

high

SA-2011-025

(09.03.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-024

(08.03.2011)

Microsoft Windows DirectShow/Windows Media Two Vulnerabilities

high

SA-2011-023

(08.03.2011)

Microsoft Windows Remote Desktop Client Insecure Library Loading Vulnerability

high

SA-2011-022

(02.03.2011)

Mozilla Firefox / SeaMonkey Multiple Vulnerabilities

high

SA-2011-021

(01.03.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-020

(24.02.2011)

Microsoft Products Malware Protection Engine Privilege Escalation

low

SA-2011-019

(15.02.2011)

Microsoft Windows SMB Browser Election Request Parsing Vulnerability

medium

SA-2011-018

(09.02.2011)

Sun Java JDK / JRE / SDK "doubleValue()" Denial of Service Vulnerability

medium

SA-2011-017

(09.02.2011)

Adobe Reader / Acrobat Multiple Vulnerabilities

high

SA-2011-016

(09.02.2011)

Adobe Flash Player Multiple Vulnerabilities

high

SA-2011-015

(08.02.2011)

Microsoft Windows OpenType Compact Font Format Driver Vulnerability

high

SA-2011-014

(08.02.2011)

Microsoft Visio Two Memory Corruption Vulnerabilities

high

SA-2011-013

(08.02.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-012

(08.02.2011)

Microsoft Office Excel OfficeArt Container Parsing Vulnerability

high

SA-2011-011

(08.02.2011)

Microsoft Office Excel Axis Properties Record Parsing Buffer Overflow

high

SA-2011-010

(08.02.2011)

Microsoft Office Excel Shape Data Parsing Use-After-Free Vulnerability

high

SA-2011-009

(08.02.2011)

Microsoft Office Excel Invalid Object Type Vulnerability

high

SA-2011-008

(08.02.2011)

Microsoft Office PowerPoint OfficeArt Container Parsing Vulnerability

high

SA-2011-007

(04.02.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-006

(29.01.2011)

Microsoft Windows MHTML Cross-Site Scripting Vulnerability

low

SA-2011-005

(26.01.2011)

Opera Multiple Vulnerabilities

high

SA-2011-004

(17.01.2011)

Cisco ASA 5500 Series Multiple Vulnerabilities

medium

SA-2011-003

(13.01.2011)

Google Chrome Multiple Vulnerabilities

high

SA-2011-002

(11.01.2011)

Microsoft Data Access Components Two Vulnerabilities

high

SA-2011-001

(05.01.2011)

Microsoft Windows Thumbnail Bitmap Parsing Buffer Overflow

high

SA-2010-105

(27.12.2010)

Microsoft Windows Fax Cover Page Editor Buffer Overflow Vulnerability

high

SA-2010-104

(22.12.2010)

Microsoft IIS FTP Server Telnet IAC Character Encoding Vulnerability

high

SA-2010-103

(22.12.2010)

Microsoft WMI Administrative Tools WMI Object Viewer ActiveX Control Vulnerabilities

high

SA-2010-102

(16.12.2010)

Opera Multiple Vulnerabilities

medium

SA-2010-101

(16.12.2010)

Symantec Endpoint Protection Manager "fw_charts.php" Code Execution Vulnerability

medium

SA-2010-100

(14.12.2010)

Microsoft Windows Internet Connection Signup Wizard Insecure Library Loading Vulnerability

medium

SA-2010-099

(14.12.2010)

Microsoft Office Publisher Multiple Vulnerabilities

high

SA-2010-098

(14.12.2010)

Microsoft Windows BranchCache Insecure Library Loading Vulnerability

high

SA-2010-097

(14.12.2010)

Microsoft Windows OpenType Font Driver Three Vulnerabilities

high

SA-2010-096

(14.12.2010)

Internet Explorer CSS Import Rule Processing Memory Corruption Vulnerability

high

SA-2010-095

(10.12.2010)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2010-094

(03.12.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-093

(10.11.2010)

Adobe Flash Media Server Multiple Vulnerabilities

high

SA-2010-092

(09.11.2010)

Microsoft Office Multiple Vulnerabilities

high

SA-2010-091

(09.11.2010)

Microsoft Office PowerPoint Two Vulnerabilities

high

SA-2010-090

(04.11.2010)

Adobe Reader "Doc.printSeps()" Memory Corruption Vulnerability

high

SA-2010-089

(04.11.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-088

(03.11.2010)

Internet Explorer CSS Tag Parsing Code Execution Vulnerability

high

SA-2010-087

(28.10.2010)

Adobe Reader / Acrobat Unspecified Code Execution Vulnerability

high

SA-2010-086

(28.10.2010)

Adobe Flash Player Unspecified Code Execution Vulnerability

high

SA-2010-085

(27.10.2010)

Mozilla Firefox / SeaMonkey "document.write()" and DOM Insertion Vulnerability

high

SA-2010-084

(20.10.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-083

(20.10.2010)

Mozilla Thunderbird Multiple Vulnerabilities

high

SA-2010-082

(18.10.2010)

Windows Server 2008 Color Control Panel Insecure Library Loading Vulnerability

high

SA-2010-081

(13.10.2010)

Sun Java JDK / JRE / SDK Multiple Vulnerabilities

high

SA-2010-080

(12.10.2010)

Microsoft Office Excel Multiple Vulnerabilities

high

SA-2010-079

(12.10.2010)

Microsoft Windows Embedded OpenType Font Parsing Integer Overflow

high

SA-2010-078

(12.10.2010)

Microsoft .NET Framework JIT Compiler Vulnerability

high

SA-2010-077

(12.10.2010)

Microsoft Windows Shell/WordPad COM Validation Vulnerability

high

SA-2010-076

(12.10.2010)

Microsoft Office Word 2003 / Word Viewer Two Vulnerabilities

high

SA-2010-075

(12.10.2010)

Microsoft Office Word Buffer Overflow Vulnerability

high

SA-2010-074

(12.10.2010)

Microsoft Office XP Word Multiple Vulnerabilities

high

SA-2010-073

(12.10.2010)

Microsoft Windows Common Control Library Integer Truncation Vulnerability

high

SA-2010-072

(12.10.2010)

Microsoft Windows SChannel Client Certificate Request Denial of Service

medium

SA-2010-071

(12.10.2010)

Opera Multiple Vulnerabilities

high

SA-2010-070

(08.10.2010)

Microsoft Windows LPC Message Handling Buffer Overflow Vulnerability

low

SA-2010-069

(06.10.2010)

Foxit Reader Title Parsing Buffer Overflow Vulnerability

high

SA-2010-068

(04.10.2010)

MySQL Multiple Vulnerabilities

low

SA-2010-067

(14.09.2010)

Microsoft Exchange Server Outlook Web Access Cross-Site Request Forgery

low

SA-2010-066

(14.09.2010)

Microsoft Outlook Content Parsing Integer Underflow Vulnerability

high

SA-2010-065

(14.09.2010)

Microsoft Windows Client/Server Runtime Subsystem Privilege Escalation

low

SA-2010-064

(14.09.2010)

Microsoft Windows Print Spooler Service Insufficient User Permission Restrictions

high

SA-2010-063

(14.09.2010)

Microsoft Windows LSASS Implementation Buffer Overflow Vulnerability

medium

SA-2010-062

(14.09.2010)

Microsoft Products Unicode Scripts Processor Memory Corruption Vulnerability

high

SA-2010-061

(14.09.2010)

Microsoft Windows MPEG-4 Codec Content Parsing Vulnerability

high

SA-2010-060

(14.09.2010)

Microsoft Windows RPC Response Processing Vulnerability

medium

SA-2010-059

(14.09.2010)

Microsoft Windows WordPad Text Converters Document Parsing Vulnerability

high

SA-2010-058

(14.09.2010)

Microsoft IIS Repeated Parameter Request Denial of Service

medium

SA-2010-057

(14.09.2010)

Microsoft IIS FastCGI Request Header Buffer Overflow Vulnerability

high

SA-2010-056

(14.09.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-055

(14.09.2010)

