31 Dec 2012 | ALER002 | Vulnérabilité exploité d'Internet Explorer |
|
28 Dec 2012 | STAT52 | |
|
24 Dec 2012 | VULN500 | Tiki Wiki : Tiki Wiki 10.0 contains serialize/unserialize security fix | Systems running Tiki Wiki versions prior to 10.0.
|
24 Dec 2012 | STAT51 | |
|
21 Dec 2012 | VULN499 | TYPO3 : Several Vulnerabilities in extension commerce | Systems running commerce for TYPO3 versions prior
|
21 Dec 2012 | VULN498 | Zend Framework : Potential XML eXternal Entity injection vectors in Zend Framework 1 Zend_Feed component | Systems running Zend Framework versions prior to
|
21 Dec 2012 | VULN497 | Drupal : Drupal core - Multiple vulnerabilities | Systems running Drupal core versions 6.x, 7.x.
|
21 Dec 2012 | VULN496 | Symantec : Symantec Enterprise ,Security Manager Manager/Agent Local Elevation of Privilege | Systems running Symantec ESM Manager/Agent.
|
21 Dec 2012 | VULN495 | US-CERT : Adobe Shockwave player potential vulnerabilities | Systems running Adobe Shockwave player versions
|
21 Dec 2012 | VULN494 | IBM : Security vulnerability in IBM HTTP Server for z/OS Version 5.3 | z/OS running IBM HTTP Server for z/OS Version 5.3.
|
21 Dec 2012 | VULN493 | VMware : VMware security updates for vCSA and ESXi | Systems running VMware ESXi versions 5,
|
18 Dec 2012 | VULN492 | Twiki : TWiki-5.1.3 fix TWiki MAKETEXT Variable arbitrary shell command execution | Systems running twiki versions 4.x, 5.x
|
18 Dec 2012 | VULN491 | RealPlayer : RealNetworks, Inc. Releases Update to Address Security Vulnerabilities | Windows running RealPlayer versions 11.x, SP 1.x,
|
18 Dec 2012 | VULN490 | Squid : Denial of service in cachemgr.cgi | Systems running Squid versions 2.x, 3.x
|
17 Dec 2012 | VULN489 | IBM : IBM Lotus Notes Web application vulnerability | Systems running IBM Lotus Notes Web application
|
17 Dec 2012 | VULN488 | VMware : VMware View Server directory traversal | Systems running
|
14 Dec 2012 | STAT50 | |
|
12 Dec 2012 | VULN487 | Adobe : Security updates available for Adobe Flash Player | Mac OS X running Adobe Flash Player versions
|
12 Dec 2012 | VULN486 | Microsoft : Important Vulnerability in IP-HTTPS Component Could Allow Security Feature Bypass | Windows Server 2008, Server 2012
|
12 Dec 2012 | VULN485 | Microsoft : Important Vulnerability in DirectPlay Could Allow Remote Code Execution | Windows version XP, Vista, 7, 8, Server 2003,
|
12 Dec 2012 | VULN484 | Microsoft : Critical Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution | Windows version XP, Vista, 7, Server 2003,
|
12 Dec 2012 | VULN483 | Microsoft : Critical Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution | Systems running Microsoft Exchange Server
|
12 Dec 2012 | VULN482 | Microsoft : Critical Vulnerability in Microsoft Word Could Allow Remote Code Execution | Systems running Microsoft Word versions 2003,
|
12 Dec 2012 | VULN481 | Microsoft : Critical Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution | Windows versions XP, 7, 8, RT, Vista,
|
12 Dec 2012 | VULN480 | Microsoft : Critical Cumulative Security Update for Internet Explorer | Systems running Internet Explorer versions 6, 7,
|
12 Dec 2012 | VULN479 | Adobe : Hotfix available for ColdFusion 10 and earlier | Systems running ColdFusion versions 10, 9.0.2,
|
12 Dec 2012 | VULN478 | Symantec : Symantec Endpoint Protection Management Consoles Multiple Issues | Systems running
|
07 Dec 2012 | STAT49 | |
|
03 Dec 2012 | VULN477 | IBM : June 2012 Oracle vulnerabilities update to IBM Java in Rational DOORS Web Access | Systems running IBM Rational DOORS Web Access
|
03 Dec 2012 | VULN476 | MODX : MODX Evolution 1.0.6 (and prior) Unauthorized Manager Access | Systems running MODX Evolution versions prior to
|
30 Nov 2012 | STAT48 | |
|
29 Nov 2012 | VULN475 | Google Chrome : Google Chrome version 23.0.1271.91 fix several vulnerabilities | Systems running Google Chrome versions prior to
|
28 Nov 2012 | VULN474 | US-CERT : Novell File Reporter contains multiple vulnerabilities | Systems running Novell File Reporter version
|
28 Nov 2012 | VULN473 | US-CERT : Samsung Printer firmware contains a backdoor administrator account | Samsung Printer firmware,
|
28 Nov 2012 | VULN472 | MediaWiki : MediaWiki 1.18.6, 1.19.3, and 1.20.1 fix Vulnerabilities | Systems running MediaWiki versions prior to
|
28 Nov 2012 | VULN471 | IBM : Potential security exposure from IBM WebSphere Application Server impacts Rational Application Developer | Systems running IBM WebSphere Application Server
|
28 Nov 2012 | VULN470 | Piwik : Piwik.org webserver hacked for a few hours on 2012 Nov 26th | Systems running Piwik versions 1.9.2 downloaded
|
23 Nov 2012 | STAT47 | |
|
22 Nov 2012 | VULN469 | Mozilla : New versions of Firefox, Thunderbird, SeaMonkey fix multiple vulnerabilities | Systems running Firefox versions prior to 17.0,
|
16 Nov 2012 | VULN468 | Horde : New versions of Horde, Horde Groupware Webmail Edition and Kronolith fix XSS | Systems running Horde, Horde Groupware Webmail
|
16 Nov 2012 | VULN467 | VMware : VMware security updates for vSphere API and ESX Service, Console | VMware ESX, VMware ESXi versions 4.1.
|
16 Nov 2012 | STAT46 | |
|
15 Nov 2012 | VULN466 | Skype : Reported Security Issue - RESOLVED | Systems running Skype.
|
15 Nov 2012 | VULN465 | Bugzilla : 4.3.3, 4.2.3, 4.0.8, and 3.6.11 Security Advisory | Systems running Bugzilla versions prior to
|
14 Nov 2012 | VULN464 | Microsoft : Moderate Vulnerabilities in Microsoft Internet Information Services (IIS) Could Allow Information | Systems running Microsoft FTP Service version
|
14 Nov 2012 | VULN463 | Microsoft : Critical Vulnerabilities in .NET Framework Could Allow Remote Code Execution | Systems running Microsoft .NET Framework
|
14 Nov 2012 | VULN462 | Microsoft : Important Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution | Systems running Microsoft Office version 2003,
|
14 Nov 2012 | VULN461 | Microsoft : Critical Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution | Windows version 7, 8, RT, XP, Vista, Server 2003,
|
14 Nov 2012 | VULN460 | Microsoft : Critical Cumulative Security Update for Internet Explorer | Systems running Internet Explorer version 9.
|
14 Nov 2012 | VULN459 | Microsoft : Vulnerabilities in Windows Shell Could Allow Remote Code Execution | Windows version 7, 8, XP, Vista, Server 2003,
|
14 Nov 2012 | VULN458 | Citrix : Citrix XenServer Multiple Security Updates | Systems running Citrix XenServer versions up to
|
09 Nov 2012 | STAT45 | |
|
09 Nov 2012 | VULN457 | Joomla! : Core - Clickjacking | Systems running Joomla! versions 2.5.x prior to
|
09 Nov 2012 | VULN456 | US-CERT : Fortigate UTM appliances share the same default CA certificate | Fortigate UTM appliances software.
|
09 Nov 2012 | VULN455 | Adobe : Security updates available for Adobe Flash Player | Windows, Mac OS X running Adobe Flash Player
|
09 Nov 2012 | VULN454 | TYPO3 : TYPO3-CORE-SA-2012-005 Several Vulnerabilities in TYPO3 Core | Systems running TYPO3 Core version 4.5.x prior to
|
09 Nov 2012 | VULN453 | VMware : VMware Hosted Products and OVF Tool address security issues | Windows running Vmware OVF Tool version 2.1,
|
09 Nov 2012 | VULN452 | Cisco : Cisco Ironport Appliances Sophos Anti-virus Vulnerabilities | Cisco IronPort ESA software,
|
08 Nov 2012 | VULN451 | US-CERT : Sophos Antivirus contains multiple vulnerabilities | Systems running Sophos Antivirus.
|
08 Nov 2012 | VULN450 | US-CERT : Symantec Antivirus products fail to properly handle CAB files | Systems running Symantec Antivirus products.
|
08 Nov 2012 | VULN449 | Apple : APPLE-SA-2012-11-07-1 QuickTime 7.7.3 | Systems running QuickTime versions prior
|
08 Nov 2012 | VULN448 | Apache Tomcat : Several vulnerabilities fixed in Apache Tomcat | Systems running Apache Tomcat versions prior
|
08 Nov 2012 | VULN447 | CMS Made Simple : CMSMS 1.11.2.1 fixes cross-site request forgery vulnerability | Systems running CMS Made Simple versions prior to
|
07 Nov 2012 | VULN446 | Cisco : Cisco Secure Access Control System TACACS+ Authentication Bypass Vulnerability | Systems running Cisco Secure ACS (Access Control
|
07 Nov 2012 | VULN445 | Cisco : Cisco Nexus 1000V Series Switch Software Release 4.2(1)SV1(5.2) Virtual Security Gateway Bypass Issue | Cisco Nexus 1000V Series Switch Software version
|
06 Nov 2012 | VULN444 | Opera : Opera 12.10 fixes multiple vulnerabilities | Systems running Opera versions prior to 12.10.
|
06 Nov 2012 | VULN443 | Videolan : Buffer overflow in PNG decoder | Systems running VLC media player versions prior
|
05 Nov 2012 | VULN442 | Apple: | Systems running Apple OS X
|
05 Nov 2012 | VULN441 | (Apple: APPLE-SA-2012-11-01-1 iOS 6.0.1 (Apple Product Security)) | iOS
|
02 Nov 2012 | STAT44 | |
|
02 Nov 2012 | VULN440 | Cisco : Cisco Prime Data Center Network Manager Remote Command Execution Vulnerability | Systems running Cisco Cisco Prime Data Center
|
31 Oct 2012 | VULN439 | Cisco : Multiple Vulnerabilities in Cisco Unified MeetingPlace Web Conferencing | Systems running Cisco Unified MeetingPlace Web
|
31 Oct 2012 | VULN438 | Plone : Patches to Zope and Plone for several issues, including arbitrary code execution | Systems running Plone, Zope.
