CERT Bulgaria - Warnings

CERT Bulgaria > EN

Warnings

Here you could find non-technical reports of recent vulnerabilities and other important security information.

Warnings

VN-2011-058

(29.07.2011)

Avaya Secure Access Link (SAL) Gateway information disclosure vulnerability

VN-2011-057

(25.07.2011)

Oracle Outside In CorelDRAW file parser stack buffer overflow

VN-2011-056

(25.07.2011)

Brocade BigIron RX switch ACL bypass vulnerability

VN-2011-055

(15.07.2011)

HP ArcSight Connector Appliance XSS vulnerability

VN-2011-054

(05.07.2011)

ISC BIND 9 RPZ zone named denial-of-service vulnerability

VN-2011-053

(27.06.2011)

Parodia blind SQL injection vulnerability

VN-2011-052

(21.06.2011)

ManageEngine ServiceDesk directory traversal vulnerability

VN-2011-051

(16.06.2011)

LibreOffice 3.3 'Lotus Word Pro' document import filter contains multiple vulnerabilities

VN-2011-050

(14.06.2011)

Adobe Reader and Acrobat font memory corruption vulnerability

VN-2011-049

(07.06.2011)

Autonomy Keyview IDOL contains multiple vulnerabilities in file parsers

VN-2011-048

(01.06.2011)

Cisco AnyConnect SSL VPN arbitrary code execution

VN-2011-047

(15.06.2011)

Adobe Updates for Multiple Vulnerabilities

VN-2011-046

(14.06.2011)

Microsoft Updates for Multiple Vulnerabilities

VN-2011-045

(06.05.2011)

Samsung Data Management Server vulnerable to SQL injection

VN-2011-044

(02.05.2011)

Proofpoint Protection Server contains multiple vulnerabilities

VN-2011-043

(12.04.2011)

Microsoft Updates for Multiple Vulnerabilities

VN-2011-042

(19.04.2011)

Oracle Outside In contains exploitable vulnerabilities in Lotus 123 and Microsoft CAB file parsers

VN-2011-041

(18.04.2011)

Wireshark DECT dissector vulnerability

VN-2011-040

(12.04.2011)

Adobe Flash Player contains unspecified code execution vulnerability

VN-2011-039

(05.04.2011)

Oracle Solaris 10 password hashes leaked through back-out patch files

VN-2011-038

(05.04.2011)

Dell Kace K2000 Appliance unauthenticated access and information disclosure vulnerability

VN-2011-037

(05.04.2011)

NetGear WNAP210 remote password disclosure and password bypass vulnerability

VN-2011-036

(05.04.2011)

ISC dhclient vulnerability

VN-2011-035

(04.04.2011)

pWhois Layer Four Traceroute 3.x vulnerability

VN-2011-034

(01.04.2011)

IPComp encapsulation nested payload vulnerability

VN-2011-033

(21.03.2011)

OpenSLP denial of service vulnerability

VN-2011-032

(21.03.2011)

Foolabs Xpdf contains a denial of service vulnerability

VN-2011-031

(15.03.2011)

MIT KDC vulnerable to double-free when PKINIT enabled

VN-2011-030

(14.03.2011)

Adobe Flash Player contains unspecified code execution vulnerability

VN-2011-029

(08.03.2011)

Microsoft Updates for Multiple Vulnerabilities

VN-2011-028

(07.03.2011)

STARTTLS plaintext command injection vulnerability

VN-2011-027

(02.03.2011)

Wireshark 6LoWPAN denial of service vulnerability

VN-2011-026

(23.02.2011)

IBM WebSphere Portal Server input validation vulnerability

VN-2011-025

(23.02.2011)

Mutare Software Enabled VoiceMail (EVM) system web interface cross-site request forgery vulnerabilities

VN-2011-024

(22.02.2011)

ISC Bind 9 IXFR or DDNS update combined with high query rate DoS vulnerability

VN-2011-023

(18.02.2011)

PivotX password reset vulnerability

VN-2011-022

(16.02.2011)

Microsoft Windows browser election message kernel pool overflow

VN-2011-021

(11.02.2011)

Adobe Shockwave 11.5.9.615 contains multiple memory corruption vulnerabilities

VN-2011-020

(10.02.2011)

Adobe Flash memory corruption vulnerability

VN-2011-019

(08.02.2011)

Microsoft Updates for Multiple Vulnerabilities

VN-2011-018

(04.02.2011)