Adobe Flash Player Unspecified Code Execution Vulnerability

high

SA-2010-054

(13.09.2010)

Microsoft Visual C++ Redistributable Insecure Library Loading Vulnerability

high

SA-2010-053

(08.09.2010)

Adobe Reader / Acrobat Font Parsing Buffer Overflow Vulnerability

high

SA-2010-052

(08.09.2010)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2010-051

(06.09.2010)

Internet Explorer Cross-Origin CSS Style Sheet Handling Vulnerability

low

SA-2010-050

(02.09.2010)

Microsoft Windows SDK for Windows 7 and .NET Framework 4 GraphEdit Insecure Library Loading Vulnerability

high

SA-2010-049

(11.08.2010)

Adobe Flash Player Multiple Vulnerabilities

high

SA-2010-048

(10.08.2010)

Microsoft Windows Cinepak Codec Decompression Vulnerability

high

SA-2010-047

(10.08.2010)

Microsoft Office Word Multiple Vulnerabilities

high

SA-2010-046

(10.08.2010)

Windows TCP/IP Implementation Denial of Service and Privilege Escalation

medium

SA-2010-045

(10.08.2010)

Microsoft Internet Explorer Multiple Vulnerabilities

high

SA-2010-044

(10.08.2010)

Microsoft XML Core Services Invalid HTTP Response Handling Vulnerability

high

SA-2010-043

(10.08.2010)

Microsoft Windows SChannel Two Vulnerabilities

high

SA-2010-042

(10.08.2010)

Microsoft .NET Framework / Silverlight Code Execution Vulnerabilities

high

SA-2010-041

(10.08.2010)

Microsoft Office Excel SXDB Record Parsing Buffer Overflow

high

SA-2010-040

(06.08.2010)

Microsoft Windows win32k.sys Driver "CreateDIBPalette()" Buffer Overflow

low

SA-2010-039

(05.08.2010)

Cisco ASA 5500 Series Multiple Denial of Service Vulnerabilities

medium

SA-2010-038

(26.07.2010)

QuickTime Player Streaming Debug Error Logging Buffer Overflow

high

SA-2010-037

(26.07.2010)

Mozilla Firefox Plugin Parameter Array Dangling Pointer Vulnerability

high

SA-2010-036

(21.07.2010)

Mozilla Thunderbird Multiple Vulnerabilities

high

SA-2010-035

(20.07.2010)

Microsoft DirectX DirectPlay Denial of Service Vulnerabilities

medium

SA-2010-034

(17.07.2010)

Microsoft Windows Shell Shortcut Parsing Vulnerability

high

SA-2010-033

(13.07.2010)

Microsoft Office Access ActiveX Controls Two Vulnerabilities

high

SA-2010-032

(13.07.2010)

Microsoft Office Outlook Linked Attachment Verification Vulnerability

high

SA-2010-031

(05.07.2010)

Microsoft Windows MFC Document Title Updating Buffer Overflow

medium

SA-2010-030

(05.07.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-029

(02.07.2010)

Microsoft Internet Information Services Basic Authentication Security Bypass

medium

SA-2010-028

(23.06.2010)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2010-027

(08.06.2010)

Microsoft Windows Media Decompression Two Vulnerabilities

high

SA-2010-026

(08.06.2010)

Microsoft Office Excel Multiple Vulnerabilities

high

SA-2010-025

(08.06.2010)

Microsoft Data Analyzer ActiveX Control Vulnerability

high

SA-2010-024

(08.06.2010)

Microsoft Internet Explorer Multiple Vulnerabilities

high

SA-2010-023

(11.05.2010)

Outlook Express / Windows Mail STAT Response Integer Overflow

low

SA-2010-022

(03.05.2010)

Adobe Photoshop CS4 TIFF File Processing Vulnerabilities

high

SA-2010-021

(30.04.2010)

Microsoft SharePoint Server / SharePoint Services "help.aspx" Cross-Site Scripting

low

SA-2010-020

(28.04.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-019

(27.04.2010)

Opera Content Writing Uninitialised Memory Vulnerability

high

SA-2010-018

(14.04.2010)

Adobe Reader / Acrobat Multiple Vulnerabilities

high

SA-2010-017

(13.04.2010)

Microsoft Windows Kernel Denial of Service Vulnerabilities

low

SA-2010-016

(13.04.2010)

Microsoft Windows MPEG Layer-3 Codecs Buffer Overflow

high

SA-2010-015

(09.03.2010)

Microsoft Office Excel Multiple Vulnerabilities

high

SA-2010-014

(09.03.2010)

Internet Explorer Unspecified Code Execution Vulnerability

high

SA-2010-011

(12.02.2010)

Adobe Products XML Processing Information Disclosure

medium

SA-2010-010

(11.02.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-009

(09.02.2010)

Microsoft DirectShow AVI File Parsing Buffer Overflow Vulnerability

high

SA-2010-008

(09.02.2010)

Microsoft Windows TCP/IP Implementation Vulnerabilities

medium

SA-2010-012

(18.02.2010)

Mozilla Firefox Unspecified Code Execution Vulnerability

high

SA-2010-013

(04.03.2010)

Opera "Content-Length" Processing Buffer Overflow Vulnerability

high

SA-2010-006

(09.02.2010)

Microsoft Windows "ShellExecute()" Input Validation Vulnerability

high

SA-2010-007

(09.02.2010)

Microsoft Data Analyzer ActiveX Control Vulnerability

high

SA-2010-005

(09.02.2010)

Microsoft Windows SMB Client Implementation Vulnerabilities

high

SA-2010-004

(09.02.2010)

Microsoft Office File Parsing Buffer Overflow Vulnerability

high

SA-2010-003

(09.02.2010)

Microsoft Office PowerPoint Multiple Vulnerabilities

high

SA-2010-002

(26.01.2010)

Google Chrome Multiple Vulnerabilities

high

SA-2010-001

(15.01.2010)

Microsoft Internet Explorer Arbitrary Code Execution

high

SA-2009-108

(15.12.2009)

Adobe Reader/Acrobat "Doc.media.newPlayer()" Memory Corruption

high

SA-2009-107

(09.12.2009)

Adobe Flash Player Multiple Vulnerabilities

high

SA-2009-106

(08.12.2009)

Microsoft Windows Indeo Codec Multiple Vulnerabilities

high

SA-2009-105

(08.12.2009)

Microsoft Office Project Memory Validation Vulnerability

high

SA-2009-104

(08.12.2009)

Microsoft WordPad / Office Text Converters Memory Corruption Vulnerability

high

SA-2009-103

(08.12.2009)

Microsoft Windows Internet Authentication Service Vulnerability

high

SA-2009-102

(23.11.2009)

Internet Explorer Layout Handling Memory Corruption Vulnerability

high

SA-2009-101

(10.11.2009)

Microsoft Windows Win32k Kernel-Mode Driver Multiple Vulnerabilities

high

SA-2009-100

(10.11.2009)

Microsoft Excel Multiple Vulnerabilities

high

SA-2009-099

(10.11.2009)

Microsoft Office Word File Information Block Parsing Buffer Overflow

high

SA-2009-098

(14.10.2009)

Microsoft Products GDI+ Multiple Vulnerabilities

high

SA-2009-097

(09.20.2009)

Adobe Reader/Acrobat Arbitrary Code Execution Vulnerability

high

SA-2009-096

(10.09.2009)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2009-095

(08.09.2009)

Microsoft Windows Media Format Two Code Execution Vulnerabilities

high

SA-2009-094

(08.09.2009)

Microsoft Windows TCP/IP Implementation Multiple Vulnerabilities

high

SA-2009-093

(08.09.2009)

Microsoft Windows SMB Processing Array Indexing Vulnerability

medium

SA-2009-092

(04.09.2009)

Microsoft IIS FTP Server Recursive Listing Denial of Service

low

SA-2009-091

(11.08.2009)

Microsoft Remote Desktop Connection Two Vulnerabilities

high

SA-2009-090

(11.08.2009)

