Archive
8 January 2008
Vulnerabilities first published on this day (UTC), newest first.
45 results · Feed
-
Unscored —
Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (to…
-
Unscored —CVE-2007-0069 EPSS 49%
Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to …
-
Unscored —CVE-2007-0066 EPSS 32%
The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled…
-
Unscored —
Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, …
-
Unscored —CVE-2007-5360 EPSS 15%
Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC def…
-
Unscored —CVE-2008-0140 Public exploit
Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users t…
-
Unscored —CVE-2008-0137 Public exploit
PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to e…
-
Unscored —CVE-2008-0143 Public exploit
PHP remote file inclusion vulnerability in common/db.php in samPHPweb, possibly 4.2.2 and others, as provided with SAM …
-
Unscored —
Unspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown impact and attack vect…
-
Unscored —CVE-2008-0141 Public exploit
actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it e…
-
Unscored —CVE-2008-0135 Public exploit
Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote atta…
-
Unscored —CVE-2008-0146 Public exploit
Cross-site scripting (XSS) vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web s…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote attackers to execute ar…
-
Unscored —
Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami…
-
Unscored —CVE-2008-0138 Public exploit
PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module for XOOPS, when regist…
-
Unscored —CVE-2008-0133 Public exploit
Multiple SQL injection vulnerabilities in Tribisur 2.1 and earlier allow remote attackers to execute arbitrary SQL comm…
-
Unscored —
Eval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows remote attackers to exe…
-
Unscored —CVE-2008-0142 Public exploit
Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL comman…
-
Unscored —
The b_system_comments_show function in htdocs/modules/system/blocks/system_blocks.php in XOOPS before 2.0.18 does not c…
-
Unscored —
The default configuration of Uber Uploader (UU) 5.3.6 and earlier does not block uploads of (1) .html, (2) .asp, and ot…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Default.asp in RapidShare Database allows remote attackers to inject arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 thro…
-
Unscored —
The balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Mult…
-
Unscored —CVE-2007-6388 EPSS 76%
Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.…
-
Unscored —
SQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to execute arbit…
-
Unscored —CVE-2008-0129 Public exploit
SQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and earlier allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to …
-
Unscored —CVE-2008-0132 Public exploit
Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message win…
-
Unscored —CVE-2007-6671 Public exploit
SQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to execute arbit…
-
Medium —
Mortbay Jetty Double Slash URI Information Disclosure Vulnerability
Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI.
-
Unscored —CVE-2007-6673 Public exploit
Cross-site scripting (XSS) vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2008-0100 Public exploit
Stack-based buffer overflow in the Scene::errorf function in Scene.cpp in White_Dune 0.29 beta791 and earlier allows re…
-
Unscored —CVE-2008-0094 Public exploit
Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to (1) in…
-
Unscored —
Buffer overflow in RealPlayer 11 build 6.0.14.748 allows remote attackers to execute arbitrary code via unspecified vec…
-
Unscored —
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW be…
-
Unscored —CVE-2008-0096 Public exploit
Multiple buffer overflows in Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01.0003 and earlier allow remote attackers to e…
-
Unscored —
Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791 and earlier allows remot…
-
Unscored —CVE-2008-0099 Public exploit
Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL c…
-
Unscored —
Format string vulnerability in the log function in Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01.0003 and earlier allow…