|
30 Oct 2012 | VULN437 | NetBSD : End of Life for 4.x on November 17 | NetBSD versions 4.x.
|
30 Oct 2012 | VULN436 | HP : HP-UX Running Java, Remote Indirect Vulnerabilities | HP-UX versions B.11.11, B.11.23, B.11.31
|
30 Oct 2012 | VULN435 | IBM : ITM WebServer HTTP TRACE or TRACK Methods Information Disclosure Vulnerability | Systems running ITM Tivoli Enterprise Portal
|
30 Oct 2012 | VULN434 | EMC : EMC Avamar Client for VMware Sensitive Information Disclosure Vulnerability | Systems running EMC Avamar Client for VMware
|
30 Oct 2012 | VULN433 | TYPO3 : Several Vulnerabilities in extension Formhandler | Systems running Formhandler for TYPO3 versions
|
30 Oct 2012 | VULN432 | ICS-CERT : 3S-SOFTWARE CODESYS IMPROPER ACCESS CONTROL | Systems running 3S-Software CoDeSys.
|
29 Oct 2012 | VULN431 | IP.Board : IP.Board 3.1.x, 3.2.x and 3.3.x Security Update | Systems running IP.Board versions 3.1.x, 3.2.x
|
29 Oct 2012 | VULN430 | Tiki Wiki: Tiki Wiki 6.8 LTS and 9.2 LTS fix security vulnerability | Systems running Tiki Wiki versions prior to
|
29 Oct 2012 | VULN429 | Exim : CRITICAL remote code execution vulnerability fixed | Systems running Exim versions 4.70 up to and
|
29 Oct 2012 | VULN428 | Bestpractical : Security vulnerabilities fixed in RT and RTFM | Systems running RT versions 3.8.x, 4.0.x,
|
29 Oct 2012 | VULN427 | Mozilla : Fixes for Location object issues | Systems running Firefox versions prior to 16.0.2,
|
26 Oct 2012 | STAT43 | |
|
24 Oct 2012 | VULN426 | US-CERT : HP/H3C and Huawei networking equipment h3c-user snmp vulnerability | HP/H3C networking equipment firmware,
|
24 Oct 2012 | VULN425 | US-CERT : DomainKeys Identified Mail Verifiers may inappropriately convey message trust | Systems running DKIM Verifiers.
|
24 Oct 2012 | VULN424 | Adobe : Security update available for Adobe Shockwave Player | Systems running Adobe Shockwave Player
|
19 Oct 2012 | STAT42 | |
|
19 Oct 2012 | VULN423 | US-CERT : Novell ZENworks Asset Management 7.5 web console information disclosure vulnerability | Systems running Novell ZENworks Asset Management
|
19 Oct 2012 | VULN422 | awstats : XSS vulnerability fixed in awstats | Systems running awstats versions prior to 7.1.
|
19 Oct 2012 | VULN421 | APPLE : APPLE-SA-2012-10-16-1 Java for OS X 2012-006 and Java for Mac OS X 10.6 Update 11 | Mac OS X versions 10.6.8, Server 10.6.8,
|
19 Oct 2012 | VULN420 | Drupal : Drupal core - Arbitrary PHP code execution and Information disclosure | Systems running Drupal core versions 7.x prior
|
19 Oct 2012 | VULN419 | OTRS : Security Advisory 2012-03 - XSS vulnerability | Systems running OTRS Help Desk versions 2.4.x,
|
17 Oct 2012 | VULN418 | Oracle : October 2012 Critical Patch Update Released | Systems running Oracle Database, Oracle Fusion
|
16 Oct 2012 | VULN417 | ICS-CERT : ICSA-12-283-01 SIEMENS S7-1200 WEB APPLICATION CROSS-SITE SCRIPTING VULNERABILITY | Siemens S7-1200 PLC firmware versions 2.x, 3.0.0,
|
16 Oct 2012 | VULN416 | Ruby : escaping vulnerability and Unintentional file creation issue fixed | Systems running Ruby versions 1.9.3 prior to
|
16 Oct 2012 | VULN415 | Joomla! : Core - XSS Vulnerability | Systems running Joomla! versions 3.0.0.
|
16 Oct 2012 | VULN414 | phpMyAdmin : XSS and MITM Vulnerabilities fixed in phpMyAdmin 3.5.3 | Systems running phpMyAdmin versions 3.5.x
|
12 Oct 2012 | STAT41 | |
|
12 Oct 2012 | VULN413 | IBM : Vulnerabilities fixed in BM Tivoli Directory Server GSKit component | Systems Tivoli Directory Server versions 6.0, 6.1
|
12 Oct 2012 | VULN412 | EMC : EMC NetWorker Module for Microsoft Applications (NMM) Multiple Vulnerabilities | Systems running EMC NetWorker Module for
|
12 Oct 2012 | VULN411 | IBM : IBM Lotus Notes Traveler open redirect and cross-site scripting vulnerability | Systems running IBM Lotus Notes Traveler versions
|
11 Oct 2012 | VULN410 | Google Chrome : Google Chrome version 22.0.1229.94 fix use after free vulnerability | Systems running Google Chrome versions prior to
|
11 Oct 2012 | VULN409 | HP : HP Secure Web Server for OpenVMS, Remote DoS, Unauthorized Access, Disclosure of Information | OpenVMS running HP Secure Web Serve.
|
11 Oct 2012 | VULN408 | Mozilla : Multiple Vulnerabilities fixed in Firefox, Thunderbird, SeaMonkey | Systems running Firefox versions prior to 16,
|
11 Oct 2012 | VULN407 | RSA : RSA Adaptive Authentication (On-Premise) Information Disclosure Vulnerability | Systems RSA Adaptive Authentication (On-Premise)
|
11 Oct 2012 | VULN406 | Cisco : Multiple Vulnerabilities in the Cisco WebEx Recording Format Player | Systems running Cisco WebEx Recording Format
|
11 Oct 2012 | VULN405 | Cisco : Multiple Vulnerabilities in Cisco Firewall Services Module | Cisco Catalyst 6500 Series Switches OS,
|
11 Oct 2012 | VULN404 | Cisco : Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security,Appliances and Cisco Catalyst 6500 | Cisco ASA software, Cisco Catalyst software.
|
10 Oct 2012 | VULN403 | Microsoft : Important Vulnerability in HTML Sanitization Component Could Allow Elevation of Privilege | Systems running
|
10 Oct 2012 | VULN402 | Microsoft : Important Vulnerabilities in FAST Search Server 2010 for SharePoint Parsing Could Allow,Remote Code | Systems running Microsoft FAST Search Server
|
10 Oct 2012 | VULN401 | Microsoft : Important Vulnerability in ,Kerberos Could Allow Denial of Service | Windows version 7, Server 2008 running Kerberos.
|
10 Oct 2012 | VULN400 | Microsoft : Important Vulnerability in Windows Kernel Could Allow Elevation of Privilege | Windows XP, Server 2003, Vista, Server 2008, 7.
|
10 Oct 2012 | VULN399 | Microsoft : Important Vulnerability in SQL Server Could Allow Elevation of Privilege | Systems running
|
10 Oct 2012 | VULN398 | Microsoft : Important Vulnerability in Microsoft Works Could Allow Remote Code Execution | Systems running Microsoft Works version 9.
|
10 Oct 2012 | VULN397 | Microsoft : Critical Vulnerabilities in Microsoft Word Could Allow Remote Code Execution | Systems running
|
10 Oct 2012 | VULN396 | Adobe : Security updates available for Adobe Flash Player | Windows, Mac OS X running Adobe Flash Player
|
10 Oct 2012 | VULN395 | ISC : Specially crafted DNS data can cause a lockup in named | Systems running
|
5 Oct 2012 | STAT40 | |
|
2 Oct 2012 | VULN394 | Computer Associates : CA20121001-01 Security Notice for CA License | Systems running Computer Associates products.
|
2 Oct 2012 | VULN393 | Citrix : Citrix NetScaler SDX Multiple Security Updates | Systems running Citrix NetScaler SDX versions
|
2 Oct 2012 | VULN392 | IBM : Tivoli Access Manager - illegal-url-substrings feature can be bypassed | -
|
28 Sep 2012 | STAT39 | |
|
27 Sep 2012 | VULN391 | Cisco : Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability | Cisco IOS XE versions 03.02.00.XO.15.0(2)XO.
|
27 Sep 2012 | VULN390 | Cisco : Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability | Cisco IOS versions 12.2, 12.3, 12.4, 15.0, 15.1,
|
27 Sep 2012 | VULN389 | Cisco : Cisco IOS Software Network Address Translation Vulnerabilities | Cisco IOS versions 12.2, 12.4, 15.0, 15.1, 15.2,
|
27 Sep 2012 | VULN388 | Cisco : Cisco IOS Software DHCP and DHCPv6 Denial of Service Vulnerability | Cisco IOS versions 12.2, 12.3, 12.4, 15.0,
|
27 Sep 2012 | VULN387 | CISCO : Cisco IOS Software Intrusion Prevention System Denial of Service Vulnerability | Cisco IOS versions 12.3, 12.4, 15.0, 15.1, 15.2
|
27 Sep 2012 | VULN386 | Cisco : Cisco IOS Software Malformed Border Gateway Protocol Attribute Vulnerability | CISCO IOS versions 15.2, Cisco IOS XE versions
|
27 Sep 2012 | VULN385 | Drupal : Organic groups - Access Bypass | Systems running Organic groups for Drupal
|
27 Sep 2012 | VULN384 | (Trend Micro : Critical patch available for SQL injection attacks in Control Manager (TMCM)) | Systems running Trend Micro Control Manager
|
26 Sep 2012 | VULN383 | Foxit Reader : Security issue fixed in library loading process | Systems running Foxit Reader versions prior
|
26 Sep 2012 | VULN382 | IBM : WebSphere MQ Security Vulnerability: potential denial of service attack on multiplexed server connection channels | Solaris running IBM WebSphere MQ versions 7.0.1,
|
26 Sep 2012 | VULN381 | IBM : IBM Informix Dynamic Server SET COLLATION vulnerability | Systems running IBM Informix Dynamic Server
|
26 Sep 2012 | VULN380 | Google Chrome : Google Chrome 22.0.1229.79 fixes multiple security vulnerabilities | Systems running Google Chrome version prior
|
25 Sep 2012 | VULN379 | RSA : RSA Authentication Agent 7.1 for Microsoft Windows and RSA Authentication Client 3.5 Access Control Vulnerability | Windows XP, Windows 2003 running
|
25 Sep 2012 | VULN378 | APPLE : APPLE-SA-2012-09-24-1 Apple TV 5.1 | Systems running Apple TV 2nd generation and later
|
25 Sep 2012 | VULN377 | IBM : Security Vulnerabilities fixed in IBM WebSphere Application Server | Systems running IBM WebSphere Application Server
|
25 Sep 2012 | VULN376 | phpMyAdmin : Compromised phpMyAdmin archive on SourceForge.net mirror | Systems running phpMyAdmin versions 3.5.