Microsoft Windows Telnet NTLM Credential Reflection Vulnerability

medium

SA-2009-089

(11.08.2009)

Microsoft Windows WINS Service Two Vulnerabilities

medium

SA-2009-088

(11.08.2009)

Microsoft Windows AVI Media File Parsing Vulnerabilities

high

SA-2009-087

(03.08.2009)

Mozilla Firefox Network Security Services Multiple Vulnerabilities

high

SA-2009-086

(23.07.2009)

Adobe Reader/Acrobat SWF Content Arbitrary Code Execution

high

SA-2009-085

(23.07.2009)

Adobe Flash Player Arbitrary Code Execution Vulnerability

high

SA-2009-084

(14.07.2009)

Microsoft ISA Server Security Bypass Vulnerability

medium

SA-2009-083

(14.07.2009)

Microsoft Office Publisher Pointer Dereference Vulnerability

high

SA-2009-082

(14.07.2009)

Windows Embedded OpenType Font Engine Two Vulnerabilities

high

SA-2009-081

(14.07.2009)

Mozilla Firefox Memory Corruption Vulnerability

high

SA-2009-080

(13.07.2009)

Microsoft Office Web Components Code Execution Vulnerability

high

SA-2009-079

(09.07.2009)

Adobe ColdFusion FCKeditor "CurrentFolder" Vulnerability

high

SA-2009-078

(06.07.2009)

Microsoft DirectShow MPEG2TuneRequest ActiveX Control Buffer Overflow

high

SA-2009-077

(01.07.2009)

VMware ESX Server update for krb5

high

SA-2009-076

(12.06.2009)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2009-075

(10.06.2009)

Microsoft PowerPoint Freelance Layout Parsing Vulnerability

medium

SA-2009-074

(10.06.2009)

Adobe Reader/Acrobat Multiple Vulnerabilities

high

SA-2009-073

(09.06.2009)

Apple Safari Multiple Vulnerabilities

high

SA-2009-072

(29.05.2009)

Microsoft DirectShow QuickTime Parsing Arbitrary Code Execution

high

SA-2009-071

(12.05.2009)

Microsoft PowerPoint Multiple Vulnerabilities

high

SA-2009-070

(29.04.2009)

Symantec Products Alert Management System 2 Multiple Vulnerabilities

medium

SA-2009-069

(28.04.2009)

Mozilla Firefox "nsTextFrame::ClearTextRun()" Memory Corruption

high

SA-2009-068

(22.04.2009)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2009-067

(16.04.2009)

Microsoft Whale IAG / Client Components ActiveX Control Buffer Overflows

high

SA-2009-066

(14.04.2009)

Microsoft Windows HTTP Services Multiple Vulnerabilities

high

SA-2009-065

(14.04.2009)

Microsoft Internet Explorer Multiple Vulnerabilities

high

SA-2009-064

(09.04.2009)

HP OpenView Performance Agent DynaZip Buffer Overflow Vulnerability

high

SA-2009-063

(09.04.2009)

Cisco ASA and PIX Multiple Vulnerabilities

medium

SA-2009-062

(03.04.2009)

PowerPoint Unspecified Code Execution Vulnerability

high

SA-2009-061

(01.04.2009)

VMware ESX Server Update for Multiple Packages

medium

SA-2009-060

(26.03.2009)

Cisco IOS Multiple Vulnerabilities

medium

SA-2009-059

(26.03.2009)

Windows 2008 / Windows Services for UNIX gzip Libraries Vulnerabilities

medium

SA-2009-058

(24.03.2009)

HP OpenView Network Node Manager Buffer Overflow Vulnerabilities

medium

SA-2009-057

(05.03.2009)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2009-056

(03.03.2009)

Opera Multiple Vulnerabilities

high

SA-2009-055

(03.03.2009)

Winamp libsndfile.dll CAF Processing Integer Overflow Vulnerability

high

SA-2009-054

(27.02.2009)

PHP Multiple Vulnerabilities

medium

SA-2009-053

(25.02.2009)

Adobe Flash Player Multiple Vulnerabilities

high

SA-2009-052

(24.02.2009)

VMware Multiple Products Tomcat Vulnerabilities

medium

SA-2009-051

(20.02.2009)

Adobe Reader/Acrobat Unspecified Buffer Overflow Vulnerability

high

SA-2009-050

(13.02.2009)

Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

high

SA-2009-049

(13.02.2009)

Mac OS X update for Java

high

SA-2009-048

(12.02.2009)

Trend Micro InterScan Web Security "Proxy-Authorization" Information Disclosure

low

SA-2009-047

(12.02.2009)

Becky! Internet Mail Read Receipt Request Vulnerability

high

SA-2009-046

(11.02.2009)

Sun Java System Directory Server Denial of Service

medium

SA-2009-045

(11.02.2009)

Auth PHP "username" SQL Injection Vulnerability

medium

SA-2009-044

(11.02.2009)

Netgear SSL312 Web Interface Denial of Service Vulnerability

low

SA-2009-043

(10.02.2009)

BlackBerry Application Web Loader ActiveX Control Buffer Overflow

high

SA-2009-042

(10.02.2009)

Exchange Server TNEF Decoding and MAPI Command Processing Vulnerabilities

high

SA-2009-041

(10.02.2009)

Microsoft Internet Explorer Two Code Execution Vulnerabilities

high

SA-2009-040

(10.02.2009)

Microsoft Office Visio Multiple Vulnerabilities

medium

SA-2009-039

(10.02.2009)

Debian update for gnutls13

medium

SA-2009-038

(10.02.2009)

Google Chrome URI Handler Registration Vulnerability

high

SA-2009-037

(10.02.2009)

RealPlayer IVR File Processing Two Vulnerabilities

medium

SA-2009-036

(09.02.2009)

HP OpenView Network Node Manager Multiple Vulnerabilities

medium

SA-2009-035

(06.02.2009)

HP OpenView Network Node Manager Arbitrary Code Execution

medium

SA-2009-034

(05.02.2009)

FeedDemon OPML Processing Buffer Overflow Vulnerability

high

SA-2009-033

(05.02.2009)

HP LaserJet / Digital Sender Directory Traversal Vulnerability

low

SA-2009-032

(05.02.2009)

Cisco Products Denial of Service and Security Bypass Vulnerabilities

low

SA-2009-031

(04.02.3009)

TightVNC "ClientConnection" Signedness Vulnerabilities

medium

SA-2009-030

(04.02.3009)

UltraVNC "ClientConnection" Signedness Vulnerabilities

medium

SA-2009-029

(04.02.2009)

Nokia PC Suite Multimedia Player Playlist Processing Buffer Overflow

high

SA-2009-028

(04.02.2009)

Mozilla Firefox Multiple Vulnerabilities

high

SA-2009-027

(04.02.2009)

Mozilla SeaMonkey Multiple Vulnerabilities

high

SA-2009-026

(04.02.2009)

Mozilla Thunderbird Memory Corruption Vulnerabilities

high

SA-2009-025

(03.02.2009)

HP NonStop Server DNS Cache Poisoning Vulnerability

medium

SA-2009-024

(02.02.2009)

VMware ESX Server update for net-snmp and libxml2

high

SA-2009-023

(29.01.2009)

Sony Ericsson Phones WAP Push Denial of Service Vulnerability

medium

SA-2009-022

(29.01.2009)

HP MPE/iX DNS Cache Poisoning Vulnerability

medium

SA-2009-021

(28.01.2009)

CA Anti-Virus Engine Archive Files Detection Bypass

low

SA-2009-020

(27.01.2009)

Microsoft Windows Mobile Bluetooth Stack OBEX Directory Traversal

low

SA-2009-019

(22.01.2009)

Cisco Security Manager Security Bypass Vulnerability

medium

SA-2009-018

(22.01.2009)

Apple QuickTime MPEG-2 Playback Component Input Validation Vulnerability

high

SA-2009-017

(22.01.2009)

Apple QuickTime Multiple Vulnerabilities

high

SA-2009-016

(20.01.2009)

Trend Micro OfficeScan Client Firewall Multiple Vulnerabilities

low

SA-2009-015

(20.01.2009)