Majordomo 2 _list_file_get() directory traversal vulnerability

VN-2011-017

(03.02.2011)

Cisco Tandberg E, EX, and C Series default root credentials

VN-2011-016

(03.02.2011)

Sielco Sistemi Winlog server stack overflow

VN-2011-015

(28.01.2011)

Microsoft Windows MHTML script injection vulnerability

VN-2011-014

(27.01.2011)

ISC DHCP server DHCPv6 decline message processing vulnerability

VN-2011-013

(11.01.2011)

Microsoft Updates for Multiple Vulnerabilities

VN-2011-012

(25.01.2011)

Lomtec ActiveWeb Professional 3.0 CMS allows arbitrary file upload and execution

VN-2011-011

(21.01.2011)

CollabNet ScrumWorks Basic Server transmits credential information in plaintext

VN-2011-010

(13.01.2011)

Objectivity/DB administration tools lack authentication

VN-2011-009

(13.01.2011)

ICQ 7 fails to verify the origin of software updates

VN-2011-008

(13.01.2011)

Google Chrome multiple vulnerabilities

VN-2011-007

(13.01.2011)

InduSoft NTWebServer web service stack-based buffer overflow

VN-2011-006

(12.01.2011)

WellinTech KingView 6.53 remote heap overflow vulnerability

VN-2011-005

(11.01.2011)

Ecava IntegraXor web service allows directory traversal outside of web root

VN-2011-004

(11.01.2011)

Libpng 1.5.0 png_set_rgb_to_gray() vulnerability

VN-2011-003

(07.01.2011)

PolyVision RoomWizard insecurely stores Sync Connector Active Directory credentials and uses default administrative password

VN-2011-002

(06.01.2011)

Microsoft Internet Explorer 8 use-after-free vulnerability

VN-2011-001

(05.01.2011)

Microsoft Windows graphics engine thumbnail stack buffer overflow

VN-2010-100

(22.12.2010)

Microsoft WMI Administrative Tools WBEMSingleView.ocx ActiveX control vulnerability

VN-2010-099

(22.12.2010)

Microsoft IIS FTP server memory corruption vulnerability

VN-2010-098

(16.12.2010)

Ecava IntegraXor stack-based buffer overflow vulnerability

VN-2010-097

(15.12.2010)

Invensys Wonderware InBatch and Foxboro I/A Series Batch database lock manager service (lm_tcp) buffer overflow vulnerability

VN-2010-096

(13.12.2010)

Microsoft Internet Explorer CSS use-after-free vulnerability

VN-2010-095

(13.12.2010)

ISC DHCP server vulnerability

VN-2010-094

(14.12.2010)

Exim alternate configuration privilege escalation vulnerability

VN-2010-093

(13.12.2010)

Exim string_format() buffer overflow

VN-2010-092

(14.12.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-091

(08.12.2010)

Apple QuickTime JPEG2000 heap buffer overflow

VN-2010-090

(07.12.2010)

GNU libc regcomp() stack exhaustion denial of service

VN-2010-089

(01.12.2010)

ISC BIND cache vulnerability

VN-2010-088

(01.12.2010)

ISC BIND named validator vulnerability

VN-2010-087

(01.12.2010)

ISC BIND named allow-query vulnerability

VN-2010-086

(30.11.2010)

PHP getSymbol vulnerability allows denial of service

VN-2010-085

(30.11.2010)

AWStats fails to properly handle "\\" when specifying a configuration file directory

VN-2010-084

(26.11.2010)

Microsoft Windows RtlQueryRegistryValues() does not adequately validate registry data

VN-2010-083

(19.11.2010)

RealFlex RealWin HMI service buffer overflows

VN-2010-082

(18.11.2010)

PGP Desktop unsigned data injection vulnerability

VN-2010-081

(09.11.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-080

(03.11.2010)

Microsoft Internet Explorer invalid flag reference vulnerability

VN-2010-079

(03.11.2010)

NetSupport Manager Gateway transmits identifying information in plaintext

VN-2010-078

(01.11.2010)

Attachmate Reflection for the Web cross site scripting vulnerability

VN-2010-077

(28.10.2010)

Adobe Flash code execution vulnerability

VN-2010-076

(25.10.2010)

Linux kernel RDS protocol vulnerability

VN-2010-075

(26.10.2010)

GNU C library dynamic linker expands $ORIGIN in setuid library search path

VN-2010-074

(22.10.2010)