|
24 Sep 2012 | VULN375 | Novell : Vulnerabilities fixed in Novell GroupWise | Systems running GroupWise versions 8.0x, 2012 and
|
24 Sep 2012 | VULN374 | Joomla! : Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10 | Systems running Joomla 2.5.x versions prior
|
24 Sep 2012 | VULN373 | Microsoft : Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10 | Systems running Internet Explorer version 10.
|
21 Sep 2012 | VULN372 | Apache : Apache CXF is vulnerable to SOAP Action spoofing attacks on Document Literal web services | systems running Apache CXF versions 2.4.x, 2.5.x,
|
20 Sep 2012 | VULN371 | APPLE : APPLE-SA-2012-09-19-3 Safari 6.0.1 | Mac OS X running Safari versions prior to 6.0.1.
|
20 Sep 2012 | VULN370 | APPLE : APPLE-SA-2012-09-19-1 iOS 6 | iOS versions prior to 6.
|
20 Sep 2012 | VULN369 | APPLE : OS X Mountain Lion v10.8.2, OS X Lion v10.7.5 and Security Update 2012-004 | Mac OS X versions 10.6.8, 10.7.x prior to 10.7.5,
|
18 Sep 2012 | VULN368 | Microsoft : Unpatched Vulnerability in Internet Explorer Could Allow Remote Code Execution | Systems running Internet Explorer versions 6, 7,
|
18 Sep 2012 | VULN367 | APPLE : APPLE-SA-2012-09-17-1 Apple Remote Desktop 3.5.3 | Systems running Apple Remote Desktop versions 3
|
17 Sep 2012 | VULN366 | Moodle: Multiple vulnerabilities fixed in Moodle | Systems running Moodle versions 2.1.x, 2.2.x,
|
14 Sep 2012 | VULN365 | Google: Chrome for Android 18.0.1025308 fixes several vulnerabilities | Systems running Chrome for Android versions
|
14 Sep 2012 | VULN364 | Atlassian: Confluence Security Advisory 2012-09-11 | Systems running Atlassian Confluence versions
|
14 Sep 2012 | VULN363 | IBM : Security Vulnerabilities, HIPER and Special Attention APARs fixed in DB2 for Linux, UNIX, and Windows Version | AIX, HP-UX, Linux, Solaris, Windows running
|
14 Sep 2012 | STAT37 | |
|
14 Sep 2012 | VULN362 | US-CERT: Trend Micro InterScan Messaging Security Suite is vulnerable to XSS and CSRF vulnerabilities | Systems running Trend Micro InterScan Messaging
|
14 Sep 2012 | VULN361 | IBM: AIX NFSv4 vulnerability | AIX versions 5.3, 6.1, 7.1 running NFS version 4.
|
14 Sep 2012 | VULN360 | Apache : Apache HTTP Server 2.2.23 and 2.4.3 fix security vulnerabilities | Systems running Apache versions prior to 2.2.23,
|
14 Sep 2012 | VULN359 | Citrix : Vulnerability in Citrix Receiver with Online Plug-in for Windows could result in arbitrary code execution | Windows running
|
14 Sep 2012 | VULN358 | ISC : Reducing the expiration time for an IPv6 lease may cause the DHCP server to crash | Systems running ISC DHCP versions 4.1.x, 4.2.x.
|
14 Sep 2012 | VULN357 | ISC : A specially crafted Resource Record could cause named to terminate | Systems running BIND versions 9 prior to
|
13 Sep 2012 | VULN356 | APPLE : iTunes 10.7 fixes multiple vulnerabilities in WebKit | Windows version 7, Vista, XP
|
13 Sep 2012 | VULN355 | Cisco : Cisco Unified Presence and Jabber Extensible Communications Platform,Stream Header Denial of Service Vulnerability | Systems running
|
13 Sep 2012 | VULN354 | Cisco : Cisco ASA-CX and Cisco PRSM Log Retention Denial of Service Vulnerability | Cisco ASA-CX Context-Aware Security appliance
|
12 Sep 2012 | VULN353 | Microsoft : Important Vulnerability in System Center Configuration Manager Could Allow Elevation of Privilege | Systems running
|
12 Sep 2012 | VULN352 | Microsoft : Important Vulnerability in Visual Studio Team Foundation Server Could Allow Elevation of Privilege | Systems running
|
12 Sep 2012 | VULN351 | Adobe : Security update Hotfix available for ColdFusion 10 and earlier | Systems running Adobe ColdFusion versions
|
12 Sep 2012 | VULN350 | Microsoft : Update Rollup for ActiveX Kill Bits | Windows running
|
10 Sep 2012 | VULN349 | Xen : Multiple security vulnerabilities fixed | Systems running Xen.
|
10 Sep 2012 | VULN348 | WordPress : WordPress 3.4.2 Maintenance and Security Release | Systems running WordPress versions prior to 3.4.2.
|
10 Sep 2012 | VULN347 | FreeRADIUS : Version 2.2.0 is released: upgrade NOW | Systems running FreeRADIUS versions prior to 2.2.0.
|
7 Sep 2012 | STAT36 | |
|
7 Sep 2012 | VULN346 | Webmin : Webmin Multiple Vulnerabilities | Webmin contains input validation vulnerabilities
|
6 Sep 2012 | VULN345 | Citrix : Citrix XenServer Multiple Security Updates | Systems running
|
6 Sep 2012 | VULN344 | Tiki Wiki: Tiki 8.5 and 9.1 Released | Systems running
|
6 Sep 2012 | VULN343 | Apple : APPLE-SA-2012-09-05-1 Java for OS X 2012-005 and Java for Mac OS X 10.6 Update 10 | Mac OS X version 10.6.8, 10.7, 10.8
|
5 Sep 2012 | VULN342 | Asterisk : Asterisk Manager User Unauthorized Shell Access | Systems running
|
3 Sep 2012 | VULN341 | VMware : VMware vSphere and vCOps updates to third party libraries | Systems running VMware vCenter version 4.1,
|
28 Aug 2012 | ALER001 | Vulnerabilite exploitee sur Java Runtime Environment (JRE) |
|
24 Aug 2012 | STAT34 | |
|
23 Aug 2012 | VULN340 | Apache : Apache HTTP Server Information Disclosure and Cross-Site Scripting Vulnerabilities | Systems running Adobe Flash Player version
|
23 Aug 2012 | VULN339 | Apache : Apache HTTP Server Information Disclosure and Cross-Site Scripting Vulnerabilities | Systems running Apache version anterior to 2.4.3.
|
17 Aug 2012 | STAT33 | |
|
17 Aug 2012 | VULN338 | phpMyAdmin : Multiple XSS in Table operations, Database structure, Trigger and Visualize GIS data pages | Systems running phpMyAdmin version 3.4.x, 3.5.x
|
16 Aug 2012 | VULN337 | Cisco : Cisco NX-OS FCIP Remote Denial of Service Vulnerability | Cisco NX-OS versions 4.2, 5.2.
|
16 Aug 2012 | VULN336 | TYPO3 : Several Vulnerabilities in TYPO3 Core | Systems running
|
16 Aug 2012 | VULN335 | Microsoft : Important Vulnerability in JScript and VBScript Engines Could Allow Remote Code Execution | Windows version XP, Server 2003, Vista,
|
16 Aug 2012 | VULN334 | Microsoft : Critical Vulnerability in Windows Common Controls Could Allow Remote Code Execution | Systems running Windows Common Controls,
|
16 Aug 2012 | VULN333 | Microsoft : Critical Vulnerability in Microsoft Exchange Server WebReady Document Viewing Could Allow Remote | Systems running
|
16 Aug 2012 | VULN332 | Microsoft : Important Vulnerability in Microsoft Visio Could Allow Remote Code Execution | Systems running Microsoft Visio version 2010,
|
16 Aug 2012 | VULN331 | Microsoft : Important Vulnerability in Microsoft Office Could Allow for Remote Code Execution | Systems running Microsoft Office versions 2007,
|
16 Aug 2012 | VULN330 | Microsoft : Critical Vulnerabilities in Windows Could Allow Remote Code Execution, Privilege elevation | Windows versions XP, Server 2003, Vista, 7,
|
16 Aug 2012 | VULN329 | Microsoft : Critical Vulnerability in Remote Desktop Could Allow Remote Code Execution | Windows version XP SP3 running RDP.
|
16 Aug 2012 | VULN328 | Microsoft : Critical Cumulative Security Update for Internet Explorer | Systems running Internet Explorer versions 6, 7,
|
16 Aug 2012 | VULN327 | Cisco : Cisco IOS XR Software Route Processor Denial of Service Vulnerability | Cisco IOS XR.
|
16 Aug 2012 | VULN326 | Adobe : Security update available for Adobe Reader and Acrobat | Systems running
|
16 Aug 2012 | VULN325 | Adobe : Security update for Adobe Flash Player and Shockwave Player | Systems running Adobe Flash Player versions prior
|
14 Aug 2012 | VULN324 | Oracle : Security Alert CVE-2012-3132 Released | Systems running Oracle Database Server.
|
13 Aug 2012 | VULN323 | HP : HP Network Node Manager i (NNMi) running PostgreSQL, Remote Execution of Arbitrary Code, Denial of Service | Systems running
|
13 Aug 2012 | VULN322 | EMC : Iomega StorCenter/EMC Lifeline Remote Access Vulnerability | Iomega StorCenter/EMC Lifeline firmware.
|
13 Aug 2012 | VULN321 | IBM : IBM WebSphere MQ File Transfer Edition Web Gateway vulnerabilities fixed | Systems running
|
10 Aug 2012 | STAT32 | |
|
10 Aug 2012 | VULN320 | US-CERT : HP Arcsight Logger and Connector appliances cross-site scripting vulnerability | HP Arcsight appliances software.
|
10 Aug 2012 | VULN319 | phpMyAdmin : Path disclosure due to missing library | Systems running phpMyAdmin version 3.5.x
|
10 Aug 2012 | VULN318 | TYPO3 : Cross-site scripting vulnerability in extension powermail for TYPO3 | Systems running powermail for TYPO3 version
|
10 Aug 2012 | VULN317 | Xen : HVM guest destroy p2m teardown host DoS vulnerability | Systems running Xen version 4.0, 4.1.
