Skip to content
OpenAdvisories

Archive

18 January 2008

Vulnerabilities first published on this day (UTC), newest first.

← December 2007 2008 / January /18 February 2008 →
  1. 1 
  2. 2 
  3. 311
  4. 454
  5. 5 
  6. 6 
  7. 7 
  8. 845
  9. 934
  10. 1038
  11. 1113
  12. 1216
  13. 13 
  14. 14 
  15. 1535
  16. 1628
  17. 1746
  18. 1823
  19. 19 
  20. 20 
  21. 21 
  22. 2216
  23. 2341
  24. 2414
  25. 2513
  26. 26 
  27. 27 
  28. 2810
  29. 2920
  30. 3015
  31. 3126
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2008-0367

    Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays …

  • Unscored —
    CVE-2008-0369

    Multiple unspecified programs in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allow local users to create ar…

  • Unscored —
    CVE-2008-0368

    onedcu in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allows local users to create arbitrary files via the …

  • Unscored —
    CVE-2008-0365 Public exploit

    Multiple buffer overflows in CORE FORCE before 0.95.172 allow local users to cause a denial of service (system crash) a…

  • Unscored —
    CVE-2008-0366

    CORE FORCE before 0.95.172 does not properly validate arguments to SSDT hook handler functions in the Registry module, …

  • Unscored —
    CVE-2008-0364 Public exploit

    Buffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier, and 1.8-alpha-7834 and earlier i…

  • Unscored —
    CVE-2008-0006

    Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms includi…

    xorg-server libxfont Debian
  • Unscored —
    CVE-2007-6429

    Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code vi…

    xorg-server Debian
  • Unscored —
    CVE-2007-6428

    The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-depen…

    xorg-server Debian
  • Unscored —
    CVE-2007-6427

    The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via req…

    xorg-server Debian
  • Unscored —
    CVE-2007-5760

    Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to exe…

    xorg-server Debian
  • Unscored —
    CVE-2007-5958 Public exploit

    X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in …

    xorg-server Debian
  • Unscored —
    CVE-2008-0357 Public exploit

    Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote a…

  • Unscored —
    CVE-2008-0361 Public exploit

    Directory traversal vulnerability in agregar_info.php in GradMan 0.1.3 and earlier allows remote attackers to include a…

  • Unscored —
    CVE-2008-0355 Public exploit

    SQL injection vulnerability in index.php in the forum module in PHPEcho CMS, probably 2.0-rc3 and earlier, allows remot…

  • Unscored —
    CVE-2008-0353 Public exploit

    SQL injection vulnerability in visualizza_tabelle.php in php-residence 0.7.2 and 1.0 allows remote attackers to execute…

  • Unscored —
    CVE-2008-0360 Public exploit

    Multiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2008-0356 EPSS 73%

    Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Prese…

  • Unscored —
    CVE-2008-0359 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2008-0358 Public exploit

    SQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-0363

    Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-0354

    Cross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted re…

  • Unscored —
    CVE-2008-0362

    Cross-site scripting (XSS) vulnerability in gallery.php in Clever Copy 3.0 and earlier allows remote attackers to injec…