Adobe Shockwave Player Director file 'rcsL' chunk parsing vulnerability

VN-2010-073

(13.10.2010)

SAP BusinessObjects Axis2 Default Admin Password

VN-2010-072

(12.10.2010)

Ghostscript crashes when passing a null ipsp->ip value to the gs_type2_interpret function

VN-2010-071

(12.10.2010)

Oracle WebLogic Node Manager allows arbitrary configuration via UNC path

VN-2010-070

(12.10.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-069

(14.10.2010)

Oracle Updates for Multiple Vulnerabilities

VN-2010-068

(04.10.2010)

ActiveCollab permissions failure

VN-2010-067

(30.09.2010)

Unexpected ACL Behavior in BIND 9.7.2

VN-2010-066

(06.10.2010)

Adobe Reader and Acrobat Affected by Multiple Vulnerabilities

VN-2010-065

(14.09.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-064

(20.09.2010)

Adobe Flash Vulnerabilities

VN-2010-063

(14.09.2010)

Adobe Reader and Acrobat Font Parsing Buffer Overflow Vulnerability

VN-2010-062

(13.09.2010)

Adobe Flash unspecified code execution vulnerability

VN-2010-061

(07.09.2010)

Washington Courts website vulnerable to SQL injection and cross-site scripting

VN-2010-060

(01.09.2010)

Blackboard Transact database credentials disclosure

VN-2010-059

(25.08.2010)

Microsoft Windows based applications may insecurely load dynamic libraries

VN-2010-058

(24.08.2010)

DevonIT weak authentication and buffer overflow in /usr/bin/tm-console-bin

VN-2010-057

(24.08.2010)

Ghostscript Heap Corruption in TrueType bytecode interpreter

VN-2010-056

(16.08.2010)

Wyse ThinOS LPD service buffer overflow vulnerability

VN-2010-055

(11.08.2010)

Adobe Flash and AIR Vulnerabilities

VN-2010-054

(19.08.2010)

Adobe Reader and Acrobat Vulnerabilities

VN-2010-053

(26.08.2010)

Microsoft Windows Insecurely Loads Dynamic Libraries

VN-2010-052

(11.08.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-051

(11.08.2010)

Adobe Flash 10.1 ActionScript AVM1 ActionPush vulnerability

VN-2010-050

(05.08.2010)

FreeType 2 CFF font stack corruption vulnerability

VN-2010-049

(05.08.2010)

Oracle Siebel Option Pack for IE ActiveX control memory initialization vulnerability

VN-2010-048

(04.08.2010)

Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control stack buffer overflow

VN-2010-047

(02.08.2010)

Wind River Systems VxWorks debug service enabled by default

VN-2010-046

(18.07.2010)

Microsoft Windows automatically executes code specified in shortcut files

VN-2010-045

(14.07.2010)

ISC DHCP server fails to handle zero-length client identifier

VN-2010-044

(13.07.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-043

(13.07.2010)

Oracle Updates for Multiple Vulnerabilities

VN-2010-042

(12.07.2010)

Cisco Industrial Ethernet 3000 Series switches have hardcoded SNMP community strings

VN-2010-041

(02.07.2010)

libpng fails to limit number of rows in header

VN-2010-040

(29.06.2010)

Snare Agent web interface cross-site request forgery vulnerabilities

VN-2010-039

(24.06.2010)

S2 NetBox allows unauthenticated HTTP access to node logs, backups, and employee photographs

VN-2010-038

(17.06.2010)

Symantec AppStream and Workspace Streaming vulnerable to arbitrary code download and execution

VN-2010-037

(11.06.2010)

Adobe Flash and AIR Vulnerabilities

VN-2010-036

(10.06.2010)

Microsoft Windows Help and Support Center URI processing vulnerability

VN-2010-035

(08.06.2010)

Adobe Flash, Reader, and Acrobat Vulnerability

VN-2010-034

(08.06.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-033

(07.06.2010)

Adobe Flash ActionScript AVM2 newfunction vulnerability

VN-2010-032

(03.06.2010)

Cisco Network Building Mediator products contain multiple vulnerabilities

VN-2010-031

(01.06.2010)

Accoria Rock Web Server contains multiple vulnerabilities

VN-2010-030

(11.05.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-029

(10.05.2010)

Apple Safari window object invalid pointer vulnerability

VN-2010-028

(06.05.2010)

Consona (formerly SupportSoft) Intelligent Assistance Suite (IAS) cross-site scripting, ActiveX, and Reair Service vulnerabilities