|
10 Aug 2012 | VULN316 | Ruby on Rails : Rails 3.2.8 fixes three important security vulnerabilities | Systems running Ruby on Rails version
|
3 Aug 2012 | VULN315 | US-CERT : Solarwinds Network Performance Monitor 10.2.2 contains multiple vulnerabilities | Systems running Solarwinds Network Performance
|
3 Aug 2012 | VULN314 | IBM : Two GKIT vulnerabilities impact Rational Directory Server 5.2.x Tivoli | Systems running IBM Rational Directory Server
|
3 Aug 2012 | VULN313 | BlackBerry : Vulnerabilities in Adobe Flash Player version included with the BlackBerry PlayBook tablet software | BlackBerry® PlayBook™ tablet software versions
|
3 Aug 2012 | STAT31 | |
|
2 Aug 2012 | VULN312 | LibreOffice : Multiple heap-based buffer overflows in the XML manifest encryption handling code | Systems running LibreOffice versions prior to
|
2 Aug 2012 | VULN311 | Opera : Several vulnerabilities fixed in Opera 12.01, 11.66 | Systems running Opera versions prior to
|
2 Aug 2012 | VULN310 | IBM : ASN.1 PARSING VULNERABILITY IN SOME DATAPOWER SERVICES AND COMMANDS | WebSphere DataPower SOA Appliances firmware.
|
2 Aug 2012 | VULN309 | US-CERT : Dell SonicWALL Scrutinizer SQL injection vulnerability | Systems running Dell SonicWALL Scrutinizer
|
2 Aug 2012 | VULN308 | Citrix : Security Vulnerabilities in Citrix Access Gateway Standard Edition | Systems running
|
1 Aug 2012 | VULN307 | Google Chrome : Stable Channel 21.0.1180.57 and 21.0.1180.60 fix security vulnerabilities | Mac OS X, Linux running Google Chrome versions
|
1 Aug 2012 | VULN306 | Dr.Web : Security update for Dr.Web Enterprise Security Suite | Systems running Dr.Web Enterprise Security Suite.
|
1 Aug 2012 | VULN305 | MIT krb5 : KDC heap corruption and crash vulnerabilities | Systems running
|
1 Aug 2012 | VULN304 | Django : XSS ans DoS vulnerabilities fixed in Django | Systems running
|
27 Jul 2012 | STAT30 | |
|
27 Jul 2012 | VULN303 | DRUPAL : Vulnerabilities fixed in several modules | Systems running
|
27 Jul 2012 | VULN302 | Xen : Xen Security Advisory 10 - HVM guest user mode MMIO emulation DoS | Systems running Xen with HVM guests support.
|
27 Jul 2012 | VULN301 | Bestpractical : Security vulnerabilities in three commonly deployed RT extensions | Systems running
|
27 Jul 2012 | VULN300 | Citrix : Vulnerability in Citrix Provisioning Services Could Result in Arbitrary Code Execution | Systems running Citrix Provisioning Services
|
27 Jul 2012 | VULN299 | Debian : isc-dhcp security update | Debian version squeeze running isc-dhcp.
|
27 Jul 2012 | VULN298 | APPLE : APPLE-SA-2012-07-25-2 Xcode 4.4 | OS X Lion version 10.7.4 and later running
|
26 Jul 2012 | VULN297 | HP : HP-UX CIFS Server (Samba) Remote Execution of,Arbitrary Code Elevation of Privileges | HP-UX versions B.11.11, B.11.23, B.11.31, running
|
26 Jul 2012 | VULN296 | NetBSD : BIND resolver DoS when using DNSSEC Validation | NetBSD versions 4.0.x, 5.x, 6 BETA, current
|
26 Jul 2012 | VULN295 | IBM : WebSphere MQ Security Vulnerability | OS/400, UNIX, Windows, z/OS
|
26 Jul 2012 | VULN294 | APPLE : APPLE-SA-2012-07-25-1 Multiple vulnerabilities fixed in Safari 6.0 | -
|
25 Jul 2012 | VULN293 | Microsoft : Vulnerabilities in Microsoft Exchange and FAST Search Server 2010 for SharePoint Parsing Could Allow Remote | Systems running
|
25 Jul 2012 | VULN292 | ISC : Denial of Service vulnerabilities fixed in ISC DHCP | Systems running ISC DHCP versions prior to
|
25 Jul 2012 | VULN291 | ISC : Memory Leak and "Bad Cache" Assertion Failure fixed in BIND9 | Systems running BIND9 versions 9.9.0 up to and
|
24 Jul 2012 | VULN290 | Libexif : libexif project security advisory | Systems running libexif versions prior to 0.6.21.
|
24 Jul 2012 | VULN289 | HP : HP Operations Agent and HP Performance Agent Remote Execution of Arbitrary Code | AIX, HP-UX, Linux, Solaris, Windows running
|
24 Jul 2012 | VULN288 | Wireshark : crash in PPP dissector and Large loop in the NFS dissector fixed | Linux running Wireshark version 1.4.x prior to
|
24 Jul 2012 | VULN287 | IBM : System Packages Update Required to fix CVE-2012-2955/CVE-2012-2202 Vulnerabilities | Linux running
|
23 Jul 2012 | VULN286 | Symantec : Symantec Web Gateway Security Issues | Systems running Symantec Web Gateway version
|
23 Jul 2012 | VULN285 | Symantec : Symantec System Recovery 2011 and Backup Exec System Recovery 2010 DLL Loading | Systems running
|
20 Jul 2012 | STAT29 | |
|
20 Jul 2012 | VULN284 | PHP : Potential overflow in _php_stream_scandir and open_basedir bypass fixed | Systems running PHP versions prior to 5.4.5,
|
18 Jul 2012 | VULN283 | Mozilla : Multiple vulnerabilities fixed in Firefox, Thunderbird, SeaMonkey | Systems running
|
18 Jul 2012 | VULN282 | Barracuda Networks : Resolved parameter validation issue with the Barracuda SSL VPN for authenticated users | Barracuda SSL VPN firmware release prior
|
18 Jul 2012 | VULN281 | CakePHP : CakePHP 2.1.5 & 2.2.1 | Systems running CakePHP versions prior to 2.1.5,
|
18 Jul 2012 | VULN280 | Moodle : Multiple vulnerabilities fixed in Moodle | Systems running Moodle versions 2.3,
|
18 Jul 2012 | VULN279 | Oracle : July 2012 Critical Patch Update Released | Systems running Oracle Database,
|
13 Jul 2012 | STAT28 | |
|
13 Jul 2012 | VULN278 | VMware : RSA Authentication Manager 7.1 all platforms, including Appliance 3.0 | Systems running RSA Authentication Manager
|
13 Jul 2012 | VULN277 | VMware : VMware ESXi update to third party library | VMware ESXi version 5.0.
|
11 Jul 2012 | VULN276 | Microsoft : Vulnerabilities in Gadgets Could Allow Remote Code Execution | Windows version Vista, 7
|
11 Jul 2012 | VULN275 | Microsoft : Unauthorized Digital Certificates Could Allow Spoofing | Windows version XP, 2003, Vista, 7, 2008.
|
11 Jul 2012 | VULN274 | Microsoft : Important Vulnerability in Microsoft Office for Mac Could Allow Elevation of Privilege | Mac OS X running
|
11 Jul 2012 | VULN273 | Microsoft : Important Vulnerabilities in SharePoint Could Allow Elevation of Privilege | Systems running
|
11 Jul 2012 | VULN272 | Microsoft : Important Vulnerability in TLS Could Allow Information Disclosure | Windows version XP, 2003, Vista, 7, 2008
|
11 Jul 2012 | VULN271 | Microsoft : Important Vulnerability in Windows Shell Could Allow Remote Code Execution | Windows version XP, 2003, Vista, 7, 2008
|
11 Jul 2012 | VULN270 | Microsoft : Important Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege | Windows version XP, 2003, Vista, 7, 2008
|
11 Jul 2012 | VULN269 | Microsoft : Important Vulnerability in Visual Basic for Applications Could Allow Remote Code Execution | Systems running Microsoft Office versions 2003,
|
11 Jul 2012 | VULN268 | Microsoft : Vulnerability in Microsoft Data Access Components Could Allow Remote Code Execution | Windows version XP, 2003, Vista, 7, 2008
|
11 Jul 2012 | VULN267 | Microsoft : Critical Cumulative Security Update for Internet Explorer | Windows Vista, Windows 7, Windows Server 2008
|
11 Jul 2012 | VULN266 | Microsoft : Critical Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution | Windows XP, Windows Vista, Windows 7,
|
06 Jul 2012 | STAT27 | |
|
06 Jul 2012 | VULN265 | ICS-CERT : WONDERWARE SUITELINK UNALLOCATED UNICODE STRING VULNERABILITY | Systems running Wonderware products built prior to
|
06 Jul 2012 | VULN264 | ASTERISK : Possible resource leak and Remote crash vulnerabilities fixed | Systems running
|
04 Jul 2012 | VULN263 | SPIP : Faille CRITIQUE corrigee dans SPIP | Systems running SPIP versions prior to
|
29 Jun 2012 | STAT26 | |
|
22 Jun 2012 | STAT25 | |
|
21 Jun 2012 | VULN262 | Joomla! : [20120601] - Core - Privilege Escalation | Systems running Joomla! avec des versions
|
15 Jun 2012 | STAT24 | |
|
15 Jun 2012 | VULN261 | PHP : PHP 5.3.14 and PHP 5.4.4 fix multiple security issues | Systems running PHP versions prior to 5.4.4,
|
15 Jun 2012 | VULN260 | Nagios XI : Nagios XI 2011R3.0 fixes XSS vulnerability | Systems running Nagios XI versions prior to
|
15 Jun 2012 | VULN259 | Gallery : Gallery 3.0.4 Security Release Available | Systems running Gallery versions prior to 3.0.4.
|
15 Jun 2012 | VULN258 | Asterisk : Skinny Channel Driver Remote Crash Vulnerability | Systems running Asterisk Open Source versions 10.x.
|
15 Jun 2012 | VULN257 | Citrix : Citrix XenServer Multiple Security Updates | Systems running Citrix XenServer versions 5.x, 6.x.
|
15 Jun 2012 | VULN256 | MediaWiki : MediaWiki 1.17.5, 1.18.4, 1.19.1 fixes XSS vulnerability | Systems running MediaWiki versions prior to 1.17.5,
|
14 Jun 2012 | VULN255 | SPIP : SPIP 3.0.2, 2.1.15 et 2.0.20 fix security vulnerabilities | Systems running SPIP versions prior to 3.0.2.
