Vulnerability Wathcer Newsletter (thread)

[Full-disclosure] Microsoft WINS Vulnerability + OS/SP Scanner, class, 2005/04/30
[VulnWatch] [CAN-2005-1063] Administration protocol abuse leads to Service and System Denial of Service, Secure Computer Group, 2005/04/29
[VulnWatch] [CAN-2005-1062] Administration protocol abuse allows local/remote password cracking, Secure Computer Group, 2005/04/29
[VulnWatch] High risk flaw in HP OpenView Radia Management Agent, NGSSoftware Insight Security Research, 2005/04/28
[VulnWatch] ZRCSA-200501 - Multiple vulnerabilities in Claroline, Siegfried, 2005/04/27
[Full-disclosure] ZRCSA-200501 - Multiple vulnerabilities in Claroline, Siegfried, 2005/04/27
[Full-disclosure] ADV: NetTerm's NetFtpd 4.2.2 Buffer Overflow + PoC Exploit, shadown, 2005/04/26
[Full-disclosure] iDEFENSE Security Advisory 04.26.05: Citrix Program Neighborhood Agent Buffer Overflow, iDEFENSE Labs, 2005/04/26
[Full-disclosure] iDEFENSE Security Advisory 04.26.05: Citrix Program Neighborhood Agent Arbitrary Shortcut Creation Vulnerability, iDEFENSE Labs, 2005/04/26
[Full-disclosure] iDEFENSE Security Advisory 04.26.05: MySQL MaxDB Webtool Remote 'If' Stack Overflow Vulnerability, iDEFENSE Labs, 2005/04/26
[Full-disclosure] iDEFENSE Security Advisory 04.25.05: MySQL MaxDB Webtool Remote Lock-Token Stack Overflow Vulnerability, iDEFENSE Labs, 2005/04/25
[Full-disclosure] iDEFENSE Security Advisory 04.25.05: MySQL MaxDB Webtool Remote Stack Overflow Vulnerability, iDEFENSE Labs, 2005/04/25
[VulnWatch] [CIRT.DK - Advisory] Novell Nsure Audit 1.0.1 Denial of Service, CIRT.DK Mailinglists, 2005/04/24
RE: iDEFENSE Security Advisory 04.18.05: McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability, Boyce, Nick, 2005/04/20
[VulnWatch] File Selection May Lead to Command Execution (GM#015-IE), GreyMagic Security, 2005/04/19
[Full-disclosure] [VulnWatch] [AppSecInc Team SHATTER Security Advisory] SQL Injection in CREATE_SCN_CHANGE_SET procedure[Scanned], Team SHATTER, 2005/04/18
[Full-disclosure] [VulnWatch] [AppSecInc Team SHATTER Security Advisory] SQL Injection in ALTER_MANUALLOG_CHANGE_SOURCE procedure[Scanned], Team SHATTER, 2005/04/18
[Full-disclosure] [VulnWatch] [AppSecInc Team SHATTER Security Advisory] Multiple SQL Injection vulnerabilities in DBMS_METADATA package[Scanned], Team SHATTER, 2005/04/18
[Full-disclosure] - Argeniss - Oracle exploits and workarounds, Cesar, 2005/04/18
[Full-disclosure] [VulnWatch] [AppSecInc Team SHATTER Security Advisory] Multiple SQL Injection vulnerabilities in DBMS_CDC_SUBSCRIBE and DBMS_CDC_ISUBSCRIBE packages[Scanned], Team SHATTER, 2005/04/18
[Full-disclosure] [VulnWatch] [AppSecInc Team SHATTER Security Advisory] Denial of Service in Oracle interMedia[Scanned], Team SHATTER, 2005/04/18
[Full-disclosure] iDEFENSE Security Advisory 04.18.05: McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability, iDEFENSE Labs, 2005/04/18
[Full-disclosure] [AppSecInc Team SHATTER Security Advisory] SQL Injection in CREATE_SCN_CHANGE_SET procedure, Team SHATTER, 2005/04/18
[Full-disclosure] [AppSecInc Team SHATTER Security Advisory] SQL Injection in ALTER_MANUALLOG_CHANGE_SOURCE procedure, Team SHATTER, 2005/04/18
[Full-disclosure] [AppSecInc Team SHATTER Security Advisory] Multiple SQL Injection vulnerabilities in DBMS_METADATA package, Team SHATTER, 2005/04/18
[Full-disclosure] [AppSecInc Team SHATTER Security Advisory] Multiple SQL Injection vulnerabilities in DBMS_CDC_SUBSCRIBE and DBMS_CDC_ISUBSCRIBE packages, Team SHATTER, 2005/04/18
[Full-disclosure] [AppSecInc Team SHATTER Security Advisory] Denial of Service in Oracle interMedia, Team SHATTER, 2005/04/18
