Skip to content
OpenAdvisories

Archive

31 January 2008

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 311
  4. 454
  5. 5 
  6. 6 
  7. 7 
  8. 845
  9. 934
  10. 1038
  11. 1113
  12. 1216
  13. 13 
  14. 14 
  15. 1535
  16. 1628
  17. 1746
  18. 1823
  19. 19 
  20. 20 
  21. 21 
  22. 2216
  23. 2341
  24. 2414
  25. 2513
  26. 26 
  27. 27 
  28. 2810
  29. 2920
  30. 3015
  31. 3126

26 results · Feed

  • Unscored —

    cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwri…

  • Unscored —

    PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac (LUM) 6.2…

  • Unscored —

    Stack-based buffer overflow in Pierre-emmanuel Gougelet (1) XnView 1.91 and 1.92, (2) NConvert 4.85, and (3) libgfl280.…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.php in the Dean's Permalinks Migration 1.…

  • Unscored —
    CVE-2008-0517 Public exploit

    SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1 component for Mambo 4.5.…

  • Unscored —
    CVE-2008-0520 Public exploit

    Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote at…

  • Unscored —
    CVE-2008-0521 Public exploit

    Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to read arbitrary files vi…

  • Unscored —

    Multiple buffer overflows in IBM AIX 4.3 allow remote attackers to cause a denial of service (crash) or possibly gain p…

  • Unscored —

    PHP remote file inclusion vulnerability in spaw/dialogs/confirm.php in SQLiteManager 1.2.0 allows remote attackers to e…

  • Unscored —
    CVE-2008-0515 Public exploit

    SQL injection vulnerability in index.php in the musepoes (com_musepoes) component for Mambo and Joomla! allows remote a…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows…

  • Unscored —
    CVE-2008-0511 Public exploit

    SQL injection vulnerability in index.php in the MaMML (com_mamml) component for Mambo and Joomla! allows remote attacke…

  • Unscored —
    CVE-2008-0503 Public exploit EPSS 23%

    Eval injection vulnerability in admin/op/disp.php in Netwerk Smart Publisher 1.0.1 allows remote attackers to execute a…

  • Unscored —
    CVE-2008-0518 Public exploit

    SQL injection vulnerability in index.php in the Recipes (com_recipes) 1.00 component for Mambo and Joomla! allows remot…

  • Unscored —
    CVE-2008-0514 Public exploit

    SQL injection vulnerability in index.php in the Glossary (com_glossary) 2.0 component for Mambo and Joomla! allows remo…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.15…

  • Unscored —
    CVE-2008-0513 Public exploit

    Directory traversal vulnerability in parser/include/class.cache_phpcms.php in phpCMS 1.2.2 allows remote attackers to r…

  • Unscored —
    CVE-2008-0510 Public exploit

    SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4.5 and Joomla! allows …

  • Unscored —
    CVE-2008-0502 Public exploit

    PHP remote file inclusion vulnerability in templates/Official/part_userprofile.php in Connectix Boards 0.8.2 and earlie…

  • Unscored —
    CVE-2008-0506 Public exploit EPSS 59%

    include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the ImageMagick picture processin…

  • Unscored —
    CVE-2008-0504 Public exploit

    Multiple SQL injection vulnerabilities in Coppermine Photo Gallery (CPG) before 1.4.15 allow remote authenticated admin…

  • Unscored —
    CVE-2008-0519 Public exploit

    SQL injection vulnerability in index.php in the Atapin Jokes (com_jokes) 1.0 component for Mambo and Joomla! allows rem…

  • Unscored —
    CVE-2008-0507 Public exploit

    SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in multiple Hal Networks shopping-cart products allows remote attackers to inj…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow remote attackers to injec…

  • Unscored —
    CVE-2008-0512 Public exploit

    SQL injection vulnerability in index.php in the fq (com_fq) component for Mambo and Joomla! allows remote attackers to …