VN-2010-027

(13.04.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-026

(13.04.2010)

Oracle Updates for Multiple Vulnerabilities

VN-2010-025

(13.04.2010)

Adobe Reader and Acrobat Vulnerabilities

VN-2010-024

(12.04.2010)

Java Deployment Toolkit insufficient argument validation

VN-2010-023

(30.03.2010)

Microsoft Internet Explorer Vulnerabilities

VN-2010-022

(06.04.2010)

IntelliCom NetBiter devices have default HICP passwords

VN-2010-021

(02.04.2010)

Foxit Reader vulnerable to arbitrary command execution

VN-2010-020

(02.04.2010)

Oracle Sun Java fails to properly validate Java applet signatures

VN-2010-019

(25.03.2010)

Broadcom NetXtreme managment firmware ASF buffer overflow

VN-2010-018

(24.03.2010)

IntelliCom NetBiter Config HICP hostname buffer overflow

VN-2010-017

(23.03.2010)

Mozilla WOFF decoder integer overflow

VN-2010-015

(09.03.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-014

(09.03.2010)

Microsoft Internet Explorer iepeers.dll use-after-free vulnerability

VN-2010-013

(05.03.2010)

Energizer DUO USB battery charger software allows unauthorized remote system access

VN-2010-012

(02.03.2010)

libpng stalls on highly compressed ancillary chunks

VN-2010-010

(24.02.2010)

Malicious Activity Associated with "Aurora" Internet Explorer Exploit

VN-2010-009

(24.02.2010)

APC Network Management Card web interface vulnerable to cross-site scripting and cross-site request forgery

VN-2010-008

(09.02.2010)

Microsoft Updates for Multiple Vulnerabilities

VN-2010-007

(09.02.2010)

Panda Security ActiveScan fails to properly validate downloaded software

VN-2010-011

(01.03.2010)

Internet Explorer VBScript Windows Help arbitrary code execution

VN-2010-006

(21.01.2010)

Microsoft Internet Explorer Vulnerabilities

VN-2010-005

(14.01.2010)

Microsoft Internet Explorer allows remote code execution

VN-2010-004

(12.01.2010)

NOS Microsystems Adobe getPlus Helper ActiveX control stack buffer overflows

VN-2010-003

(12.02.2010)

Windows XP Macromedia Flash 6 ActiveX control use-after-free vulnerability

VN-2010-002

(12.01.2010)

Microsoft Windows EOT Font and Adobe Flash Player 6 Vulnerabilities

VN-2010-001

(13.01.2010)

Adobe Reader and Acrobat Vulnerabilities

VN-2009-088

(15.12.2009)

Adobe Acrobat and Reader contain a use-after-free vulnerability in the JavaScript Doc.media.newPlayer method

VN-2009-087

(14.12.2009)

Microsoft Indeo video codecs contain multiple vulnerabilities

VN-2009-086

(09.12.2009)

DISA UNIX SRR scripts execute untrusted programs as root

VN-2009-085

(08.12.2009)

NTP mode 7 denial-of-service vulnerability

VN-2009-084

(08.12.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-083

(09.12.2009)

Adobe Flash Vulnerabilities Affect Flash Player and Adobe AIR

VN-2009-082

(25.11.2009)

Microsoft Internet Explorer CSS style element vulnerability

VN-2009-081

(24.11.2009)

TCP may keep its offered receive window closed indefinitely (RFC 1122)

VN-2009-080

(19.11.2009)

Wyse Simple Imager (WSI) includes vulnerable versions of TFTPD32

VN-2009-079

(11.11.2009)

SSL and TLS protocols renegotiation vulnerability

VN-2009-078

(10.11.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-077

(13.10.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-076

(13.10.2009)

Adobe Reader and Acrobat Vulnerabilities

VN-2009-075

(13.10.2009)

Adobe Acrobat and Reader contain vulnerabilities in multiple Document Object JavaScript methods

VN-2009-074

(15.09.2009)

Nginx ngx_http_parse_complex_uri() buffer underflow vulnerability

VN-2009-073

(10.09.2009)

Windows SMB version 2 vulnerability

VN-2009-072

(09.09.2009)

Cyrus IMAPd buffer overflow vulnerability

VN-2009-071

(09.09.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-069

(01.09.2009)

Microsoft Internet Information Server (IIS) FTP server NLST stack buffer overflow

VN-2009-068

(21.08.2009)