Trend Micro Internet Security Firewall Multiple Vulnerabilities

low

SA-2009-014

(20.01.2009)

Fujitsu SystemcastWizard Lite Multiple Vulnerabilities

medium

SA-2009-013

(16.01.2009)

Symantec AppStream Client LaunchObj ActiveX Control Insecure Methods

high

SA-2009-012

(16.01.2009)

Apple Safari RSS Feed URL Handling Information Disclosure

medium

SA-2009-011

(15.01.2009)

Cisco IronPort Products Multiple Vulnerabilities

medium

SA-2009-010

(13.01.2009)

BlackBerry Products PDF Distiller Multiple Vulnerabilities

high

SA-2009-009

(13.01.2009)

Winamp AIFF Processing Buffer Overflow Vulnerability

high

SA-2009-008

(13.01.2009)

WebSphere DataPower XML Security Gateway XS40 Denial of Service

medium

SA-2009-007

(12.01.2009)

Amarok Audible Audio Processing Multiple Vulnerabilities

high

SA-2009-006

(08.01.2009)

Cisco Global Site Selector DNS Request Denial of Service

medium

SA-2009-005

(08.01.2008)

Winamp gen_msn Plugin Buffer Overflow Vulnerability

high

SA-2009-004

(07.01.2009)

Cain & Abel Cisco IOS Configuration File Buffer Overflow

high

SA-2009-003

(06.01.2009)

PHPAuctions Multiple Vulnerabilities

medium

SA-2009-002

(06.01.2008)

VMware "vmware-authd" Denial of Service Vulnerability

low

SA-2009-001

(05.01.2009)

Destiny Media Player Playlist Processing Buffer Overflow

high

SA-2008-067

(26.12.2008)

BulletProof FTP Client Server Name Handling Buffer Overflow

medium

SA-2008-066

(22.12.2008)

Trend Micro HouseCall ActiveX Control Arbitrary Code Execution

high

SA-2008-065

(21.12.2008)

Trend Micro HouseCall ActiveX Control "notifyOnLoadNative()" Vulnerability

high

SA-2008-064

(19.12.2008)

Fujitsu-Siemens WebTransactions Command Injection Vulnerability

high

SA-2008-063

(19.12.2008)

BitDefender Antivirus Scanner for Unices PE File Parsing Integer Overflows

high

SA-2008-062

(19.12.2008)

Slackware update for mozilla-firefox

high

SA-2008-061

(17.12.2008)

Mozilla Firefox 2 Multiple Vulnerabilities

high

SA-2008-060

(17.12.2008)

Mozilla Firefox 3 Multiple Vulnerabilities

high

SA-2008-059

(17.12.2008)

Mozilla SeaMonkey Multiple Vulnerabilities

high

SA-2008-058

(17.12.2008)

Mozilla Thunderbird Multiple Vulnerabilities

high

SA-2008-057

(16.12.2008)

Realtek Media Player Playlist Processing Buffer Overflow

high

SA-2008-056

(16.12.2008)

Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

high

SA-2008-055

(15.12.2008)

Fedora update for roundcubemail

high

SA-2008-054

(12.12.2008)

IBM WebSphere Portal Unspecified Security Bypass Vulnerability

medium

SA-2008-053

(11.12.2008)

CA ARCserve Backup RPC "handle_t" Argument Vulnerability

medium

SA-2008-052

(10.12.2008)

Internet Explorer XML Processing Memory Corruption

high

SA-2008-051

(10.12.2008)

Microsoft Windows WordPad Text Converter Vulnerability

high

SA-2008-050

(10.12.2008)

Microsoft Visual Basic ActiveX Controls Multiple Vulnerabilities

high

SA-2008-049

(10.12.2008)

Microsoft Windows GDI Image Parsing Vulnerabilities

high

SA-2008-048

(10.12.2008)

Microsoft SQL Server 2000 "sp_replwritetovarbin()" Buffer Overflow

low

SA-2008-047

(10.12.2008)

Microsoft Office SharePoint Server Security Bypass Vulnerability

medium

SA-2008-046

(10.12.2008)

Microsoft Windows Explorer Search Handling Vulnerabilities

medium

SA-2008-045

(10.12.2008)

Microsoft Excel Multiple Vulnerabilities

high

SA-2008-044

(10.12.2008)

Microsoft Internet Explorer Multiple Vulnerabilities

high

SA-2008-043

(10.12.2008)

Microsoft Office Word Multiple Vulnerabilities

high

SA-2008-042

(08.12.2008)

Linksys WVC54GC Information Disclosure and ActiveX Control Buffer Overflow

high

SA-2008-041

(08.12.2008)

IBM WebSphere Application Server Multiple Vulnerabilities

low

SA-2008-040

(08.12.2008)

Fedora update for squirrelmail

high

SA-2008-039

(05.12.2008)

Novell Netware ApacheAdmin Console Security Bypass

low

SA-2008-038

(05.12.2008)

Red Hat update for java-1.5.0-sun / java-1.6.0-sun

high

SA-2008-037

(04.12.2008)

Sun Java JDK / JRE Multiple Vulnerabilities

high

SA-2008-036

(03.12.2008)

VMware ESX / ESXi Virtual Hardware Memory Corruption Vulnerability

low

SA-2008-035

(03.12.2008)

VMware ESX Server update for bzip2

low

SA-2008-034

(02.12.2008)

IBM Rational ClearQuest Multiple Vulnerabilities

low

SA-2008-033

(02.12.2008)

IBM Rational ClearCase Cross-Site Scripting Vulnerability

low

SA-2008-032

(02.12.2008)

ASP Portal "ASPPortal.mdb" Database Disclosure Security Issue

medium

SA-2008-031

(01.12.2008)

Microsoft Office Communications Server SIP INVITE Denial of Service

low

SA-2008-030

(01.12.2008)

PHP TV Portal "mid" SQL Injection Vulnerability

medium

SA-2008-029

(28.11.2008)

BlackBerry Desktop Software FlexNET Connect ActiveX Control Vulnerability

high

SA-2008-028

(27.11.2008)

Siemens C450IP / C475IP Denial of Service Vulnerability

medium

SA-2008-027

(27.11.2008)

Nero ShowTime M3U Processing Buffer Overflow Vulnerability

high

SA-2008-026

(26.11.2008)

SUSE Update for Mozilla Products

high

SA-2008-025

(26.11.2008)

HP Secure Web Server/Internet Express for Tru64 UNIX PHP Vulnerability

medium

SA-2008-024

(26.11.2008)

BullGuard Internet Security PDF Processing Memory Corruption

high

SA-2008-023

(25.11.2008)

IBM Tivoli Access Manager WebSEAL Denial of Service Vulnerability

medium

SA-2008-022

(25.11.2008)

Ubuntu update for openoffice.org

high

SA-2008-020

(24.11.2008)

Windows Vista "CreateIpForwardEntry2()" Memory Corruption Vulnerability

low

SA-2008-021

(24.11.2008)

ffdshow URL Processing Buffer Overflow Vulnerability

high

SA-2008-019

(24.11.2008)

Slackware update for mozilla-thunderbird

high

SA-2008-018

(24.11.2008)

Wireshark SMTP Processing Denial of Service Vulnerability

medium

SA-2008-017

(21.11.2008)

Apple iPhone / iPod touch Multiple Vulnerabilities

high

SA-2008-016

(21.11.2008)

Fedora update for thunderbird

high

SA-2008-015

(21.11.2008)

BitDefender Antivirus PDF Processing Memory Corruption Vulnerability

high

SA-2008-014

(20.11.2008)

Alex Multiple Products File Upload Vulnerability

high

SA-2008-013

(20.11.2008)

Symantec Backup Exec for Windows Servers Multiple Vulnerabilities

medium

SA-2008-012

(20.11.2008)

Red Hat update for thunderbird

high

SA-2008-011

(19.11.2008)

Ubuntu update for libxml2

high

SA-2008-010

(19.11.2008)