|
14 Jun 2012 | VULN254 | APPLE : APPLE-SA-2012-06-12-1 Java for OS X 2012-004 and Java for Mac OS X 10.6 Update 9 | Mac OS X version 10.6.8, Server 10.6.8, 10.7.4,
|
14 Jun 2012 | VULN253 | VMware : VMware hosted products and ESXi and ESX patches address security issues | Systems running
|
14 Jun 2012 | VULN252 | NetBSD : Intel processors sysret to non-canonical address | NetBSD versions current, 6.0 Beta, 5.x, 4.x.
|
12 Jun 2012 | VULN251 | MySQL : Security bug fixed in MySQL 5.1.63 | Systems running MySQL versions 5.1, 5.2
|
11 Jun 2012 | VULN250 | Adobe : Security updates available for Adobe Flash Player | Windows, Macintosh, running Adobe Flash
|
08 Jun 2012 | STAT23 | |
|
05 Jun 2012 | VULN249 | US-CERT : Microsoft Windows Unauthorized Digital Certificates | Windows.
|
04 Jun 2012 | VULN248 | (IBM : Unauthorized File Access Security Vulnerability in DB2 XML Feature (CVE-2012-0713)) | Systems running IBM® DB2 versions 9.5, 9.7, 9.8.
|
04 Jun 2012 | VULN247 | Drupal : Drupal core multiple vulnerabilities | Systems running Drupal core versions 7.x prior
|
04 Jun 2012 | VULN246 | Ruby on Rails : SQL Injection Vulnerability and Unsafe Query Generation Risk fixed | Systems running Ruby on Rails versions prior to
|
04 Jun 2012 | VULN245 | (strongSwan : strongSwan 4.6.4 Released (CVE-2012-2388)) | Systems running BIND versions 9.
|
04 Jun 2012 | VULN244 | ISC : Handling of zero length rdata can cause named to terminate unexpectedly | Systems running BIND versions 9.
|
01 Jun 2012 | VULN243 | HP : HP LoadRunner Running on Windows, Remote Execution of Arbitrary Code | Windows running HP LoadRunner version 11.00.
|
01 Jun 2012 | STAT22 | |
|
01 Jun 2012 | VULN242 | Atlassian : High Severity XML Parsing Vulnerability | Systems running Atlassian JIRA versions up to and
|
01 Jun 2012 | VULN241 | US-CERT : Seagate BlackArmor device static administrator password reset vulnerability | Seagate BlackArmor software.
|
01 Jun 2012 | VULN240 | Red Hat : Important kernel security and bug fix update | Red Hat Enterprise Linux version 5.
|
31 May 2012 | VULN239 | Horde : XSS fixed in Horde Groupware and Horde Groupware Webmail Edition | Systems running
|
31 May 2012 | VULN238 | PostgreSQL : Security Patch 2012-05-30 | Systems running PostgreSQL.
|
31 May 2012 | VULN237 | VMware : VMware vMA addresses a security issue | Systems running VMware vMA versions 4.0, 4.1,
|
31 May 2012 | VULN236 | Asterisk : Remote crash vulnerabilities in IAX2 and Skinny channel drivers | Systems running
|
31 May 2012 | VULN235 | FreeBSD : Incorrect crypt() hashing | FreeBSD running crypt() function.
|
31 May 2012 | VULN234 | FreeBSD : OpenSSL multiple vulnerabilities | FreeBSD running openssl.
|
31 May 2012 | VULN233 | IBM : Security Vulnerabilities fixed in IBM WebSphere Application Server 7.0.0.23 | sYSTEMS running IBM WebSphere Application Server
|
31 May 2012 | VULN232 | Cisco : Cisco IOS XR Software Route Processor Denial of Service Vulnerability | Cisco IOS XR Software versions 4.0.3, 4.0.4,
|
25 May 2012 | STAT21 | |
|
24 May 2012 | VULN231 | IBM : IBM Lotus Quickr 8.2 for Domino ActiveX control buffer overflow vulnerability | Systems running IBM Lotus Quickr 8.2 for Domino
|
24 May 2012 | VULN230 | Google Chrome : Google Chrome version 19.0.1084.52 fixes multiple vulnerabilities | Systems running Google Chrome versions prior
|
24 May 2012 | VULN229 | DRUPAL : BrowserID - Multiple Vulnerabilities | Systems running BrowserID (Mozilla Persona)
|
24 May 2012 | VULN228 | DRUPAL : Taxonomy List - Cross Site Scripting | Systems running
|
24 May 2012 | VULN227 | Apache : Apache Commons Compress and Apache Ant denial of service vulnerability | Systems running
|
23 May 2012 | VULN226 | Wireshark : Denial of Service vulnerabilities fixed in Wireshark | Systems running Wireshark versions 1.4, 1.6
|
23 May 2012 | VULN225 | RT : Security vulnerabilities fixed in RT | Systems running RT versions prior to 3.8.12, 4.0.6.
|
23 May 2012 | VULN224 | Citrix : Vulnerability in Citrix XenApp could result in denial of service | Systems running Citrix XenApp versions up to and
|
21 May 2012 | VULN223 | HP : HP OpenVMS ACMELOGIN, Local Unauthorized Access and Increased Privileges | HP OpenVMS Alpha versions 8.3, 8.4,
|
21 May 2012 | VULN222 | Serendipity : Serendipity 1.6.2 fixes SQL injection vulnerability | Systems running Serendipity versions prior
|
21 May 2012 | VULN221 | Moodle : Multiple vulnerabilities fixed in Moodle | Systems running Moodle versions 2.2 to 2.2.2+,
|
21 May 2012 | VULN220 | Symantec : Symantec Web Gateway Multiple Security Issues | Systems running Symantec Web Gateway
|
21 May 2012 | VULN219 | HP : HP Business Service Management 9.12 remote code execution vulnerability | Systems running HP Business Service Management
|
18 May 2012 | STAT20 | |
|
18 May 2012 | VULN218 | SPIP : SPIP 2.1.14, 2.0.19 et 1.9.2.p changent maintenant ! | Systems running SPIP versions prior to 2.1.14,
|
18 May 2012 | VULN217 | Google Chrome : Google Chrome 19 fixes multiple security vulnerabilities | Systems running Google Chrome versions 19.
|
18 May 2012 | VULN216 | sudo : IP addresses in sudoers with netmask may match additional hosts | Systems running sudo versions 1.6.9p3 up to and
|
18 May 2012 | VULN215 | OpenOffice.org : Apache OpenOffice 3.4 fixes integer overflow and memory overwrite vulnerabilities | Systems running OpenOffice.org versions 3.3,
|
18 May 2012 | VULN214 | LibreOffice : CVE-2012-1149 Integer overflows in graphic object loading | Systems running LibreOffice versions prior
|
18 May 2012 | VULN213 | APPLE : APPLE-SA-2012-05-15-1 QuickTime 7.7.2 | Systems running QuickTime versions prior to 7.7.2.
|
15 May 2012 | VULN212 | Sympa: Security breaches in archives management | Systems running Sympa
|
11 May 2012 | STAT19 | |
|
04 May 2012 | VULN211 | Adobe : Security update available for Adobe Flash Player | Systems running Adobe Flash Player versions prior
|
04 May 2012 | STAT18 | |
|
04 May 2012 | VULN210 | PHP : PHP 5.3.12, PHP 5.4.2 fixes security vulnerabilities | Systems running PHP versions prior to 5.3.12,
|
03 May 2012 | VULN209 | FreeBSD : OpenSSL multiple vulnerabilities | FreeBSD running OpenSSL.
|
03 May 2012 | VULN208 | VMware : VMware Workstation, Player, ESXi and ESX patches address critical security issues | Systems running VMware Workstation versions prior to 8.0.2,
|
03 May 2012 | VULN207 | Drupal: Drupal core multiple vulnerabilities | Systems running Drupal core versions 7.x
|
03 May 2012 | VULN206 | US-CERT : PHP-CGI query string parameter vulnerability | Systems running PHP. .
|
02 May 2012 | VULN205 | Oracle: Oracle Security Alert for CVE-2012-1675 | Systems running Oracle database versions 11g, 10g. .
|
02 May 2012 | VULN204 | Google Chrome : Chrome Stable Channel update 18.0.1025.168 fixes security vulnerabilities | Systems running Chrome Stable Channel versions
|
02 May 2012 | VULN203 | Samba : Incorrect permission checks when granting/removing privileges can compromise file server security | Systems running Samba versions 3.x prior to 3.6.5,
|
02 May 2012 | VULN202 | VMware : VMware ESX updates to ESX Service Console | Systems running VMware ESX versions 4.
|
02 May 2012 | VULN201 | Citrix : Vulnerability in Citrix Provisioning Services Could Result in Arbitrary Code Execution | Systems running
|
27 Apr 2012 | STAT17 | |
|
25 Apr 2012 | VULN200 | Mozilla : Security vulnerabilities fixed in Firefox, Thunderbird, SeaMonkey | Systems running Firefox versions prior to 12.0,
|
25 Apr 2012 | VULN199 | WebCalendar : WebCalendar 1.2.5 fixes various security vulnerabilities | Systems running WebCalendar versions prior to 1.2.5.
|
25 Apr 2012 | VULN198 | vBulletin : vBulletin Security Patch for vBulletin 4.1.12 for Suite & Forum - 04/23/2012 | Systems running vBulletin for Suite & Forum
|
24 Apr 2012 | VULN197 | Asterisk : Several vulnerabilities fixed in new versions of Asterisk | Systems running Asterisk Open Source versions
|
23 Apr 2012 | VULN196 | Shibboleth : Shibboleth Service Provider Security Advisory [19 April 2012] | Systems running Shibboleth Service Provider.
|
23 Apr 2012 | VULN195 | WordPress : WordPress 3.3.2 (and 3.4 Beta 3), security update for all previous versions | Systems running WordPress versions prior to 3.3.2,
|
23 Apr 2012 | VULN194 | SPIP : Mise =?UTF-8?B?w6Agam91ciBk?= =?UTF-8?B?ZSBwcmludGVtcHMgISBOb3V2ZWxsZXMgdmVyc2lvbnMgU1BJUCAxLjkuMm8sIDI=?= | Systems running TYPO3 Core versions prior to 4.4.15,
|
23 Apr 2012 | VULN193 | TYPO3 : Cross-Site Scripting Vulnerability in TYPO3 Core | Systems running TYPO3 Core versions prior to 4.4.15,
|
20 Apr 2012 | STAT16 | |
|
20 Apr 2012 | VULN192 | Bugzilla : 4.2, 4.0.5, and 3.6.8 Security Advisory | Systems running Bugzilla versions prior to 3.6.9, 4.0.6, 4.2.1.
|
20 Apr 2012 | VULN191 | (OpenSSL : ASN1 BIO vulnerability (CVE-2012-2110)) | Systems running OpenSSL versions prior to 1.0.1a,
|
20 Apr 2012 | VULN190 | Ruby : Ruby 1.9.3-p194 contains security fix | Systems running Ruby versions prior to 1.9.3-p194.
|
18 Apr 2012 | VULN189 | Oracle : April 2012 Critical Patch Update Released | Systems running Oracle Database Server,
|
18 Apr 2012 | VULN188 | Apache : Apache HTTP Server 2.4.2 fix insecure handling of LD_LIBRARY_PATH | Systems running Apache HTTP Server version
|
18 Apr 2012 | VULN187 | IBM : Security Vulnerabilities included in IBM WebSphere Application Server 8.0.0.3 | Systems running IBM WebSphere Application Server
|
16 Apr 2012 | VULN186 | Debian : apache2 insecure default configuration | Debian version Squeeze, Wheezy, Sid, experimental
|
16 Apr 2012 | VULN185 | Red Hat : Critical samba security update | Red Hat Enterprise Linux version 4 running samba.
|
16 Apr 2012 | VULN184 | nginx : new versions of nginx fixes buffer overflow vulnerability | Systems running nginx versions prior to 1.0.15
|
16 Apr 2012 | VULN183 | MySQL : MySQL Community Server 5.5.23 fixes unspecified security bug | Systems running MySQL versions 5.5 prior to
|
16 Apr 2012 | VULN182 | APPLE : Flashback malware removal tool | Mac OS X versions 10.7 or later without Java.
|
13 Apr 2012 | STAT15 | |
|
13 Apr 2012 | VULN181 | APPLE : APPLE-SA-2012-04-12-1 Java for OS X 2012-003 and,Java for Mac OS X 10.6 Update 8 | Mac OS X versions 10.6.8, Server v10.6.8, 10.7.3,
|
13 Apr 2012 | VULN180 | VMware : VMware hosted products and ESXi/ESX patches address privilege escalation | VMware ESXi versions 4.x, 3.5, 5.0,
|
12 Apr 2012 | VULN179 | VMware : VMware ESXi and ESX address several security issues | VMware ESXi versions 4.x, 3.5,
|
12 Apr 2012 | VULN178 | Cisco : Buffer Overflow Vulnerabilities in the Cisco WebEx Player | Systems running Cisco WebEx Players.
|
11 Apr 2012 | VULN177 | Microsoft : Important Vulnerabilities in Forefront Unified Access Gateway (UAG) Could Allow Information Disclosure | Systems running
|
11 Apr 2012 | VULN176 | Microsoft : Important Vulnerability in Microsoft Office Could Allow for Remote Code Execution | Systems running Microsoft Office versions 2007,
|
11 Apr 2012 | VULN175 | Microsoft : Critical Vulnerability in Windows Common Controls Could Allow Remote Code Execution | Systems running Microsoft Office versions 2003, 2007, 2010,
|
11 Apr 2012 | VULN174 | Microsoft : Critical Vulnerability in .NET Framework Could Allow Remote Code Execution | Systems running Microsoft .NET Framework
|
11 Apr 2012 | VULN173 | Microsoft : Critical Vulnerability in Windows Could Allow Remote Code Execution | Microsoft Windows version XP, Server 2003, Vista,
|
11 Apr 2012 | VULN172 | Microsoft : Critical Cumulative Security Update for Internet Explorer | Systems running Internet Explorer versions 6, 7, 8, 9.
|
11 Apr 2012 | VULN171 | Samba : "root" credential remote code execution | Systems running Samba versions 3 prior to 3.6.4,
|
11 Apr 2012 | VULN170 | Adobe : Security updates available for Adobe Reader and Acrobat | Systems running Adobe Reader versions X prior
|
06 Apr 2012 | STAT14 | |
|
30 Mar 2012 | STAT13 | |
|
29 Mar 2012 | VULN169 | TYPO3 : Several Vulnerabilities in TYPO3 Core | Systems running TYPO3 Core versions 4.4.0 up to
|
29 Mar 2012 | VULN168 | Cisco : Cisco IOS Software Command Authorization Bypass | Cisco IOS version after 12.2
|
29 Mar 2012 | VULN167 | DRUPAL : Organic Groups - Access Bypass | Systems running Contact Forms for DRUPAL
|
29 Mar 2012 | VULN166 | DRUPAL : Organic Groups - Access Bypass | Systems running Organic Groups for DRUPAL
|
29 Mar 2012 | VULN165 | HP : HP OV NNM Running Apache HTTP Server or Tomcat Remote Vulnerabilities | HP-UX, Linux, Solaris
|
29 Mar 2012 | VULN164 | Cisco : Cisco IOS Internet Key Exchange Vulnerability | Cisco IOS running Internet Key Exchange feature.
|
29 Mar 2012 | VULN163 | Google Chrome : Multiple vulnerabilities fixed in Google Chrome Stable Channel 18.0.1025.142 | Systems running Google Chrome Stable Channel
|
29 Mar 2012 | VULN162 | phpMyAdmin : Path disclosure due to missing verification of file presence | Systems running phpMyAdmin Versions 3.4.x
|
29 Mar 2012 | VULN161 | Cisco : Cisco IOS Software Network Address Translation Vulnerability | Cisco IOS running Network Address Translation feature.
|
29 Mar 2012 | VULN160 | Adobe : Security update available for Adobe Flash Player | Systems running
|
29 Mar 2012 | VULN159 | Cisco : Multiple Vulnerabilities in Cisco IOS Software Traffic Optimization Features | Cisco IOS running WAAS Express.
|
29 Mar 2012 | VULN158 | TYPO3 : Several vulnerabilities in third party extensions | Systems running TYPO3 third party extensions.
|
29 Mar 2012 | VULN157 | Wireshark : Denial Of Service vulnerabilities fixed in Wireshark | Systems running Joomla! versions 1.5.x
|
28 Mar 2012 | VULN156 | Wireshark : Denial Of Service vulnerabilities fixed in Wireshark)] | Systems running Wireshark versions 1.4.x, 1.6.x
|
26 Mar 2012 | VULN155 | US-CERT : Quagga contains multiple vulnerabilities | Systems running Quagga versions prior to 0.99.20.1.
|
26 Mar 2012 | VULN154 | Google Chrome : Google Chrome 17.0.963.83 fixes security vulnerabilities | Systems running Google Chrome versions
|
26 Mar 2012 | VULN153 | Apache : Apache Traffic Server releases for security incident CVE-2012-0256 | Systems running Apache Traffic Server
|
26 Mar 2012 | VULN152 | MySQL : MySQL 5.1.62 fixes security issued | Systems running MySQL Community Server
|
23 Mar 2012 | VULN151 | US-CERT : AtMail webmail interface contains multiple vulnerabilities | Systems running AtMail webmail interface
|
23 Mar 2012 | VULN150 | Openoffice.org : OpenOffice.org data leakage vulnerability | Systems running OpenOffice.org versions up to
|
23 Mar 2012 | VULN149 | Apache : Apache Wicket vulnerabilities fixed | Systems running Apache Wicket versions 1.4.x, 1.5.x
|
23 Mar 2012 | VULN148 | ZDI : RealNetworks RealPlayer Remote Code Execution vulnerabilities | Systems running RealNetworks RealPlayer.
|
23 Mar 2012 | STAT12 | |
|
23 Mar 2012 | VULN147 | LibreOffice : XML Entity Expansion flaw by processing RDF file | Systems running LibreOffice versions
|
23 Mar 2012 | VULN146 | MediaWiki : Five security vulnerabilities fixed in MediaWiki | Systems running MediaWiki versions
|
21 Mar 2012 | VULN145 | Moodle : Multiple vulnerabilities fixed in Moodle | Systems running Moodle versions 2.x, 1.x.
|
21 Mar 2012 | VULN144 | Joomla! : Core - Password Change | Systems running Joomla! versions 2.5.x prior
|
20 Mar 2012 | VULN143 | VMware : VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security | Systems running VMware vCenter Server,
|
20 Mar 2012 | VULN142 | VMware : VMware View privilege escalation and cross-site scripting | Systems running VMware View versions prior to 4.6.1.
|
20 Mar 2012 | VULN141 | IBM : Several vulnerabilities fixed in IBM DB2 | Systems running IBM DB2 versions 9.1, 9.5, 9.7, 9.8.
|
20 Mar 2012 | VULN140 | Red Hat : Important: JBoss Operations Network 2.4.2 security update)] | Red Hat running
|
20 Mar 2012 | VULN139 | Novell : eDirectory 8.8 SP6 Patch 5 fixes several security vulnerabilities | Systems running Novell eDirectory versions 8.8
|
20 Mar 2012 | VULN138 | EMC : RSA enVision Multiple Vulnerabilities | Systems running RSA enVision versions 4.x.
|
20 Mar 2012 | VULN137 | VideoLAN : Stack and Heap overflows fixed in VLC | Systems running VLC media player versions
|
16 Mar 2012 | STAT11 | |
|
16 Mar 2012 | VULN136 | Xerox FreeFlow Print Server : Oracle January 2012 OS and Security Patch Cluster (includes Java 6 Update 29 Software)r | FreeFlow Print Server
|
16 Mar 2012 | VULN135 | _=28Xerox=3A?= =?windows-1252?Q?_Multiples_vuln=E9rabilit=E9s_dans_les_=E9qui?= | NA
|
16 Mar 2012 | VULN134 | Redmine : Redmine 1.3.2 fixes several security vulnerabilities | Systems running Redmine versions prior to 1.3.2.
|
16 Mar 2012 | VULN133 | Nginx : Information disclosure vulnerability fixed in Nginx | Systems running Nginx versions prior to 1.1.17,
|
16 Mar 2012 | VULN132 | Red Hat : Moderate glibc security and bug fix update | Systems running glibc.
|
16 Mar 2012 | VULN131 | Asterisk : Stack Buffer Overflow vulnerabilities fixed in Asterisk | Systems running Asterisk Open Source versions
|
16 Mar 2012 | VULN130 | DRUPAL : CKEditor and FCKeditor - multiple XSS, arbitrary code execution | Systems running FCKeditor for DRUPAL versions 6.x-2.x,
|
16 Mar 2012 | VULN129 | (DRUPAL : Views Language Switcher Cross Site Scripting (XSS))
|
16 Mar 2012 | VULN128 | Cisco : Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 | Cisco ASA Software versions 7, 8,
|
16 Mar 2012 | VULN127 | Cisco : Cisco Firewall Services Module Crafted Protocol Independent Multicast Message Denial of Service Vulnerability | Cisco FWSM software, CISCO ASA software.