Libpurple buffer overflow vulnerability

VN-2009-067

(18.08.2009)

Acer AcerCtrls.APlunch ActiveX Control fails to properly restrict access to methods

VN-2009-066

(11.08.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-065

(06.08.2009)

Apple Updates for Multiple Vulnerabilities

VN-2009-064

(28.07.2009)

Microsoft Windows, Internet Explorer, and Active Template Library (ATL) Vulnerabilities

VN-2009-063

(29.07.2009)

ISC BIND 9 vulnerable to denial of service via dynamic update request

VN-2009-062

(28.07.2009)

ActiveX controls built with Microsoft ATL fail to properly handle initialization data

VN-2009-060

(23.07.2009)

Adobe Flash Vulnerability Affects Flash Player and Other Adobe Products

VN-2009-059

(23.07.2009)

Adobe Flash Player vulnerability

VN-2009-058

(16.07.2009)

Microsoft Office Web Components Spreadsheet ActiveX control vulnerability

VN-2009-057

(14.07.2009)

ISC DHCP dhclient stack buffer overflow

VN-2009-056

(14.07.2009)

Mozilla Firefox 3.5 TraceMonkey JavaScript engine uninitialized memory vulnerability

VN-2009-055

(14.07.2009)

XML signature HMAC truncation authentication bypass

VN-2009-054

(14.07.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-053

(07.07.2009)

Microsoft Video ActiveX Control Vulnerability

VN-2009-052

(07.07.2009)

Microsoft Video ActiveX control stack buffer overflow

VN-2009-051

(19.06.2009)

Foxit Reader contains multiple vulnerabilities in the processing of JPX data

VN-2009-050

(10.06.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-049

(10.06.2009)

Adobe Acrobat and Reader Vulnerabilities

VN-2009-048

(10.06.2009)

Adobe Reader contains multiple vulnerabilities in the processing of JPX data

VN-2009-047

(09.06.2009)

eBay Enhanced Picture Uploader ActiveX control vulnerable to arbitrary command execution

VN-2009-046

(20.05.2009)

NSD vulnerable to one-byte overflow

VN-2009-045

(20.05.2009)

Microsoft IIS WebDAV Remote Authentication Bypass

VN-2009-044

(18.05.2009)

ntpd autokey stack buffer overflow

VN-2009-043

(14.05.2009)

Cyrus SASL library buffer overflow vulnerability

VN-2009-042

(13.05.2009)

Apple Updates for Multiple Vulnerabilities

VN-2009-041

(13.05.2009)

Adobe Reader and Acrobat JavaScript Vulnerabilities

VN-2009-040

(13.05.2009)

Microsoft PowerPoint Multiple Vulnerabilities

VN-2009-039

(06.05.2009)

NuPoint Messenger server transmits authentication credentials in plain text

VN-2009-038

(02.05.2009)

Jetty HTTP server directory traversal vulnerability

VN-2009-037

(29.4.2009)

Adobe Reader and Acrobat customDictionaryOpen() and getAnnots() JavaScript vulnerabilities

VN-2009-036

(17.04.2009)

Xpdf and poppler contain multiple vulnerabilities in the processing of JBIG2 data

VN-2009-035

(15.04.2009)

Oracle Updates for Multiple Vulnerabilities

VN-2009-033

(14.04.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-032

(06.04.2009)

Particle Software IntraLaunch Application Launcher ActiveX control fails to restrict access to dangerous methods

VN-2009-031

(03.04.2009)

Microsoft Office PowerPoint code execution vulnerability

VN-2009-030

(31.03.2009)

SAP AG SAPgui EAI WebViewer3D ActiveX control stack buffer overflow

VN-2009-029

(29.03.2009)

Conficker Worm Targets Microsoft Windows Systems

VN-2009-028

(24.03.2009)

IBM Access Support ActiveX control stack buffer overflow

VN-2009-027

(19.03.2009)

Autonomy KeyView SDK buffer overflow vulnerability

VN-2009-026

(13.03.2009)

Adobe Reader and Acrobat JBIG2 buffer overflow vulnerability

VN-2009-025

(13.03.2009)

PTK contains multiple vulnerabilities

VN-2009-024

(11.03.2009)

Intercepting proxy servers may incorrectly rely on HTTP headers to make connections

VN-2009-023

(11.03.2009)

Microsoft Windows DNS Server response validation vulnerability

VN-2009-022

(09.03.2009)