[Full-disclosure] The first open source spyware, khaalel, 2005/04/18
[Full-disclosure] ERNW Security Advisory 01/2005, Mailinglists, 2005/04/18
[VulnWatch] [DR001] AppleWebKit XMLHttpRequest arbitrary file disclosure vulnerability, David Remahl, 2005/04/17
[VulnWatch] Windows kernel overflow fixed, NGSSoftware Insight Security Research, 2005/04/13
[Full-disclosure] BakBone NetVault 6.x/7.x multiples vulnerabilities + exploit, class101@HAT-SQUAD.com, 2005/04/13
[VulnWatch] Multiple medium risk flaws fixed in new version of PHP (late advisory), NGSSoftware Insight Security Research, 2005/04/13
[VulnWatch] Patch available for critical Veritas i3 Server vulnerability, NGSSoftware Insight Security Research, 2005/04/13
[VulnWatch] Multiple High Risk flaws fixed in Oracle, NGSSoftware Insight Security Research, 2005/04/13
iDEFENSE Security Advisory 04.12.05: Microsoft Internet Explorer DHTML Engine Race Condition Vulnerability, iDEFENSE Labs, 2005/04/12
iDEFENSE Security Advisory 04.12.05: Microsoft Windows Internet Explorer Long Hostname Heap Corruption Vulnerability, iDEFENSE Labs, 2005/04/12
iDEFENSE Security Advisory 04.12.05: Microsoft MSHTA Script Execution Vulnerability, iDEFENSE Labs, 2005/04/12
iDEFENSE Security Advisory 04.12.05: Microsoft Windows CSRSS.EXE Stack Overflow Vulnerability, iDEFENSE Labs, 2005/04/12
[VulnWatch] GLD (Greylisting daemon for Postfix) multiple vulnerabilities., dong-hun you, 2005/04/12
[VulnWatch] Microsoft Windows image rendering DoS vuln, Andrew, 2005/04/11
iDEFENSE Security Advisory 04.11.05: Computer Associates BrightStor ARCserve Backup UniversalAgent Buffer Overflow, iDEFENSE Labs, 2005/04/11
[VulnWatch] zOOM Media Gallery - Simple SQL Injection discovery, Andreas Constantinides, 2005/04/11
iDEFENSE Security Advisory 04.08.05: Microsoft Multiple E-Mail Client Address Spoofing Vulnerability, iDEFENSE Labs, 2005/04/09
- RE: iDEFENSE Security Advisory 04.08.05: Microsoft Multiple E-Mail Client Address Spoofing Vulnerability, Larry Seltzer, 2005/04/13
iDEFENSE Security Advisory 04.07.05: SGI IRIX gr_osview File Overwrite Vulnerability, iDEFENSE Labs, 2005/04/07
iDEFENSE Security Advisory 04.07.05: SGI IRIX gr_osview Information Disclosure Vulnerability, iDEFENSE Labs, 2005/04/07
[Full-disclosure] Nokia Terminal Gateway default installation vulnerability, Miracle Maker, 2005/04/07
iDEFENSE Security Advisory 04.06.05: IBM Lotus Domino Server Web Service DoS Vulnerability, iDEFENSE Labs, 2005/04/06
iDEFENSE Security Advisory 04.05.05: Computer Associates eTrust Intrusion Detection System CPImportKey DoS, iDEFENSE Labs, 2005/04/05
[Full-disclosure] MailEnable Imapd remote BoF + Exploit [x0n3-h4ck], expanders, 2005/04/05
[VulnWatch] Sybase ASE Multiple Security Issues (#NISR05042005), NGSSoftware Insight Security Research, 2005/04/05
[Full-disclosure] Microsoft Windows Internet Name Service (WINS) Remote Heap Overflow Exploit, class101@HAT-SQUAD.com, 2005/04/04
Information leak in the Linux kernel ext2 implementation, Arkoon Security Team, 2005/04/01
iDEFENSE Security Advisory 03.31.05: PHP getimagesize() Multiple Denial of Service Vulnerabilities, iDEFENSE Labs, 2005/04/01
[Full-disclosure] BakBone Netvault 6.x/7.x Local Stack Buffer Overflow, class101@HAT-SQUAD.com, 2005/04/01
- [Full-disclosure] BakBone NetVault 6.x/7.x Local Stack Buffer Overflow, class101@HAT-SQUAD.com, 2005/04/04
[Full-disclosure] BakBone Netvault 6.x/7.x Remote Heap Buffer Overflow, class101@HAT-SQUAD.com, 2005/04/01
- [Full-disclosure] BakBone NetVault 6.x/7.x Remote Heap Buffer Overflow, class101@HAT-SQUAD.com, 2005/04/04
[Full-disclosure] BakBone products multiple vulnerabilities, class101@HAT-SQUAD.com, 2005/04/01