Dynamic Analyzers:

CRED http://suif.stanford.edu/research/analysis.html#CRED
http://sourceforge.net/projects/boundschecking/

C-CURED http://manju.cs.berkeley.edu/ccured/

---

Static Analyzers:

cqual http://bane.cs.berkeley.edu/cqual/

Flawfinder http://www.dwheeler.com/flawfinder/

ITS4 http://www.cigital.com/its4/

LCLint http://lclint.cs.virginia.edu/

MOPS http://www.cs.berkeley.edu/~daw/mops

BOON http://www.cs.berkeley.edu/~daw/boon

Pscan http://www.striker.ottawa.on.ca/~aland/pscan/

RATS http://www.securesw.com/rats/

Sharefuzz www.atstake.com/research/tools/

Verisoft VeriSoft page

---

Dynamic Debuggers:

ElectricFence http://perens.com/FreeSoftware/

GDBProfilerhttp://serg.mcs.drexel.edu/gdbprofiler

MEMWATCH http://www.linkdata.se/sourcecode.html

---

Advisory:

CERT http://www.cert.org

CVE http://www.cve.mitre.org

Symantec http://securityresponse.symantec.com/

SecurityFocus http://www.securityfocus.com/