(Oct 15) Frediano Ziglio reported a missing check in the script to generate demarshalling code in the SPICE protocol client and server library. The generated demarshalling code is prone to multiple buffer overflows. An authenticated attacker can take advantage of this flaw to cause a denial
(Oct 15) Nitin Venkatesh discovered a cross-site scripting vulnerability in moin, a Python clone of WikiWiki. A remote attacker can conduct cross-site scripting attacks via the GUI editor’s link dialogue. This only affects installations which have set up fckeditor (not enabled by default).
(Oct 15) Net-SNMP could be made to crash if it received specially crafted network traffic.
(Oct 15) Several security issues were fixed in Thunderbird.
51 queries. 8.5 mb Memory usage. 0.224 seconds.