Ubuntu update for firefox, firefox-3.0, and xulrunner-1.9

high

SA-2008-009

(17.11.2008)

Sun Solaris socket Local Denial of Service

medium

SA-2008-008

(17.11.2008)

SUSE Update for Multiple Packages

medium

SA-2008-007

(06.11.2008)

Cisco IOS / CatOS VLAN Trunking Protocol Vulnerability

low

SA-2008-006

(04.09.2008)

FreeBSD ICMPv6 "Packet Too Big" MTU Denial of Service Vulnerability

medium

SA-2008-005

(04.09.2008)

Cisco ASA and PIX Security Appliances Multiple Vulnerabilities

medium

SA-2008-004

(04.09.2008)

Cisco Secure ACS EAP Packet Denial of Service

low

SA-2008-003

(2008.08.07)

CA Products Ingres Multiple Vulnerabilities

low

SA-2008-002

(2008.08.06)

Linux Kernel "snd_seq_oss_synth_make_info()" Information Disclosure

low

SA-2008-001

(2008.08.06)

Ingres Multiple Utility and Library Privilege Escalation Vulnerabilities

medium

Warnings

VN-2011-058

(29.07.2011)

Avaya Secure Access Link (SAL) Gateway information disclosure vulnerability

VN-2011-057

(25.07.2011)

Oracle Outside In CorelDRAW file parser stack buffer overflow

VN-2011-056

(25.07.2011)

Brocade BigIron RX switch ACL bypass vulnerability

VN-2011-055

(15.07.2011)

HP ArcSight Connector Appliance XSS vulnerability

VN-2011-054

(05.07.2011)

ISC BIND 9 RPZ zone named denial-of-service vulnerability

VN-2011-053

(27.06.2011)

Parodia blind SQL injection vulnerability

VN-2011-052

(21.06.2011)

ManageEngine ServiceDesk directory traversal vulnerability

VN-2011-051

(16.06.2011)

LibreOffice 3.3 'Lotus Word Pro' document import filter contains multiple vulnerabilities

VN-2011-050

(14.06.2011)

Adobe Reader and Acrobat font memory corruption vulnerability

VN-2011-049

(07.06.2011)

Autonomy Keyview IDOL contains multiple vulnerabilities in file parsers

VN-2011-048

(01.06.2011)

Cisco AnyConnect SSL VPN arbitrary code execution

VN-2011-047

(15.06.2011)

Adobe Updates for Multiple Vulnerabilities

VN-2011-046

(14.06.2011)

Microsoft Updates for Multiple Vulnerabilities

VN-2011-045

(06.05.2011)

Samsung Data Management Server vulnerable to SQL injection

VN-2011-044

(02.05.2011)

Proofpoint Protection Server contains multiple vulnerabilities

VN-2011-043

(12.04.2011)

Microsoft Updates for Multiple Vulnerabilities

VN-2011-042

(19.04.2011)

Oracle Outside In contains exploitable vulnerabilities in Lotus 123 and Microsoft CAB file parsers

VN-2011-041

(18.04.2011)

Wireshark DECT dissector vulnerability

VN-2011-040

(12.04.2011)

Adobe Flash Player contains unspecified code execution vulnerability

VN-2011-039

(05.04.2011)

Oracle Solaris 10 password hashes leaked through back-out patch files

VN-2011-038

(05.04.2011)

Dell Kace K2000 Appliance unauthenticated access and information disclosure vulnerability

VN-2011-037

(05.04.2011)

NetGear WNAP210 remote password disclosure and password bypass vulnerability

VN-2011-036

(05.04.2011)

ISC dhclient vulnerability

VN-2011-035

(04.04.2011)

pWhois Layer Four Traceroute 3.x vulnerability

VN-2011-034

(01.04.2011)

IPComp encapsulation nested payload vulnerability

VN-2011-033

(21.03.2011)

OpenSLP denial of service vulnerability

VN-2011-032

(21.03.2011)

Foolabs Xpdf contains a denial of service vulnerability

VN-2011-031

(15.03.2011)

MIT KDC vulnerable to double-free when PKINIT enabled

VN-2011-030

(14.03.2011)

Adobe Flash Player contains unspecified code execution vulnerability

VN-2011-029

(08.03.2011)

Microsoft Updates for Multiple Vulnerabilities

VN-2011-028

(07.03.2011)

STARTTLS plaintext command injection vulnerability

VN-2011-027

(02.03.2011)

Wireshark 6LoWPAN denial of service vulnerability

VN-2011-026

(23.02.2011)

IBM WebSphere Portal Server input validation vulnerability

VN-2011-025

(23.02.2011)

Mutare Software Enabled VoiceMail (EVM) system web interface cross-site request forgery vulnerabilities

VN-2011-024

(22.02.2011)

ISC Bind 9 IXFR or DDNS update combined with high query rate DoS vulnerability

VN-2011-023

(18.02.2011)

PivotX password reset vulnerability

VN-2011-022

(16.02.2011)

Microsoft Windows browser election message kernel pool overflow

VN-2011-021

(11.02.2011)

Adobe Shockwave 11.5.9.615 contains multiple memory corruption vulnerabilities

VN-2011-020

(10.02.2011)

Adobe Flash memory corruption vulnerability

VN-2011-019

(08.02.2011)

Microsoft Updates for Multiple Vulnerabilities

VN-2011-018

(04.02.2011)

Majordomo 2 _list_file_get() directory traversal vulnerability

VN-2011-017

(03.02.2011)

Cisco Tandberg E, EX, and C Series default root credentials

VN-2011-016

(03.02.2011)

Sielco Sistemi Winlog server stack overflow

VN-2011-015

(28.01.2011)

Microsoft Windows MHTML script injection vulnerability

VN-2011-014

(27.01.2011)

ISC DHCP server DHCPv6 decline message processing vulnerability

VN-2011-013

(11.01.2011)

Microsoft Updates for Multiple Vulnerabilities

VN-2011-012

(25.01.2011)

Lomtec ActiveWeb Professional 3.0 CMS allows arbitrary file upload and execution

VN-2011-011

(21.01.2011)

CollabNet ScrumWorks Basic Server transmits credential information in plaintext

VN-2011-010

(13.01.2011)

Objectivity/DB administration tools lack authentication

VN-2011-009

(13.01.2011)

ICQ 7 fails to verify the origin of software updates

VN-2011-008

(13.01.2011)

Google Chrome multiple vulnerabilities

VN-2011-007

(13.01.2011)

InduSoft NTWebServer web service stack-based buffer overflow

VN-2011-006

(12.01.2011)

WellinTech KingView 6.53 remote heap overflow vulnerability

VN-2011-005

(11.01.2011)

Ecava IntegraXor web service allows directory traversal outside of web root

VN-2011-004

(11.01.2011)

Libpng 1.5.0 png_set_rgb_to_gray() vulnerability

VN-2011-003

(07.01.2011)

PolyVision RoomWizard insecurely stores Sync Connector Active Directory credentials and uses default administrative password

VN-2011-002

(06.01.2011)

Microsoft Internet Explorer 8 use-after-free vulnerability

VN-2011-001

(05.01.2011)

Microsoft Windows graphics engine thumbnail stack buffer overflow

VN-2010-100

(22.12.2010)

Microsoft WMI Administrative Tools WBEMSingleView.ocx ActiveX control vulnerability

VN-2010-099

(22.12.2010)

Microsoft IIS FTP server memory corruption vulnerability

VN-2010-098

(16.12.2010)

Ecava IntegraXor stack-based buffer overflow vulnerability

VN-2010-097

(15.12.2010)

Invensys Wonderware InBatch and Foxboro I/A Series Batch database lock manager service (lm_tcp) buffer overflow vulnerability

VN-2010-096

(13.12.2010)

Microsoft Internet Explorer CSS use-after-free vulnerability

VN-2010-095

(13.12.2010)

ISC DHCP server vulnerability

VN-2010-094

(14.12.2010)

Exim alternate configuration privilege escalation vulnerability

VN-2010-093

(13.12.2010)

Exim string_format() buffer overflow

VN-2010-092

(14.12.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-091

(08.12.2010)