Adobe Reader and Acrobat JBIG2 buffer overflow vulnerability

VN-2009-021

(02.03.2009)

libpng fails to properly initialize element pointers

VN-2009-020

(27.02.2009)

HP Virtual Rooms ActiveX control fails to restrict access to dangerous methods

VN-2009-019

(23.02.2009)

Intercepting proxy servers may incorrectly rely on HTTP host-headers to make connections

VN-2009-018

(20.02.2009)

Adobe Reader and Acrobat buffer overflow vulnerability

VN-2009-017

(20.02.2009)

Adobe Acrobat and Reader Vulnerability

VN-2009-016

(18.02.2009)

libspf2 DNS TXT record parsing buffer overflow

VN-2009-015

(11.02.2009)

GE Fanuc Proficy HMI/SCADA iFIX uses insecure authentication techniques

VN-2009-014

(10.02.2009)

RIM BlackBerry Application Web Loader ActiveX stack buffer overflow

VN-2009-013

(10.02.2009)

Microsoft Updates for Multiple Vulnerabilities

VN-2009-012

(09.02.2009)

GoAhead Webserver information disclosure vulnerability

VN-2009-011

(05.02.2009)

AREVA e-terrahabitat SCADA systems vulnerabilities

VN-2009-010

(05.02.3009)

Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge URL redirection vulnerability

VN-2009-009

(05.02.2009)

Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge cross-site scripting vulnerability

VN-2009-008

(05.02.2009)

GoAhead Webserver information disclosure vulnerability

VN-2009-007

(28.01.2009)

Autonomy Ultraseek URL redirection vulnerability

VN-2009-006

(22.01.2009)

Apple QuickTime Updates for Multiple Vulnerabilities

VN-2009-005

(20.01.2009)

Microsoft Windows Does Not Disable AutoRun Properly

VN-2009-004

(15.01.2009)

Oracle Updates for Multiple Vulnerabilities

VN-2009-003

(15.01.2009)

Symantec AppStream LaunchObj ActiveX control vulnerable to arbitrary code download and execution

VN-2009-002

(13.01.2009)

Microsoft Updates for Multiple SMB Protocol Vulnerabilities

VN-2009-001

(31.12.2008)

MD5 vulnerable to collision attacks

VN-2008-021

(26.12.2008)

Trend Micro HouseCall ActiveX control notifyOnLoadNative() uses previously free'd memory

VN-2008-020

(26.12.2008)

Trend Micro HouseCall ActiveX control does not adequately validate update server parameters

VN-2008-019

(25.12.2008)

Microsoft SQL Server fails to properly validate parameters to the sp_replwriterovarbin extended stored procedure

VN-2008-018

(17.12.2008)

Microsoft Internet Explorer Data Binding Vulnerability

VN-2008-017

(15.12.2008)

Apple Updates for Multiple Vulnerabilities

VN-2008-016

(11.12.2008)

Microsoft WordPad Text Converter vulnerable to remote code execution

VN-2008-015

(11.12.2008)

Microsoft Internet Explorer 7 XML parsing memory corruption vulnerability

VN-2008-014

(09.12.20008)

Microsoft Updates for Multiple Vulnerabilities

VN-2008-013

(09.12.2008)

Microsoft Vista and Server 2008 vulnerable to memory corruption via saved search

VN-2008-012

(05.12.2008)

Sun Java Updates for Multiple Vulnerabilities

VN-2008-011

(05.12.2008)

Linksys WVC54GC wireless video camera vulnerable to information disclosure

VN-2008-010

(05.12.2008)

Linksys WVC54GC NetCamPlayerWeb11gv2 ActiveX control stack buffer overflow

VN-2008-009

(03.12.2008)

DATAC RealWin buffer overflow

VN-2008-007

(25.11.2008)

SSH CBC vulnerability

VN-2008-006

(20.11.2008)

PHPCow file inclusion vulnerability

VN-2008-005

(05.09.2008)

NetBSD malformed ICMPv6 MLD-QUERY denial of service

VN-2008-004

(15.08.2008)

Cisco WebEx Meeting Manager WebexUCFObject ActiveX Control stack buffer overflow

VN-2008-003

(2007.05.23)

NOD32 Antivirus Two Buffer Overflow Vulnerabilities

VN-2008-002

(08.07.2008)

Multiple DNS implementations vulnerable to cache poisoning

VN-2008-001

(2007.05.31)

Mozilla Firefox Multiple Vulnerabilities

Partnerships

CERT & CSIRT

Warnings