1) Hitachi Multiple Business Logic Products Unspecified Cross-Site Scripting Vulnerability

Multiple Hitachi Business Logic products are susceptible to a Cross-Site Scripting vulnerability. If successful, Cross-Site Scripting can be exploited to manipulate or steal cookies, create requests that can be mistaken for those of a valid user, compromise confidential information, or execute malicious code on end user systems. An advisory and updates which address this issue have been released. Contact the vendor for additional information.

http://www.securityfocus.com/bid/35793

2) IBM Tivoli Identity Manager Session Fixation Vulnerability

IBM Tivoli Identity Manager is susceptible to a session fixation vulnerability.  Victims who are enticed into visiting a malicious URI can have their session hijacked and give an attacker unauthorized access to the application. A fix has been released. Contact the vendor for further details.

http://www.securityfocus.com/bid/35779

3) Apache HTTP Server HTTP-Basic Authentication Bypass Vulnerability

Apache HTTP Server is susceptible to an HTTP-Basic authentication bypass vulnerability.  Successful exploitation will give an attacker access to protected resources, likely leading to more damaging attacks.  A fix has not yet been released. Contact the vendor more information.

http://www.securityfocus.com/bid/35840

4) WordPress Multiple Cross-Site Scripting Vulnerabilities

WordPress is susceptible to multiple instances of Cross-Site Scripting. These vulnerabilities can be exploited to execute code in the browser of an unsuspecting user and steal cookie-based authentication credentials.   A fix has not yet been released for the 'wp-comments-post.php' issue, while a patch that resolves the Comment Author URI issue is available. Contact the vendor for additional information.

http://www.securityfocus.com/bid/35797
http://www.securityfocus.com/bid/35755

5) Bugzilla 'show_bug.cgi' Information Disclosure Vulnerability

Bugzilla is susceptible to an information disclosure vulnerability. Successful exploitation would give an authenticated attacker access to sensitive information, and would likely lead to more damaging attacks.  A fix has been released. Contact the vendor for more details.

http://www.securityfocus.com/bid/35916