Apple QuickTime JPEG2000 heap buffer overflow

VN-2010-090

(07.12.2010)

GNU libc regcomp() stack exhaustion denial of service

VN-2010-089

(01.12.2010)

ISC BIND cache vulnerability

VN-2010-088

(01.12.2010)

ISC BIND named validator vulnerability

VN-2010-087

(01.12.2010)

ISC BIND named allow-query vulnerability

VN-2010-086

(30.11.2010)

PHP getSymbol vulnerability allows denial of service

VN-2010-085

(30.11.2010)

AWStats fails to properly handle "\\" when specifying a configuration file directory

VN-2010-084

(26.11.2010)

Microsoft Windows RtlQueryRegistryValues() does not adequately validate registry data

VN-2010-083

(19.11.2010)

RealFlex RealWin HMI service buffer overflows

VN-2010-082

(18.11.2010)

PGP Desktop unsigned data injection vulnerability

VN-2010-081

(09.11.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-080

(03.11.2010)

Microsoft Internet Explorer invalid flag reference vulnerability

VN-2010-079

(03.11.2010)

NetSupport Manager Gateway transmits identifying information in plaintext

VN-2010-078

(01.11.2010)

Attachmate Reflection for the Web cross site scripting vulnerability

VN-2010-077

(28.10.2010)

Adobe Flash code execution vulnerability

VN-2010-076

(25.10.2010)

Linux kernel RDS protocol vulnerability

VN-2010-075

(26.10.2010)

GNU C library dynamic linker expands $ORIGIN in setuid library search path

VN-2010-074

(22.10.2010)

Adobe Shockwave Player Director file 'rcsL' chunk parsing vulnerability

VN-2010-073

(13.10.2010)

SAP BusinessObjects Axis2 Default Admin Password

VN-2010-072

(12.10.2010)

Ghostscript crashes when passing a null ipsp->ip value to the gs_type2_interpret function

VN-2010-071

(12.10.2010)

Oracle WebLogic Node Manager allows arbitrary configuration via UNC path

VN-2010-070

(12.10.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-069

(14.10.2010)

Oracle Updates for Multiple Vulnerabilities

VN-2010-068

(04.10.2010)

ActiveCollab permissions failure

VN-2010-067

(30.09.2010)

Unexpected ACL Behavior in BIND 9.7.2

VN-2010-066

(06.10.2010)

Adobe Reader and Acrobat Affected by Multiple Vulnerabilities

VN-2010-065

(14.09.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-064

(20.09.2010)

Adobe Flash Vulnerabilities

VN-2010-063

(14.09.2010)

Adobe Reader and Acrobat Font Parsing Buffer Overflow Vulnerability

VN-2010-062

(13.09.2010)

Adobe Flash unspecified code execution vulnerability

VN-2010-061

(07.09.2010)

Washington Courts website vulnerable to SQL injection and cross-site scripting

VN-2010-060

(01.09.2010)

Blackboard Transact database credentials disclosure

VN-2010-059

(25.08.2010)

Microsoft Windows based applications may insecurely load dynamic libraries

VN-2010-058

(24.08.2010)

DevonIT weak authentication and buffer overflow in /usr/bin/tm-console-bin

VN-2010-057

(24.08.2010)

Ghostscript Heap Corruption in TrueType bytecode interpreter

VN-2010-056

(16.08.2010)

Wyse ThinOS LPD service buffer overflow vulnerability

VN-2010-055

(11.08.2010)

Adobe Flash and AIR Vulnerabilities

VN-2010-054

(19.08.2010)

Adobe Reader and Acrobat Vulnerabilities

VN-2010-053

(26.08.2010)

Microsoft Windows Insecurely Loads Dynamic Libraries

VN-2010-052

(11.08.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-051

(11.08.2010)

Adobe Flash 10.1 ActionScript AVM1 ActionPush vulnerability

VN-2010-050

(05.08.2010)

FreeType 2 CFF font stack corruption vulnerability

VN-2010-049

(05.08.2010)

Oracle Siebel Option Pack for IE ActiveX control memory initialization vulnerability

VN-2010-048

(04.08.2010)

Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control stack buffer overflow

VN-2010-047

(02.08.2010)

Wind River Systems VxWorks debug service enabled by default

VN-2010-046

(18.07.2010)

Microsoft Windows automatically executes code specified in shortcut files

VN-2010-045

(14.07.2010)

ISC DHCP server fails to handle zero-length client identifier

VN-2010-044

(13.07.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-043

(13.07.2010)

Oracle Updates for Multiple Vulnerabilities

VN-2010-042

(12.07.2010)

Cisco Industrial Ethernet 3000 Series switches have hardcoded SNMP community strings

VN-2010-041

(02.07.2010)

libpng fails to limit number of rows in header

VN-2010-040

(29.06.2010)

Snare Agent web interface cross-site request forgery vulnerabilities

VN-2010-039

(24.06.2010)

S2 NetBox allows unauthenticated HTTP access to node logs, backups, and employee photographs

VN-2010-038

(17.06.2010)

Symantec AppStream and Workspace Streaming vulnerable to arbitrary code download and execution

VN-2010-037

(11.06.2010)

Adobe Flash and AIR Vulnerabilities

VN-2010-036

(10.06.2010)

Microsoft Windows Help and Support Center URI processing vulnerability

VN-2010-035

(08.06.2010)

Adobe Flash, Reader, and Acrobat Vulnerability

VN-2010-034

(08.06.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-033

(07.06.2010)

Adobe Flash ActionScript AVM2 newfunction vulnerability

VN-2010-032

(03.06.2010)

Cisco Network Building Mediator products contain multiple vulnerabilities

VN-2010-031

(01.06.2010)

Accoria Rock Web Server contains multiple vulnerabilities

VN-2010-030

(11.05.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-029

(10.05.2010)

Apple Safari window object invalid pointer vulnerability

VN-2010-028

(06.05.2010)

Consona (formerly SupportSoft) Intelligent Assistance Suite (IAS) cross-site scripting, ActiveX, and Reair Service vulnerabilities

VN-2010-027

(13.04.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-026

(13.04.2010)

Oracle Updates for Multiple Vulnerabilities

VN-2010-025

(13.04.2010)

Adobe Reader and Acrobat Vulnerabilities

VN-2010-024

(12.04.2010)

Java Deployment Toolkit insufficient argument validation

VN-2010-023

(30.03.2010)

Microsoft Internet Explorer Vulnerabilities

VN-2010-022

(06.04.2010)

IntelliCom NetBiter devices have default HICP passwords

VN-2010-021

(02.04.2010)

Foxit Reader vulnerable to arbitrary command execution

VN-2010-020

(02.04.2010)

Oracle Sun Java fails to properly validate Java applet signatures

VN-2010-019

(25.03.2010)

Broadcom NetXtreme managment firmware ASF buffer overflow

VN-2010-018

(24.03.2010)

IntelliCom NetBiter Config HICP hostname buffer overflow

VN-2010-017

(23.03.2010)

Mozilla WOFF decoder integer overflow

VN-2010-015

(09.03.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-014

(09.03.2010)

Microsoft Internet Explorer iepeers.dll use-after-free vulnerability

VN-2010-013

(05.03.2010)

Energizer DUO USB battery charger software allows unauthorized remote system access

VN-2010-012

(02.03.2010)

libpng stalls on highly compressed ancillary chunks

VN-2010-010

(24.02.2010)

Malicious Activity Associated with "Aurora" Internet Explorer Exploit

VN-2010-009

(24.02.2010)

APC Network Management Card web interface vulnerable to cross-site scripting and cross-site request forgery

VN-2010-008

(09.02.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-007

(09.02.2010)

Panda Security ActiveScan fails to properly validate downloaded software

VN-2010-011

(01.03.2010)

Internet Explorer VBScript Windows Help arbitrary code execution

VN-2010-006

(21.01.2010)

Microsoft Internet Explorer Vulnerabilities

VN-2010-005

(14.01.2010)

