Skip to content
OpenAdvisories

Archive

16 January 2008

Vulnerabilities first published on this day (UTC), newest first.

← December 2007 2008 / January /16 February 2008 →
  1. 1 
  2. 2 
  3. 311
  4. 454
  5. 5 
  6. 6 
  7. 7 
  8. 845
  9. 934
  10. 1038
  11. 1113
  12. 1216
  13. 13 
  14. 14 
  15. 1535
  16. 1628
  17. 1746
  18. 1823
  19. 19 
  20. 20 
  21. 21 
  22. 2216
  23. 2341
  24. 2414
  25. 2513
  26. 26 
  27. 27 
  28. 2810
  29. 2920
  30. 3015
  31. 3126
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Medium 6.5
    CVE-2008-0299

    Paramiko Unsafe randomness usage may allow access to sensitive information

    common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool.

    paramiko paramiko Debian PyPI
  • Unscored —
    CVE-2008-0298 Public exploit

    KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service (browser crash) via a cra…

  • Critical 9.8
    CVE-2008-0081 Public exploit EPSS 58%

    Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows use…

  • Unscored —
    CVE-2008-0297 Public exploit

    PhotoKorn allows remote attackers to obtain database credentials via a direct request to update/update3.php, which incl…

  • Unscored —
    CVE-2008-0292

    Cross-site scripting (XSS) vulnerability in photo_album.pl in Dansie Photo Album 1.0 allows remote attackers to inject …

  • Unscored —
    CVE-2008-0291 Public exploit

    SQL injection vulnerability in showproduct.asp in RichStrong CMS allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-0293

    Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remo…

  • Unscored —
    CVE-2008-0296 Public exploit EPSS 15%

    Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows …

    vlc Debian
  • Unscored —
    CVE-2008-0294

    Unspecified vulnerability in the seat-locking implementation in FreeSeat before 1.1.5d allows attackers to book a seat …

  • Unscored —
    CVE-2008-0295 Public exploit EPSS 11%

    Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Pla…

    vlc Debian
  • Unscored —
    CVE-2008-0036

    Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compresse…

  • Unscored —
    CVE-2008-0033

    Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (applicati…

  • Unscored —
    CVE-2008-0032

    Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Re…

  • Unscored —
    CVE-2007-5655

    TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through…

  • Unscored —
    CVE-2007-5658

    Heap-based buffer overflow in TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Messa…

  • Unscored —
    CVE-2007-5657

    TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through…

  • Unscored —
    CVE-2007-5656

    TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through…

  • Unscored —
    CVE-2008-0287 Public exploit

    PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP cod…

  • Unscored —
    CVE-2008-0288 Public exploit

    Multiple SQL injection vulnerabilities in ImageAlbum 2.0.0b2 allow remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-0034

    Unspecified vulnerability in Passcode Lock in Apple iPhone 1.0 through 1.1.2 allows users with physical access to execu…

  • Unscored —
    CVE-2008-0217

    The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-re…

  • Unscored —
    CVE-2008-0031

    Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (applicati…

  • Unscored —
    CVE-2008-0122 EPSS 12%

    Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 …

    glibc Debian
  • Unscored —
    CVE-2008-0290 Public exploit

    Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow (1) remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-0216

    The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device …

  • Unscored —
    CVE-2008-0289 Public exploit

    PHP remote file inclusion vulnerability in view_func.php in Member Area System (MAS) 1.7 and possibly others allows rem…

  • Unscored —
    CVE-2008-0035

    Unspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1.1 through 1.1.2, and M…

  • Unscored —
    CVE-2008-0286 Public exploit

    SQL injection vulnerability in admin/login.php in Article Dashboard allows remote attackers to execute arbitrary SQL co…