Skip to content
OpenAdvisories

Archive

12 January 2008

Vulnerabilities first published on this day (UTC), newest first.

← December 2007 2008 / January /12 February 2008 →
  1. 1 
  2. 2 
  3. 311
  4. 454
  5. 5 
  6. 6 
  7. 7 
  8. 845
  9. 934
  10. 1038
  11. 1113
  12. 1216
  13. 13 
  14. 14 
  15. 1535
  16. 1628
  17. 1746
  18. 1823
  19. 19 
  20. 20 
  21. 21 
  22. 2216
  23. 2341
  24. 2414
  25. 2513
  26. 26 
  27. 27 
  28. 2810
  29. 2920
  30. 3015
  31. 3126
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2008-0245 Public exploit

    admin.php in UploadImage 1.0 does not check for the original password before making a change to a new password, which a…

  • Unscored —
    CVE-2008-0247

    Heap-based buffer overflow in the Express Backup Server service (dsmsvc.exe) in IBM Tivoli Storage Manager (TSM) Expres…

  • Unscored —
    CVE-2008-0249 Public exploit

    PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to admin/backup_phpwebqu…

  • High 7.5
    CVE-2008-0252

    CherryPy Malicious cookies allow access to files outside the session directory

    Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in CherryPy 2.x allows remote attackers to create or delete arb…

    cherrypy cherrypy3 Debian PyPI
  • Unscored —
    CVE-2008-0244 Public exploit EPSS 80%

    SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell m…

  • Unscored —
    CVE-2008-0248 Public exploit EPSS 11%

    Buffer overflow in an ActiveX control in ccpm_0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers t…

  • Unscored —
    CVE-2008-0250 Public exploit EPSS 17%

    Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a S…

  • Unscored —
    CVE-2008-0242

    Unspecified vulnerability in libdevinfo in Sun Solaris 10 allows local users to access files and gain privileges via un…

  • Unscored —
    CVE-2008-0251 Public exploit

    Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execut…

  • Unscored —
    CVE-2008-0243

    Unspecified vulnerability in Lotus Domino 7.0.2 before Fix Pack 3 allows attackers to cause a denial of service via unk…

  • Unscored —
    CVE-2008-0246 Public exploit

    admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which …

  • Unscored —
    CVE-2007-6284

    The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (i…

    libxml2 Debian
  • Unscored —
    CVE-2008-0123 Public exploit

    Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, all…

  • Unscored —
    CVE-2008-0005 EPSS 15%

    mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a …

    apache2 Debian
  • Unscored —
    CVE-2007-6420

    Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for Apache HTTP Server 2.…

    apache2 Debian
  • Unscored —
    CVE-2007-6423

    Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows,…

    apache2 Wolfi