Debian Security Advisory DSA 764-1 - Several vulnerabilities have been discovered in cacti, a round-robin database (RRD) tool that helps create graphs from database information.
ea4f3397f7c822e97109e958965e0c69KDE Security Advisory: Kopete contains a copy of libgadu that is used if no compatible version is installed in the system. Several input validation errors have been reported in libgadu that can lead to integer overflows and remote DoS or arbitrary code execution. All versions of Kopete as included in KDE 3.3.x up to including 3.4.1 are affected. KDE 3.2.x and older are not affected.
6501bb5db4bff1d0c1010613d599b16cSecunia Security Advisory - Secunia Research has discovered two vulnerabilities in avast!, which can be exploited by malicious people to compromise a vulnerable system.
3bc704a526b165402dfe1f542a981f44Secunia Security Advisory - Markus Oberhumer has reported a vulnerability in zlib, which can be exploited by malicious people to cause a DoS (Denial of Service) against a vulnerable application.
4603cfb97b688de724c9a2a7a386784cSecunia Security Advisory - Two vulnerabilities have been reported in DNRD, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
436515c3d8a781307d5a63e6beb8592bSecunia Security Advisory - r_i_t_b_15 has reported a vulnerability in dxxo Count, which can be exploited by malicious people to conduct SQL injection attacks.
db98c7fe6369a084adeb86590844b0e2Secunia Security Advisory - rgod has discovered some vulnerabilities in Ultimate PHP Board, which can be exploited by malicious people to conduct cross-site scripting and script insertion attacks.
500315b6d75fa3ebf495d1e8adfc1ec3Secunia Security Advisory - Lostmon has reported a vulnerability in CMSimple, which can be exploited by malicious people to conduct cross-site scripting attacks.
c9e6510230bcf563ee5e33e104c65a9bSecunia Security Advisory - RST/GHC has discovered a vulnerability in PHPNews, which can be exploited by malicious people to conduct SQL injection attacks.
fecdd20a470dcf615360dc450d55c578Secunia Security Advisory - Some vulnerabilities have been reported in phpBB. Some have unknown impacts, and another can be exploited by malicious people to conduct script insertion attacks.
ad1c4c4efd7255120e52e251588a9a47Secunia Security Advisory - rgod has discovered a vulnerability in PHPSiteSearch, which can be exploited by malicious people to conduct cross-site scripting attacks.
c7f12da8218d823833282ca52ea48751Secunia Security Advisory - F5 Networks has acknowledged multiple vulnerabilities in BIG-IP and 3-DNS, which can be exploited by malicious people to gain knowledge of various information, unpack files to arbitrary directories, or cause a DoS (Denial of Service).
1de28607b0492837f53b965747707ccdSecunia Security Advisory - Ubuntu has issued updates for libnss-ldap, libpam-ldap and slapd. These fix a security issue, which can be exploit by malicious people to gain knowledge of sensitive information.
4ddcb838808305ec9d5596d911f35aebSecunia Security Advisory - Mark Pilgrim has reported a vulnerability in the Greasemonkey extension for Firefox, which can be exploited by malicious people to disclose various information.
8405921658c3f0027ee58290bce78ccdSecunia Security Advisory - Sun Microsystems has acknowledged a vulnerability in Solaris, which can be exploited by malicious people to cause files to be extracted to an arbitrary directory on a user's system.
8ce67220de675cfdf31f287a6762e5fcSecunia Security Advisory - rgod has discovered a vulnerability in Pyrox Search, which can be exploited by malicious people to conduct cross-site scripting attacks.
295c74560172aedf288543156e6774e4Secunia Security Advisory - KDE has issued an update for Kopete. This fixes some vulnerabilities in libgadu, which potentially can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.
df9e616b8a4eceadf19811195379af2dFreeBSD Security Advisory FreeBSD-SA-05:17.devfs - Due to insufficient parameter checking of the node type during device creation, any user can expose hidden device nodes on devfs mounted file systems within their jail. Device nodes will be created in the jail with their normal default access permissions.
75d6f2a8d69f800e5f0d423ceb4c0e51Debian Security Advisory DSA 763-1 - Markus Oberhumer discovered a flaw in the way zlib, a library used for file compression and decompression, handles invalid input. This flaw can cause programs which use zlib to crash when opening an invalid file.
87bc4c3b254470bb2bd15e26b687711bphpBB 2.0.17 has been released to fix some cross site scripting flaws in earlier versions.
c72f082be0feebf0268f9911ede31d29Misuse of services like Google's WMLProxy and IYHY allow for proxied/anonymous attacks against web sites.
4d8affdc07dfedba3fbb846f1d14472dGentoo Linux Security Advisory GLSA 200507-18 - MediaWiki fails to escape a parameter in the page move template correctly. Versions less than 1.4.7 are affected.
64ffb993408d32b9a868c37fd8cf431cPHPNews 1.2.5 is susceptible to SQL injection attacks.
683e637c6fcfa5e8544b176038d24feePHP Surveyor version 0.98 stable is vulnerable to multiple SQL injection, cross site scripting, and path disclosure flaws.
d27526cfaf52dec8fc107a6eb381127cThe Cisco Call Manager versions 3.2 and below may restart when more than 1 gigabyte of memory is used. Sending specially crafted packets to the CCM will cause the CCM to use more than 1 gigabyte of virtual memory.
34a58982f2fd1e5294f8d8c12c074ac9