Archive
28 January 2008
Vulnerabilities first published on this day (UTC), newest first.
10 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in HTTP File Server (HFS) before 2.2c allows remote attackers to inject arbitr…
-
Unscored —CVE-2008-0466 Public exploit
Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02…
-
Unscored —
Multiple directory traversal vulnerabilities in HTTP File Server (HFS) before 2.2c, when account names are used as log …
-
Unscored —
HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64…
-
Unscored —CVE-2008-0406 Public exploit
HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allows remote attackers to cause a de…
-
Unscored —
The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresu…
-
Unscored —
HTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage details by using an id ele…
-
Unscored —
HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authenticatio…
-
Unscored —
Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode…
-
Unscored —
libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexi…