Advisories | Vulnerabilities | About SecurityWatch	Beta Version -

30 days Vulnerability archive - showing 50 per page
06/21/05: Mozilla Camino Lets Remote Users Spoof Javascript Dialog Boxes 06/21/05: Mozilla Firefox Lets Remote Users Spoof Javascript Dialog Boxes 06/21/05: Mozilla Browser Lets Remote Users Spoof Javascript Dialog Boxes 06/21/05: Ruby XMLRPC Security Control Flaw May Let Remote Users Execute Arbitrary Commands 06/21/05: Cacti Input Validation Holes Let Remote Users Inject SQL Commands and Execute Arbitrary Commands 06/21/05: Novell NetMail for Linux Access Permissions May Let Local Users Modify the Binaries 06/21/05: Enterasys Vertical Horizon Common Default Password Grants Access to Remote Users 06/21/05: paFAQ Flaws Let Remote Users Download the Database, Inject SQL Commands, Conduct Cross-Site Scripting Attacks, and Execute Arbitrary Code 06/21/05: Novell GroupWise Client Discloses Password to Local Users 06/21/05: Cisco VPN 3000 Lets Remote Users Determine Valid Groupnames 06/21/05: Ublog Reload Input Validation Holes in 'index.asp' Permit SQL Injection and in 'trackback.asp' Permit Cross-Site Scripting Attacks 06/21/05: Heimdal telnetd Buffer Overflow in getterminaltype() Lets Remote Users Execute Arbitrary Code 06/20/05: ATutor subscribe_forum.php us Variable XSS 06/20/05: ATutor tile.php Mutliple Variable XSS 06/20/05: ATutor inbox/index.php view Variable XSS 06/20/05: ATutor send_message.php l Variable XSS 06/20/05: ATutor search.php Multiple Variable XSS 06/20/05: ATutor contact.php subject Variable XSS 06/20/05: ATutor browse.php show_course Variable XSS 06/20/05: ATutor content.php cid Variable XSS 06/20/05: Trac Input Validation Hole Lets Remote Users Upload Arbitrary Files 06/20/05: Fortibus CMS Input Validation Flaws Let Remote Users Injection SQL Commands 06/20/05: Sudo Race Condition in Processing Command Pathnames Lets Local Users Execute Arbitrary Commands 06/20/05: Contelligent Preview Mechanism Lets Remote Authenticated Users Gain Elevated Privileges 06/20/05: Opera XMLHttpRequest Access Controls Can By Bypassed By Remote Users 06/20/05: Bitrix Site Manager dbquery_error.php Path Disclosure 06/20/05: Bitrix Site Manager subscr_form.php Path Disclosure 06/20/05: Opera 'javascript:' URL Access Control Flaw Lets Remote Users Conduct Cross-Site Scripting Attacks and Access Files on a Target User's System 06/20/05: RealVNC Null Sessions Disclose System Information to Remote Users 06/20/05: ProductCart editCategories.asp lid Variable SQL Injection 06/20/05: ProductCart viewPrd.asp idcategory Variable SQL Injection 06/20/05: Bitrix Site Manager index.php _SERVER[DOCUMENT_ROOT] Variable Remote File Inclusion 06/20/05: Microsoft Outlook Express NNTP LIST Command Remote Overflow 06/19/05: mcGallery show.php host Variable Path Disclosure 06/19/05: mcGallery admin.php lang Variable Traversal Arbitrary File Access 06/18/05: Sun ONE Messaging Server Lets Remote Users Execute Arbitrary Code on a Target Webmail User's System 06/18/05: JBoss Input Validation Hole May Disclose Installation Path and Configuration File to Remote Users 06/18/05: Yaws Web Server Discloses Script Source Code to Remote Users 06/17/05: Mambo 'com_contents' Input Validation Hole in 'user_rating' Parameter Permits SQL Injection 06/17/05: Microsoft ISA Server Basic Credentials Exposure 06/17/05: Multiple Browser Script Code Obfuscation 06/17/05: CoolCafe 'login.asp' Input Validation Hole Permits SQL Injection 06/17/05: Ultimate PHP Board Input Validatioh Holes in Multiple Scripts Allow Cross-Site Scripting Attacks 06/17/05: SpamAssassin Bug in Processing Long Message Headers Lets Remote Users Deny Service 06/17/05: Microsoft ISA Server NetBIOS Predefined Filter Privilege Escalation 06/16/05: Sun Solaris lpadmin Lets Local Users Overwrite Arbitrary Files 06/16/05: SquirrelMail Input Validation Holes in Multiple Scripts Permit Cross-Site Scripting Attacks 06/16/05: ATutor Input Validation Bugs in Several Scripts Permit Cross-Site Scripting Attacks 06/16/05: mcGallery Input Validation Holes Let Remote Users View Files and Determine the Installation Path 06/16/05: Gaim Yahoo! Module non-ASCII Filename DoS Next	Updated automatically every 10 minutes, 24x7. Sponsors GFI is a leading worldwide developer of messaging, content security and network security software for Windows NT/2000/2003/XP administrators. Sponsorship SecurityWatch is looking for sponsors in order to help us to maintain and improve the service. Please contact for further information.
SecurityWatch is powered by eBCVG © eBCVG IT Security 2000 - 2005