Archive
17 January 2008
Vulnerabilities first published on this day (UTC), newest first.
46 results · Feed
-
Unscored —CVE-2008-0351 Public exploit
admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the e…
-
Unscored —
The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv…
-
Unscored —CVE-2008-0350 Public exploit
admin/index.php in Evilsentinel 1.0.9 and earlier sends a redirect to the web browser but does not exit, which allows r…
-
Unscored —
Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+ and 10.1.0.5 has unknown i…
-
Unscored —
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact a…
-
Unscored —
The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and …
-
Unscored —
Multiple unspecified vulnerabilities in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards Enterp…
-
Unscored —
Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact and remote attack …
-
Unscored —
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.4…
-
Unscored —
Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, …
-
Unscored —
Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.…
-
Unscored —
Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite…
-
Unscored —
Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unk…
-
Unscored —
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have …
-
Unscored —
Unspecified vulnerability in the Upgrade/Downgrade component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unk…
-
Unscored —
regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows cont…
-
Unscored —CVE-2008-0337 Public exploit
Heap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote a…
-
Unscored —
Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET al…
-
Unscored —
Unspecified vulnerability in Funkwerk System Software before 7.4.1 PATCH 9 for certain Funkwerk Router / VPN devices al…
-
Unscored —CVE-2008-0328 Public exploit
SQL injection vulnerability in page.php in FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-0334 Public exploit
Cross-site scripting (XSS) vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote att…
-
Unscored —CVE-2008-0338 Public exploit
Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows rem…
-
Unscored —CVE-2008-0325 Public exploit
SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to del…
-
Unscored —CVE-2008-0326 Public exploit
SQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-0332 Public exploit
Directory traversal vulnerability in arias/help/effect.php in aria 0.99-6 allows remote attackers to include and execut…
-
Unscored —CVE-2008-0327 Public exploit
SQL injection vulnerability in show.php in FaScript FaMp3 1.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
Cross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web…
-
Unscored —
Open System Consultants (OSC) Radiator before 4.0 allows remote attackers to cause a denial of service (daemon crash) v…
-
Unscored —CVE-2008-0329 Public exploit
LulieBlog 1.0.1 and 1.0.2 does not restrict access to (1) article_suppr.php, (2) comment_accepter.php, and (3) comment_…
-
Unscored —CVE-2008-0027 EPSS 57%
Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Comm…
-
Unscored —CVE-2008-0324 Public exploit
Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash…
-
Unscored —
Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute …
-
Unscored —
Multiple unspecified vulnerabilities in Menalto Gallery before 2.2.4 have unknown impact, related to (1) "hotlink prote…
-
Unscored —
Menalto Gallery before 2.2.4 does not properly check for malicious file extensions during file uploads, which allows at…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Menalto Gallery before 2.2.4 allow remote attackers to inject ar…
-
Unscored —
Unspecified vulnerability in the Publish XP module Menalto Gallery before 2.2.4 allows attackers to create albums and u…
-
Unscored —
Unspecified vulnerability in the WebCam module in Menalto Gallery before 2.2.4 has unknown impact and attack vectors re…
-
Unscored —
The Gallery Remote module in Menalto Gallery before 2.2.4 does not check permissions for unspecified GR commands, which…
-
Unscored —
The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files vi…