|
16 Mar 2012 | VULN126 | Cisco : Cisco ASA 5500 Series Adaptive Security Appliance Clientless VPN ActiveX Control Remote Code Execution Vulnerability)] | Systems running Cisco ASA 5500 Series Adaptive
|
14 Mar 2012 | VULN125 | Mozilla : Vulnerabilities fixed in Firefox, Thunderbird, SeaMonkey | Systems running
|
14 Mar 2012 | VULN124 | EMC : EMC Documentum eRoom multiple vulnerabilities | Systems running running EMC Documentum eRoom
|
14 Mar 2012 | VULN123 | Adobe : Hotfix available for ColdFusion | Systems running running
|
14 Mar 2012 | VULN122 | Microsoft : Moderate Vulnerability in DirectWrite Could Allow Denial of Service | Windows version 7, Vista, Server 2008,
|
14 Mar 2012 | VULN121 | Microsoft : Important Vulnerability in Expression Design Could Allow Remote Code Execution | Windows running
|
14 Mar 2012 | VULN120 | Microsoft : Important Vulnerability in Visual Studio Could Allow Elevation of Privilege | Windows running
|
14 Mar 2012 | VULN119 | Microsoft : Critical Vulnerabilities in Remote Desktop Could Allow Remote Code Execution | Windows versions 7, XP, Server 2003, Vista,
|
14 Mar 2012 | VULN118 | Microsoft : Important Vulnerability in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege | Windows versions 7, XP, Server 2003, Vista,
|
14 Mar 2012 | VULN117 | Microsoft : Important Vulnerability in DNS Server Could Allow Denial of Service | Windows versions Server 2003, Server 2008.
|
12 Mar 2012 | VULN115 | (OpenSSL : CMS and S/MIME Bleichenbacher attack (CVE-2012-0884))
|
12 Mar 2012 | VULN114 | IP.Board : IP.Board 3.2.x patch fixes XSS vulnerability | Systems running IP.Board versions 3.2.x.
|
12 Mar 2012 | VULN113 | Squirrelmail : Cross-site scripting vulnerability in the Autocomplete plugin | Systems running squirrelmail versions prior to 3.0.
|
12 Mar 2012 | VULN112 | Google Chrome : Google Chrome 17.0.963.79 fixes Critical vulnerability | Systems running Google Chrome versions prior
|
12 Mar 2012 | VULN111 | US-CERT : AjaXplorer contains multiple vulnerabilities | Systems running AjaXplorer versions prior to 4.0.4.
|
09 Mar 2012 | STAT10 | |
|
09 Mar 2012 | VULN110 | Dotnetnuke : Filemanager function fails to check for valid file extensions | Systems running Dotnetnuke versions 6.x.x
|
09 Mar 2012 | VULN109 | VMware : VMware VirtualCenter Update and ESX 3.5 patch update JRE | Systems running VMware VirtualCenter version 2.5,
|
09 Mar 2012 | VULN108 | VMware : VMware vCenter Chargeback Manager Information Leak and Denial of Service | Systems running VMware vCenter Chargeback Manager
|
09 Mar 2012 | VULN107 | Google Chrome : Chrome Stable Channel update fixes Critical vulnerability | Systems running Google Chrome version prior
|
09 Mar 2012 | VULN106 | APPLE : APPLE-SA-2012-03-07-1 iTunes 10.6 | Windows version 7, Vista, XP SP2 or later
|
09 Mar 2012 | VULN105 | APPLE : APPLE-SA-2012-03-07-2 iOS 5.1 Software Update | APPLE iOS.
|
08 Mar 2012 | VULN104 | DRUPAL : XSS vulnerabilities fixed in third parties modules | Systems running Webform for DRUPAL,
|
08 Mar 2012 | VULN103 | IBM : Security Vulnerabilities and HIPER APARs fixed in DB2 for Linux, UNIX, and Windows Version 9.5 Fix Pack 9 | AIX, HP-UX, Linux, Solaris, Windows running
|
08 Mar 2012 | VULN102 | Joomla! : Joomla! Core SQL Injection and XSS vulnerabilities fixed | Systems running Joomla! version 2.5.1, 2.5.0, 1.7.x.
|
08 Mar 2012 | VULN101 | US-CERT : libpng chunk decompression integer overflow vulnerability | Systems running libpng versions versions 1.0.57,
|
08 Mar 2012 | VULN100 | RIM : Vulnerability in WebKit browser engine impacts BlackBerry 6, 7, 7.1, and BlackBerry PlayBook tablet software | BlackBerry OS versions 6, 7, 7.1,
|
08 Mar 2012 | VULN099 | Splunk : Splunk 4.3.1 addresses XSS vulnerability - March 5th, 2012 | Systems running Splunk version prior to 4.3.1.
|
08 Mar 2012 | VULN098 | EMC : RSA SecurID Software Token Converter buffer overflow vulnerability | Systems running RSA SecurID Software Token Converter.
|
08 Mar 2012 | VULN097 | Adobe : Security update available for Adobe Flash Player | Systems running
|
02 Mar 2012 | STAT09 | |
|
02 Mar 2012 | VULN096 | Shibboleth : Identity Provider LDAPS Connections Do Not Perform Hostname Verification | Systems running Shibolet Identity Provider version
|
28 Feb 2012 | VULN095 | Bugzilla : 4.2rc2 and 4.0.4 Security Advisory | Systems running Bugzilla versions
|
28 Feb 2012 | VULN094 | PostgreSQL : Security Update 2012-02-27 released | Systems running PostgreSQL.
|
28 Feb 2012 | VULN093 | KB Parallels : Critical Remote vulnerability in Plesk | Linux/Unix, Windows running Plesk versions
|
27 Feb 2012 | VULN092 | Cisco : Cisco Small Business SRP 500 Series Multiple Vulnerabilities | Cisco SRP 520 Series firmware version prior to 1.1.26.
|
27 Feb 2012 | VULN091 | Samba : Remote code execution vulnerability in smbd | Systems running Samba versions up to and
|
27 Feb 2012 | VULN090 | IBM : Vulnerability in ICMP packet handling | IBM AIX versions 5.3, 6.1, 7.1.
|
24 Feb 2012 | STAT08 | |
|
21 Feb 2012 | VULN089 | Mozilla : libpng integer overflow | Systems running
|
21 Feb 2012 | VULN088 | Ruby : Vulnerabilities fixed in Ruby | Systems running Ruby versions 1.8.x, 1.9.x.
|
21 Feb 2012 | VULN087 | phpMyAdmin : PMASA-2012-1 XSS in replication setup | Systems running phpmyadmin versions 3.4.x prior to
|
17 Feb 2012 | STAT07 | |
|
16 Feb 2012 | VULN086 | Citrix : Multiple Vulnerabilities in Citrix XenServer Web Self Service | Systems running Citrix XenServer Web Self Service
|
16 Feb 2012 | VULN085 | Google Chrome : Google Chrome 17.0.963.56 fixes multiple vulnerabilities | Systems running Google Chrome versions prior
|
16 Feb 2012 | VULN084 | Oracle : Security Alert for CVE-2011-5035 Released | Systems running Oracle WebLogic Server,
|
16 Feb 2012 | VULN083 | Adobe : Security update available for RoboHelp for Word | Windows running Adobe RoboHelp for Word version 9, =
|
16 Feb 2012 | VULN082 | Adobe : Security update available for Adobe Flash Player | Systems running Adobe Flash Player versions prior t=
|
16 Feb 2012 | VULN081 | Oracle : February 2012 Critical Patch Update for Java SE Released | Systems running Java SE, JavaFX.
|
16 Feb 2012 | VULN080 | IBM : Upgradation of JRE packaged by IBM Rational License Key Server and IBM | Systems running IBM Rational License Key Server,
|
16 Feb 2012 | VULN079 | Cisco : Cisco NX-OS Malformed IP Packet Denial of Service Vulnerability | Cisco NX-OS Software.
|
15 Feb 2012 | VULN078 | Microsoft : Critical Vulnerabilities in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution | Systems running .NET Framework versions 2, 3, 4,
|
15 Feb 2012 | VULN077 | Microsoft : Important Vulnerabilities in Microsoft Visio Viewer 2010 Could Allow Remote Code Execution | Systems running Microsoft Visio Viewer version 2010=
|
15 Feb 2012 | VULN076 | Microsoft : Important Vulnerability in the Indeo Codec Could Allow Remote Code Execution | Windows XP running Indeo Codec.
|
15 Feb 2012 | VULN075 | Microsoft : Critical Vulnerability in C Run-Time Library Could Allow Remote Code Execution | Windows Vista, Windows Server 2008, Windows 7
|
15 Feb 2012 | VULN074 | Microsoft : Important Vulnerability in Color Control Panel Could Allow Remote Code Execution | Windows Server 2008.
|
15 Feb 2012 | VULN073 | Microsoft : Important Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege | Systems running
|
15 Feb 2012 | VULN072 | Microsoft : Critical Cumulative Security Update for Internet Explorer | Systems running Internet Explorer versions 6, 7, 8,=
|
15 Feb 2012 | VULN071 | Microsoft : Important Vulnerabilities in Ancillary Function Driver Could Allow Elevation of Privilege | Windows XP, Windows Server 2003, Windows Vista,
|
15 Feb 2012 | VULN070 | Microsoft : Critical Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution | Windows XP, Windows Server 2003, Windows Vista,
|
15 Feb 2012 | VULN069 | Adobe : Security update available for Adobe Shockwave Player | Systems running Adobe Shockwave Player versions
|
13 Feb 2012 | VULN068 | NetBSD : NetBSD 5.1.2 critical/security update | NetBSD versions 5 prior to 5.1.2.
|
13 Feb 2012 | VULN067 | ICS-CERT : Invensys Wonderware HMI Reports XSS and Write Access Violation | Systems running Invensys Wonderware HMI reports.
|
13 Feb 2012 | VULN066 | ISC : Ghost Domain Names: Revoked Yet Still Resolvable | Systems running ISC BIND versions 9.
|
10 Feb 2012 | VULN065 | DRUPAL : Vulnerabilities fixed in Finder and Revisioning extensions | Systems running Finder for DRUPAL,
|
13 Feb 2012 | VULN064 | Mozilla : Use after free Vulnerability fixed in Firefox, Thunderbird, SeaMonkey | Systems running Firefox versions prior to 10.0.1,
|
10 Feb 2012 | VULN063 | Horde : New versions of Horde products fix vulnerabilities)] | Systems running
|
10 Feb 2012 | STAT06 | |
|
03 Feb 2012 | STAT05 | |
|
03 Feb 2012 | VULN062 | HP : HP Operations Manager, Operations Agent, Performance Agent, Service Health Reporter, Service Health Optimizer, | Systems running HP Operations Manager,
|
03 Feb 2012 | VULN061 | TYPO3 : TYPO3-EXT-SA-2012-001 Several vulnerabilities in third party extensions | Systems running TYPO3 third party extensions.