Microsoft Internet Explorer allows remote code execution

VN-2010-004

(12.01.2010)

NOS Microsystems Adobe getPlus Helper ActiveX control stack buffer overflows

VN-2010-003

(12.02.2010)

Windows XP Macromedia Flash 6 ActiveX control use-after-free vulnerability

VN-2010-002

(12.01.2010)

Microsoft Windows EOT Font and Adobe Flash Player 6 Vulnerabilities

VN-2010-001

(13.01.2010)

Adobe Reader and Acrobat Vulnerabilities

VN-2009-088

(15.12.2009)

Adobe Acrobat and Reader contain a use-after-free vulnerability in the JavaScript Doc.media.newPlayer method

VN-2009-087

(14.12.2009)

Microsoft Indeo video codecs contain multiple vulnerabilities

VN-2009-086

(09.12.2009)

DISA UNIX SRR scripts execute untrusted programs as root

VN-2009-085

(08.12.2009)

NTP mode 7 denial-of-service vulnerability

VN-2009-084

(08.12.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-083

(09.12.2009)

Adobe Flash Vulnerabilities Affect Flash Player and Adobe AIR

VN-2009-082

(25.11.2009)

Microsoft Internet Explorer CSS style element vulnerability

VN-2009-081

(24.11.2009)

TCP may keep its offered receive window closed indefinitely (RFC 1122)

VN-2009-080

(19.11.2009)

Wyse Simple Imager (WSI) includes vulnerable versions of TFTPD32

VN-2009-079

(11.11.2009)

SSL and TLS protocols renegotiation vulnerability

VN-2009-078

(10.11.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-077

(13.10.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-076

(13.10.2009)

Adobe Reader and Acrobat Vulnerabilities

VN-2009-075

(13.10.2009)

Adobe Acrobat and Reader contain vulnerabilities in multiple Document Object JavaScript methods

VN-2009-074

(15.09.2009)

Nginx ngx_http_parse_complex_uri() buffer underflow vulnerability

VN-2009-073

(10.09.2009)

Windows SMB version 2 vulnerability

VN-2009-072

(09.09.2009)

Cyrus IMAPd buffer overflow vulnerability

VN-2009-071

(09.09.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-069

(01.09.2009)

Microsoft Internet Information Server (IIS) FTP server NLST stack buffer overflow

VN-2009-068

(21.08.2009)

Libpurple buffer overflow vulnerability

VN-2009-067

(18.08.2009)

Acer AcerCtrls.APlunch ActiveX Control fails to properly restrict access to methods

VN-2009-066

(11.08.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-065

(06.08.2009)

Apple Updates for Multiple Vulnerabilities

VN-2009-064

(28.07.2009)

Microsoft Windows, Internet Explorer, and Active Template Library (ATL) Vulnerabilities

VN-2009-063

(29.07.2009)

ISC BIND 9 vulnerable to denial of service via dynamic update request

VN-2009-062

(28.07.2009)

ActiveX controls built with Microsoft ATL fail to properly handle initialization data

VN-2009-060

(23.07.2009)

Adobe Flash Vulnerability Affects Flash Player and Other Adobe Products

VN-2009-059

(23.07.2009)

Adobe Flash Player vulnerability

VN-2009-058

(16.07.2009)

Microsoft Office Web Components Spreadsheet ActiveX control vulnerability

VN-2009-057

(14.07.2009)

ISC DHCP dhclient stack buffer overflow

VN-2009-056

(14.07.2009)

Mozilla Firefox 3.5 TraceMonkey JavaScript engine uninitialized memory vulnerability

VN-2009-055

(14.07.2009)

XML signature HMAC truncation authentication bypass

VN-2009-054

(14.07.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-053

(07.07.2009)

Microsoft Video ActiveX Control Vulnerability

VN-2009-052

(07.07.2009)

Microsoft Video ActiveX control stack buffer overflow

VN-2009-051

(19.06.2009)

Foxit Reader contains multiple vulnerabilities in the processing of JPX data

VN-2009-050

(10.06.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-049

(10.06.2009)

Adobe Acrobat and Reader Vulnerabilities

VN-2009-048

(10.06.2009)

Adobe Reader contains multiple vulnerabilities in the processing of JPX data

VN-2009-047

(09.06.2009)

eBay Enhanced Picture Uploader ActiveX control vulnerable to arbitrary command execution

VN-2009-046

(20.05.2009)

NSD vulnerable to one-byte overflow

VN-2009-045

(20.05.2009)

Microsoft IIS WebDAV Remote Authentication Bypass

VN-2009-044

(18.05.2009)

ntpd autokey stack buffer overflow

VN-2009-043

(14.05.2009)

Cyrus SASL library buffer overflow vulnerability

VN-2009-042

(13.05.2009)

Apple Updates for Multiple Vulnerabilities

VN-2009-041

(13.05.2009)

Adobe Reader and Acrobat JavaScript Vulnerabilities

VN-2009-040

(13.05.2009)

Microsoft PowerPoint Multiple Vulnerabilities

VN-2009-039

(06.05.2009)

NuPoint Messenger server transmits authentication credentials in plain text

VN-2009-038

(02.05.2009)

Jetty HTTP server directory traversal vulnerability

VN-2009-037

(29.4.2009)

Adobe Reader and Acrobat customDictionaryOpen() and getAnnots() JavaScript vulnerabilities

VN-2009-036

(17.04.2009)

Xpdf and poppler contain multiple vulnerabilities in the processing of JBIG2 data

VN-2009-035

(15.04.2009)

Oracle Updates for Multiple Vulnerabilities

VN-2009-033

(14.04.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-032

(06.04.2009)

Particle Software IntraLaunch Application Launcher ActiveX control fails to restrict access to dangerous methods

VN-2009-031

(03.04.2009)

Microsoft Office PowerPoint code execution vulnerability

VN-2009-030

(31.03.2009)

SAP AG SAPgui EAI WebViewer3D ActiveX control stack buffer overflow

VN-2009-029

(29.03.2009)

Conficker Worm Targets Microsoft Windows Systems

VN-2009-028

(24.03.2009)

IBM Access Support ActiveX control stack buffer overflow

VN-2009-027

(19.03.2009)

Autonomy KeyView SDK buffer overflow vulnerability

VN-2009-026

(13.03.2009)

Adobe Reader and Acrobat JBIG2 buffer overflow vulnerability

VN-2009-025

(13.03.2009)

PTK contains multiple vulnerabilities

VN-2009-024

(11.03.2009)

Intercepting proxy servers may incorrectly rely on HTTP headers to make connections

VN-2009-023

(11.03.2009)

Microsoft Windows DNS Server response validation vulnerability

VN-2009-022

(09.03.2009)

Adobe Reader and Acrobat JBIG2 buffer overflow vulnerability

VN-2009-021

(02.03.2009)

libpng fails to properly initialize element pointers

VN-2009-020

(27.02.2009)

HP Virtual Rooms ActiveX control fails to restrict access to dangerous methods

VN-2009-019

(23.02.2009)

Intercepting proxy servers may incorrectly rely on HTTP host-headers to make connections

VN-2009-018

(20.02.2009)

Adobe Reader and Acrobat buffer overflow vulnerability

VN-2009-017

(20.02.2009)

Adobe Acrobat and Reader Vulnerability

VN-2009-016

(18.02.2009)

libspf2 DNS TXT record parsing buffer overflow

VN-2009-015

(11.02.2009)

GE Fanuc Proficy HMI/SCADA iFIX uses insecure authentication techniques

VN-2009-014

(10.02.2009)

RIM BlackBerry Application Web Loader ActiveX stack buffer overflow

VN-2009-013

(10.02.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-012

(09.02.2009)

GoAhead Webserver information disclosure vulnerability

VN-2009-011

(05.02.2009)

AREVA e-terrahabitat SCADA systems vulnerabilities

VN-2009-010

(05.02.3009)

Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge URL redirection vulnerability

VN-2009-009

(05.02.2009)

Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge cross-site scripting vulnerability

VN-2009-008

(05.02.2009)

