Advisory Catalog

MoinMoin Access Restrictions Bypassed due to improper ACL enforcement

FormEncode Access Restrictions Bypass

MoinMoin Denial of Service vulnerability via password_checker function

phpMyAdmin HTTP Response Splitting Vulnerability

phpBB vulnerable to sensitive information disclosure

Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

Microsoft Office Remote Code Execution

Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11, and GStreamer Plug-ins (aka gstreamer-plugins) 0.8.5, might allow remote attackers to execute arbitrary code via crafted Time-to-sample

Array index error in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted Sync Sample (aka stss) at

Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good Plug-ins (aka gst-plugins-good) 0.10.9 through 0.10.11 might allow remote attackers to execute arbitrary code via crafted Composition Time To Sample (ctts) atom data in a malformed QuickTime m

Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection

Authentication library in TYPO3 vulnerable to session fixation

Trac vulnerable to denial of service

PHPMailer susceptible to arbitrary code execution

WEBrick Denial of Service Vulnerability

Adobe Reader and Acrobat Input Validation Vulnerability

Drupal Node Validation Bypass in the node module API

AdaptCMS SQL Injection vulnerability

Rails ActiveRecord gem vulnerable to SQL injection

Cisco IOS Cross-Site Request Forgery Vulnerability

Django cross-site request forgery (CSRF) vulnerability

Oracle VirtualBox Insufficient Input Validation Vulnerability

Joomla! Open Redirect vulnerability

Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs

MoinMoin vulnerable to privilege escalation

Plone Cross-site request forgery (CSRF)

Plone Improper Session Management

Plone CMS Improper Session Management

Adobe Acrobat and Reader Buffer Overflow Vulnerability

Adobe Acrobat and Reader Unspecified Vulnerability

Paramiko Unsafe randomness usage may allow access to sensitive information

CherryPy Malicious cookies allow access to files outside the session directory

Django vulnerable to Denial of Service via i18n middleware component

PHPMailer Shell command injection

Trac missing Content-Disposition HTTP header

Microsoft Office Excel Remote Code Execution Vulnerability

RubyGems file overwrite vulnerability

Django Arbitrary Code Execution

Edgewall Trac Cross-site request forgery (CSRF) vulnerability

PHPMailer Local file inclusion

Plone allows anonymous users to reset any users password through the web via Password Reset Tool

Moodle does not properly validate module instance id

Ruby on Rails vulnerable to code injection

Rails Denial of Service vulnerability

Trac reStructuredText breach of privacy and denial of service vulnerability

Remote code execution in rwiki

Microsoft Word Malformed Object Pointer Vulnerability

Apache Struts 1 ActionForm Denial-of-Service Vulnerability

PEAR::Auth potential authentication bypass vulnerability

CherryPy Directory traversal vulnerability