|
03 Feb 2012 | VULN060 | Bugzilla : 4.2rc1, 4.0.3, 3.6.7, and 3.4.13 Security Advisory | Systems running Bugzilla versions 2, 3, 4.
|
03 Feb 2012 | VULN059 | PHP : PHP 5.3.10 fixes critical remote code execution vulnerability | Systems running PHP versions prior to 5.3.10.
|
03 Feb 2012 | VULN058 | DRUPAL : SA-CORE-2012-001 - Drupal core multiple vulnerabilities | Systems running Drupal versions 6, 7.
|
03 Feb 2012 | VULN057 | EMC : ESA-2012-007 Security fixes for RSA enVision | Systems running RSA enVision versions 4.x.
|
03 Feb 2012 | VULN056 | EMC : EMC Documentum Content Server privilege elevation vulnerability | Systems running EMC Documentum Content Server
|
03 Feb 2012 | VULN055 | APPLE : APPLE-SA-2012-02-01-1 OS X Lion v10.7.3 and Security Update 2012-001 | Mac OS X, Mac OS X Server.
|
01 Feb 2012 | VULN054 | Mozilla : Vulnerabilities fixed in Firefox, Thunderbird, SeaMonkey | Systems running Firefox, Thunderbird, SeaMonkey.
|
01 Feb 2012 | VULN053 | Apache : pache HTTP Server 2.2.22 security and bugfix release | Systems running Apache versions 2 prior to 2.2.22.
|
27 Jan 2012 | STAT04 | |
|
27 Jan 2012 | VULN052 | Joomla : Joomla! 1.7.4, 2.5.0 fix several vulnerabilities | Systems running Joomla! versions prior to 1.7.4,
|
27 Jan 2012 | VULN051 | Symantec : Security Advisories Relating to Symantec Products - Symantec pcAnywhere Remote Code Execution, Local Access | Systems running Symantec pcAnywhere.
|
27 Jan 2012 | VULN050 | Cisco : Cisco IronPort Appliances Telnet Remote Code Execution Vulnerability | AsyncOS.
|
24 Jan 2012 | VULN049 | Opera : Opera version 11.61 fixes security vulnerabilities | Systems running Opera version prior to 11.61.
|
24 Jan 2012 | VULN048 | Red Hat : Important kernel security and bug fix update | Systems running Red Hat Enterprise Linux version 6.
|
24 Jan 2012 | VULN047 | Google Chrome : Stable channel update 16.0.912.77 fixes several security vulnerabilities | Systems running Google Chrome version prior to
|
24 Jan 2012 | VULN046 | IBM : Potential Oracle Outside In Technology Vulnerabilities Exposed in DB2 9.7.0.4 Accessories Suite | Systems running IBM DB2 Accessories Suite version 9.=
|
20 Jan 2012 | STAT03 | |
|
19 Jan 2012 | VULN045 | Symantec : Symantec Endpoint Protection Manager Cross-Site Request Forgery and Cross-Site Scripting | Systems running Symantec Endpoint Protection
|
19 Jan 2012 | VULN044 | Cisco : Cisco IP Video Phone E20 Default Root Account | Systems running Cisco TelePresence Software version =
|
19 Jan 2012 | VULN043 | Cisco : Cisco Digital Media Manager Privilege Escalation Vulnerability | Systems running Cisco Digital Media Manager.
|
18 Jan 2012 | VULN042 | Oracle : January 2012 Critical Patch Update Released | Systems running Oracle Database,
|
18 Jan 2012 | VULN041 | Debian : linux-2.6 security update | Debian version squeeze running linux-2.6.
|
18 Jan 2012 | VULN040 | Apache Tomcat : CVE-2011-3375 Tomcat Information disclosure and Denial of Service vulnerabilities fixed | Systems running Apache Tomcat.
|
18 Jan 2012 | VULN039 | Moodle : Multiple vulnerabilities fixed in Moodle | Systems running Moodle versions 2.2, 2.1 to 2.1.3+=
|
17 Jan 2012 | VULN038 | IBM : Possible security exposure for WebSphere Application Server on IBM i | IBM i running WebSphere Application Server
|
17 Jan 2012 | VULN037 | IBM : IBM SPSS Data Collection ActiveX Control vulnerabilities | Systems running IBM SPSS Data Collection versions
|
17 Jan 2012 | VULN036 | IBM : IBM SPSS SamplePower vsview6 ActiveX Control vulnerabilities | Windows running IBM SPSS SamplePower Version 3.
|
13 Jan 2012 | STAT02 | |
|
13 Jan 2012 | VULN035 | ISC : An Error in DDNS Processing of DHCPv6 Leases Can Cause a Crash in ISC dhcpd | Systems running ISC DHCP versions 4.2.2, 4.2.3,
|
13 Jan 2012 | VULN034 | MediaWiki : MediaWiki security releases 1.18.1, 1.17.2 | Systems running MediaWiki versions prior to
|
12 Jan 2012 | VULN033 | DRUPAL : Date, Password Policy and Video Filter modules vulnerabilities fixed | Systems running Date for Drupal, Password Policy
|
12 Jan 2012 | VULN032 | vBulletin : vBulletin Security Patch for vBulletin 4 Suite Only | Systems running vBulletin Suite versions 4.
|
12 Jan 2012 | VULN031 | Blue Coat : Multiple PostgreSQL and Tomcat vulnerabilities in IntelligenceCenter | Systems running Blue Coat IntelligenceCenter
|
12 Jan 2012 | VULN030 | PHP : PHP 5.3.9 fixes security vulnerabilities | Systems running PHP versions prior to 5.3.9.
|
12 Jan 2012 | VULN029 | IBM : Denial of service vulnerability in the web container of WebSphere Application Server Community Edition | Systems running WebSphere Application Server
|
12 Jan 2012 | VULN028 | simpleSAMLphp : simpleSAMLphp-1.8.2 security update is available | Systems running simpleSAMLphp versions prior to 1.8=
|
12 Jan 2012 | VULN027 | DRUPAL : Hash DOS attack prevention with Suhosin needs a .htaccess edit | Systems running Drupal core versions 6.x, 7.x.
|
12 Jan 2012 | VULN026 | HP : HP Easy Printer Care Software Running on Windows, Remote Execution of Arbitrary Code | Windows versions XP, Vista running HP Easy Printer =
|
11 Jan 2012 | VULN025 | Microsoft : Important Vulnerability in AntiXSS Library Could Allow Information Disclosure | Windows running AntiXSS Library versions 3, 4.
|
11 Jan 2012 | VULN024 | Microsoft : Important Vulnerability in SSL/TLS Could Allow Information Disclosure | Windows XP, Windows Server 2003, Windows Vista,
|
11 Jan 2012 | VULN023 | Microsoft : Critical Vulnerabilities in Windows Media Could Allow Remote Code Execution | Windows XP, Windows Server 2003, Windows Vista,
|
11 Jan 2012 | VULN022 | Microsoft : Important Vulnerability in Microsoft Windows Could Allow Remote Code Execution | Windows XP, Windows Server 2003, Windows Vista,
|
11 Jan 2012 | VULN021 | Microsoft : Important Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege | Windows XP, Windows Server 2003, Windows Vista,
|
11 Jan 2012 | VULN020 | Microsoft : Important Vulnerability in Windows Object Packager Could Allow Remote Code Execution | Windows XP, Windows Server 2003 running Windows
|
11 Jan 2012 | VULN019 | Microsoft : Vulnerability in Windows Kernel Could Allow Security Feature Bypass | Windows XP, Windows Server 2003, Windows Vista,
|
11 Jan 2012 | VULN018 | Adobe : Security updates available for Adobe Reader and Acrobat | Systems running Adobe Reader, Adobe Acrobat.
|
10 Jan 2012 | VULN017 | Red Hat : Critical java-1.4.2-ibm security update | Red Hat Enterprise Linux version 4 Extras, 5
|
10 Jan 2012 | VULN016 | Debian : squid3 security update | Debian versions squeeze, wheezy, sid running squid3=
|
10 Jan 2012 | VULN015 | ICS-CERT : INVENSYS WONDERWARE INBATCH ACTIVEX VULNERABILITIES | Systems running Invensys Wonderware InBatch
|
10 Jan 2012 | VULN014 | HP : Certain HP LaserJet Printers, Remote Unauthorized Access to Files | HP LaserJet P3015 firmware versions prior to 07.080=
|
09 Jan 2012 | VULN013 | FFmpeg : FFmpeg 0.9.1 fixes multiple security vulnerabilities | Systems running FFmpeg versions prior to 0.9.1.
|
09 Jan 2012 | VULN012 | GNUTLS : DTLS timing attack | Systems running GNUTLS versions prior to 3.0.11.
|
09 Jan 2012 | VULN011 | Debian : super security update | Debian versions lenny, squeeze, sid running Super.
|
09 Jan 2012 | VULN010 | ICS-CERT : SIEMENS FACTORYLINK MULTIPLE ACTIVEX VULNERABILITIES | Systems running Siemens Tecnomatix FactoryLink
|
09 Jan 2012 | VULN009 | ICS-CERT : SIEMENS AUTOMATION LICENSE MANAGER MULTIPLE VULNERABILITIES | Systems running Siemens Automation License Manager
|
06 Jan 2012 | STAT01 | |
|
06 Jan 2012 | VULN008 | DRUPAL : Registration Codes, Lingotek, Fill PDF vulnerabilities | Systems running Registration Codes for DRUPAL
|
06 Jan 2012 | VULN007 | Google Chrome : Google Chrome Stable Channel 16.0.912.75 fixes 3 vulnerabilities | Systems running Google Chrome Stable Channel
|
05 Jan 2012 | VULN006 | OpenSSL : Six security flaws fixed in OpenSSL 1.0.0f and 0.9.8s | Systems running OpenSSL versions prior to 1.0.0f,
|
04 Jan 2012 | VULN005 | IBM : Multiple vulnerabilities in AIX BIND | AIX versions 5.3, 6.1, 7.1 running BIND version 9.
|
04 Jan 2012 | VULN004 | IBM : Rational Rhapsody for Windows Blueberry FlashBack ActiveX Control vulnerabilities | Windows running IBM Rational Rhapsody for Windows.
|
04 Jan 2012 | VULN003 | WordPress : WordPress 3.3.1 Security and Maintenance Release | Systems running WordPress versions 3.3.
|
04 Jan 2012 | VULN002 | Apache Geronimo : Geronimo 2.1.8 fixes several security vulnerabilities | Systems running Apache Geronimo versions prior to
|
04 Jan 2012 | VULN001 | Apache Struts : Multiple critical vulnerabilities in Struts2 | Systems running Apache Struts2 versions prior to
|