gen_msn Winamp Plugin '.pls' Playlist File Remote Heap Buffer Overflow Vulnerability

Movable Type Prior to Version 4.23 Unspecified Cross-Site Scripting Vulnerability

A security issue and a vulnerability have been reported in the Project Issue Tracking module for Drupal, which can be exploited by malicious users to disclose sensitive information or conduct script insertion attacks.

Sina Yazdanmehr has reported a vulnerability in the Members CV module for PHP-Fusion, which can be exploited by malicious users to conduct SQL injection attacks.

A vulnerability has been reported in Lasso, which can be exploited by malicious people to conduct spoofing attacks.

A security issue in Xdg-utils has been reported, which can be exploited by malicious people to compromise a user's system.

Samba Registry Share Name Unauthorized Access Vulnerability

Multiple Vendor FTP Server Long Command Handling Security Vulnerability

FreeBSD has issued an update for lukemftpd. This fixes a vulnerability, which can be exploited by malicious people to conduct cross-site request forgery attacks.

A vulnerability has been reported in tnftpd, which can be exploited by malicious people to conduct cross-site request forgery attacks.

A vulnerability has been reported in Cisco Global Site Selector, which can be exploited by malicious people to cause a DoS (Denial of Service).

A vulnerability has been reported in NTP, which can be exploited by malicious people to conduct spoofing attacks.

Red Hat has issued an update for lcms. This fixes some vulnerabilities, which can be exploited by malicious people to compromise a vulnerable system.

Red Hat has issued an update for hanterm-xf. This fixes a vulnerability, which can be exploited by malicious people to compromise a user's system.

FreeBSD has issued an update for openssl. This fixes a vulnerability, which can be exploited by malicious people to conduct spoofing attacks.

Debian has issued an update for iceape. This fixes some vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting and spoofing attacks, bypass certain security restrictions, disclose sensitive information, conduct cross-site scripting attacks, or potentially compromise a user's system.

A vulnerability has been reported in CA Service Level Management (SLM) and CA Service Metric Analysis (SMA), which can be exploited by malicious people to compromise a vulnerable system.

A vulnerability has been reported in Movable Type, which can be exploited by malicious people to conduct cross-site scripting attacks.

Debian has issued an update for icedove. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, to disclose sensitive information, conduct cross-site scripting attacks, or to potentially compromise a user's system.

SkD has discovered a vulnerability in the gen_msn plugin for Winamp, which can be exploited by malicious people to potentially compromise a user's system.