GoAhead Webserver information disclosure vulnerability

VN-2009-007

(28.01.2009)

Autonomy Ultraseek URL redirection vulnerability

VN-2009-006

(22.01.2009)

Apple QuickTime Updates for Multiple Vulnerabilities

VN-2009-005

(20.01.2009)

Microsoft Windows Does Not Disable AutoRun Properly

VN-2009-004

(15.01.2009)

Oracle Updates for Multiple Vulnerabilities

VN-2009-003

(15.01.2009)

Symantec AppStream LaunchObj ActiveX control vulnerable to arbitrary code download and execution

VN-2009-002

(13.01.2009)

Microsoft Updates for Multiple SMB Protocol Vulnerabilities

VN-2009-001

(31.12.2008)

MD5 vulnerable to collision attacks

VN-2008-021

(26.12.2008)

Trend Micro HouseCall ActiveX control notifyOnLoadNative() uses previously free'd memory

VN-2008-020

(26.12.2008)

Trend Micro HouseCall ActiveX control does not adequately validate update server parameters

VN-2008-019

(25.12.2008)

Microsoft SQL Server fails to properly validate parameters to the sp_replwriterovarbin extended stored procedure

VN-2008-018

(17.12.2008)

Microsoft Internet Explorer Data Binding Vulnerability

VN-2008-017

(15.12.2008)

Apple Updates for Multiple Vulnerabilities

VN-2008-016

(11.12.2008)

Microsoft WordPad Text Converter vulnerable to remote code execution

VN-2008-015

(11.12.2008)

Microsoft Internet Explorer 7 XML parsing memory corruption vulnerability

VN-2008-014

(09.12.20008)

Microsoft Updates for Multiple Vulnerabilities

VN-2008-013

(09.12.2008)

Microsoft Vista and Server 2008 vulnerable to memory corruption via saved search

VN-2008-012

(05.12.2008)

Sun Java Updates for Multiple Vulnerabilities

VN-2008-011

(05.12.2008)

Linksys WVC54GC wireless video camera vulnerable to information disclosure

VN-2008-010

(05.12.2008)

Linksys WVC54GC NetCamPlayerWeb11gv2 ActiveX control stack buffer overflow

VN-2008-009

(03.12.2008)

DATAC RealWin buffer overflow

VN-2008-007

(25.11.2008)

SSH CBC vulnerability

VN-2008-006

(20.11.2008)

PHPCow file inclusion vulnerability

VN-2008-005

(05.09.2008)

NetBSD malformed ICMPv6 MLD-QUERY denial of service

VN-2008-004

(15.08.2008)

Cisco WebEx Meeting Manager WebexUCFObject ActiveX Control stack buffer overflow

VN-2008-003

(2007.05.23)

NOD32 Antivirus Two Buffer Overflow Vulnerabilities

VN-2008-002

(08.07.2008)

Multiple DNS implementations vulnerable to cache poisoning

VN-2008-001

(2007.05.31)

Mozilla Firefox Multiple Vulnerabilities

Advices

ST-2011-008

(07.07.2011)

Understanding ISPs

ST-2011-007

(18.05.2011)

Keeping Children Safe Online

ST-2011-006

(01.06.2011)

Dealing with Cyberbullies

ST-2011-005

(28.04.2011)

Using Caution with USB Drives

ST-2011-004

(07.04.2011)

Avoiding the Pitfalls of Online Trading

ST-2011-003

(09.03.2011)

Understanding Hidden Threats: Corrupted Software Files

ST-2011-002

(16.02.2011)

Debunking Some Common Myths

ST-2011-001

(26.01.2011)

Staying Safe on Social Network Sites

ST-2010-019

(06.12.2010)

Shopping Safely Online

ST-2010-018

(15.11.2010)

Understanding Voice over Internet Protocol (VoIP)

ST-2010-017

(29.09.2010)

Cybersecurity for Electronic Devices

ST-2010-016

(12.08.2010)

Guidelines for Publishing Information Online

ST-2010-015

(25.08.2010)

Real-World Warnings Keep You Safe Online

ST-2010-014

(08.09.2010)

Understanding Bluetooth Technology

ST-2010-013

(27.07.2010)

Supplementing Passwords

ST-2010-012

(13.07.2010)

Effectively Erasing Files

ST-2010-011

(23.06.2010)

Understanding Web Site Certificates

ST-2010-010

(09.06.2010)

How Anonymous Are You?

ST-2010-009

(19.05.2010)

Risks of File-Sharing Technology

ST-2010-008

(05.05.2010)

Reviewing End-User License Agreements

ST-2010-007

(28.04.2010)

Avoiding Copyright Infringement

ST-2010-006

(31.03.2010)

Understanding Your Computer: Email Clients

ST-2010-005

(11.03.2010)

Securing Wireless Networks

ST-2010-004

(25.02.2010)

Understanding Your Computer: Web Browsers

ST-2010-003

(27.01.2010)

Protecting Portable Devices: Data Security

ST-2010-002

(11.02.2010)

Understanding Your Computer: Operating Systems

ST-2010-001

(13.01.2010)

Understanding Encryption

ST-2009-020

(04.12.2009)

Protecting Portable Devices: Physical Security

ST-2009-019

(19.11.2009)

Recognizing and Avoiding Spyware

ST-2009-018

(04.11.2209)

Understanding Denial-of-Service Attacks

ST-2009-017

(08.10.2009)

Protecting Your Privacy

ST-2009-016

(29.09.2009)

Using Instant Messaging and Chat Rooms Safely

ST-2009-015

(11.09.2009)

Using Caution with Email Attachments

ST-2009-014

(27.8.2009)

Identifying Hoaxes and Urban Legends

ST-2009-013

(12.08.2009)

Benefits of BCC

ST-2009-012

(20.07.2009)

Reducing Spam

ST-2009-011

(15.07.2009)

Understanding Patches

ST-2009-010

(01.07.2009)

Understanding Anti-Virus Software

ST-2009-009

(18.06.2009)

Understanding Firewalls

ST-2009-008

(03.06.2009)

Good Security Habits

ST-2009-007

(21.05.2009)

Choosing and Protecting Passwords

ST-2009-006

(07.05.2009)

Why is Cyber Security a Problem?

ST-2009-005

(23.04.2009)

Staying Safe on Social Network Sites

ST-2009-004

(13.03.2009)

Coordinating Virus and Spyware Defense

ST-2009-003

(18.02.2009)

Safeguarding Your Data

ST-2009-002

(28.01.2009)

Defending Cell Phones and PDAs Against Attack

ST-2009-001

(07.01.2009)

Understanding Hidden Threats: Corrupted Software Files

ST-2008-017

(04.12.2008)

Shopping Safely Online

ST-2008-016

(20.11.2008)

Dealing with Cyberbullies

ST-2008-015

(04.11.2008)

Using Caution with USB Drives

ST-2008-014

(29.10.2008)

Avoiding the Pitfalls of Online Trading

ST-2008-013

(30.09.2008)

Understanding Hidden Threats: Rootkits and Botnets

ST-2008-012

(17.09.2008)

Preventing and Responding to Identity Theft

ST-2008-011

(03.09.2008)

Understanding Voice over Internet Protocol (VoIP)

ST-2008-010

(20.08.2008)

Cybersecurity for Electronic Devices

ST-2008-009

(23.07.2008)

Understanding Bluetooth Technology

ST-2008-008

(09.07.2008)

Real-World Warnings Keep You Safe Online

ST-2008-007

(28.05.2008)

Effectively Erasing Files

ST-2008-006

(28.05.2008)

Understanding Web Site Certificates

ST-2008-005

(28.05.2008)

Benefits and Risks of Free Email Services

ST-2008-004

(28.05.2008)

Risks of File-Sharing Technology

ST-2008-002

(28.05.2008)

Securing Wireless Networks

ST-2008-003

(28.05.2008)

Recovering from Viruses, Worms, and Trojan Horses

ST-2008-001

(2007.03.10)

Safeguarding Your Data

Partnerships

CERT & CSIRT

Alerts

Warnings

Advices