Archive
10 January 2008
Vulnerabilities first published on this day (UTC), newest first.
15 results · Clear filters · Feed
-
Unscored —CVE-2008-0222 Public exploit
Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows rem…
-
Unscored —
Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows …
-
Unscored —CVE-2008-0228 Public exploit
Cross-site request forgery (CSRF) vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with fi…
-
Unscored —CVE-2008-0224 Public exploit
SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attack…
-
Unscored —
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attack…
-
Unscored —CVE-2008-0219 Public exploit
SQL injection vulnerability in soporte_horizontal_w.php in PHP Webquest 2.6 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-0221 Public exploit
Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx …
-
Unscored —CVE-2008-0218 Public exploit
Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to in…
-
Unscored —
Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.…
-
Unscored —CVE-2008-0193 Public exploit
Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x throug…
-
Unscored —CVE-2008-0192 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2008-0207 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2008-0127 Public exploit
The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of…
-
Unscored —CVE-2008-0210 Public exploit
Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests,…
-
Unscored —CVE-2008-0190 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in templates/example_template.php in AwesomeTemplateEngine allow re…