SECUNIA ADVISORY ID: SA23407

VERIFY ADVISORY: http://secunia.com/advisories/23407/

CRITICAL: Highly critical

IMPACT: Security Bypass, Manipulation of data, System access

SOFTWARE: PHP-Update 2.x - http://secunia.com/product/12926/

DESCRIPTION: rgod has discovered some vulnerabilities in PHP-Update, which can be exploited by malicious people to bypass certain security restrictions and by malicious users to compromise vulnerable systems and manipulate data. The vulnerabilities are confirmed in version 2.7 flat file edition but not in version 2.7 MySQL edition. Other versions may also be affected.  Read More...

SECUNIA ADVISORY ID: SA23398

VERIFY ADVISORY: http://secunia.com/advisories/23398/

CRITICAL: Moderately critical

IMPACT: Security Bypass

SOFTWARE:
Sun Java JDK 1.5.x - http://secunia.com/product/4621/
Sun Java JRE 1.5.x / 5.x - http://secunia.com/product/4228/
Sun Java JRE 1.4.x - http://secunia.com/product/784/
Sun Java JRE 1.3.x - http://secunia.com/product/87/
Sun Java SDK 1.4.x - http://secunia.com/product/1661/
Sun Java SDK 1.3.x - http://secunia.com/product/1660/

DESCRIPTION: Two vulnerabilities have been reported in Sun Java JRE (Java Runtime Environment), which can be exploited by malicious people to bypass certain security restrictions. Read More...

SECUNIA ADVISORY ID: SA23423

VERIFY ADVISORY: http://secunia.com/advisories/23423/

CRITICAL: Highly critical

IMPACT: System access

SOFTWARE: phpProfiles 3.x - http://secunia.com/product/12934/

DESCRIPTION: nuffsaid has discovered several vulnerabilities in phpProfiles, which can be exploited by malicious people to compromise vulnerable systems. The vulnerabilities are confirmed in version 3.1.2. Other versions may also be affected. Read More...

SECUNIA ADVISORY ID: SA23341

VERIFY ADVISORY: http://secunia.com/advisories/23341/

CRITICAL: Less critical

IMPACT: Cross Site Scripting

SOFTWARE:
WebCalendar 1.x - http://secunia.com/product/5606/
WebCalendar 0.9.x - http://secunia.com/product/1901/

DESCRIPTION: 7all has discovered a vulnerability in WebCalendar, which can be exploited by malicious people to conduct cross-site scripting attacks.  Read More...

SECUNIA ADVISORY ID: SA23325

VERIFY ADVISORY: http://secunia.com/advisories/23325/

CRITICAL: Highly critical

IMPACT: System access

SOFTWARE:
Sophos Anti-Virus for Windows 6.x - http://secunia.com/product/12449/
Sophos Anti-Virus 3.x - http://secunia.com/product/164/
Sophos Anti-Virus 4.x - http://secunia.com/product/5391/
Sophos Anti-Virus 5.x - http://secunia.com/product/5390/

DESCRIPTION: Two vulnerabilities have been reported in Sophos Anti-Virus, which can be exploited by malicious people to compromise a user's system. Successful exploitation of the vulnerabilities allows execution of arbitrary code. Read More...

SECUNIA ADVISORY ID: SA23345

VERIFY ADVISORY: http://secunia.com/advisories/23345/

CRITICAL: Highly critical

IMPACT: System access

SOFTWARE: BLOG:CMS 4.x - http://secunia.com/product/6051/

DESCRIPTION: HACKERS PAL has discovered a vulnerability in BLOG:CMS, which can be exploited by malicious people to compromise vulnerable systems. Read More...