xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstrated by playing lol-ffplay.ogg with xine.

The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif.

Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable.

Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that “block common exploits” to SEF URLs, which has unknown impact and remote attack vectors.

Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a “User Redirect Spam fix,” possibly an open redirect vulnerability.

The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors.