7: Property replacement in any descriptor ignores java security policies

An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies

xpdf: Insufficient sanitization of escape sequences in the error messages

The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.

A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys.

A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu-import script due to an error when verifying the GPG signature.

ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface.

A cross-site request forgery (CSRF) vulnerability in the Activity module 6.x-1.x for Drupal.

Cross-site scripting (XSS) vulnerability in the Activity module 6.x-1.x for Drupal.

PrestaShop before 1.5.2 allows XSS via the "<object data='data:text/html" substring in the message field.

HP Systems Insight Manager before 7.0 allows a remote user on adjacent network to access information

A cross-site scripting (XSS) vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web script or HTML via the setting[admin_email] parameter to admin/setting.

EllisLab CodeIgniter 2.1.2 allows remote attackers to bypass the xss_clean() Filter and perform XSS attacks.

XSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess parameter.

A Privilege Escalation vulnerability exits in Fedoraproject Sectool due to an incorrect DBus file.

struts2: xsltResult local code execution flaw

A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files.

lib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0.

OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space

LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintUpdate.

LinuxMint as of 2012-03-19 has temporary file creation vulnerabilities in mintNanny.

Joomla! before 2.5.3 allows Admin Account Creation.

Joomla! core before 2.5.3 allows unauthorized password change.