Archive
January 2008
Vulnerabilities first published in this month (UTC), newest first.
261 results · Clear filters · Feed
-
Unscored —CVE-2008-0396 Public exploit
Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Se…
-
Unscored —CVE-2008-0393 Public exploit
Directory traversal vulnerability in info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execu…
-
Unscored —
Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to …
-
Unscored —CVE-2008-0388 Public exploit
SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-0390 Public exploit
stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code int…
-
Unscored —CVE-2008-0391 Public exploit
inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an ar…
-
Unscored —
The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the…
-
Unscored —
Multiple stack-based buffer overflows in in_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote attackers to execute arb…
-
Unscored —
Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder.dll 1.1.0.29) allows r…
-
Unscored —
PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute…
-
Unscored —CVE-2008-0372 Public exploit
8e6 R3000 Internet Filter 2.0.05.33, and other versions before 2.0.11, allows remote attackers to bypass intended restr…
-
Unscored —CVE-2008-0371 Public exploit
Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticate…
-
Unscored —
Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via…
-
Unscored —CVE-2008-0383 Public exploit
Multiple SQL injection vulnerabilities in MyBB 1.2.10 and earlier allow remote moderators and administrators to execute…
-
Unscored —CVE-2008-0379 Public exploit
Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release…
-
Unscored —CVE-2008-0384 Public exploit
OpenBSD 4.2 allows local users to cause a denial of service (kernel panic) by calling the SIOCGIFRTLABEL IOCTL on an in…
-
Unscored —CVE-2008-0365 Public exploit
Multiple buffer overflows in CORE FORCE before 0.95.172 allow local users to cause a denial of service (system crash) a…
-
Unscored —CVE-2008-0364 Public exploit
Buffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier, and 1.8-alpha-7834 and earlier i…
-
Unscored —CVE-2007-5958 Public exploit
X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in …
-
Unscored —CVE-2008-0357 Public exploit
Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote a…
-
Unscored —CVE-2008-0361 Public exploit
Directory traversal vulnerability in agregar_info.php in GradMan 0.1.3 and earlier allows remote attackers to include a…
-
Unscored —CVE-2008-0355 Public exploit
SQL injection vulnerability in index.php in the forum module in PHPEcho CMS, probably 2.0-rc3 and earlier, allows remot…
-
Unscored —CVE-2008-0353 Public exploit
SQL injection vulnerability in visualizza_tabelle.php in php-residence 0.7.2 and 1.0 allows remote attackers to execute…
-
Unscored —CVE-2008-0360 Public exploit
Multiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-0359 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2008-0358 Public exploit
SQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-0351 Public exploit
admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the e…
-
Unscored —
The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv…
-
Unscored —CVE-2008-0350 Public exploit
admin/index.php in Evilsentinel 1.0.9 and earlier sends a redirect to the web browser but does not exit, which allows r…
-
Unscored —
Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unk…
-
Unscored —CVE-2008-0337 Public exploit
Heap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote a…
-
Unscored —
Directory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET al…
-
Unscored —CVE-2008-0328 Public exploit
SQL injection vulnerability in page.php in FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-0334 Public exploit
Cross-site scripting (XSS) vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote att…
-
Unscored —CVE-2008-0338 Public exploit
Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows rem…
-
Unscored —CVE-2008-0325 Public exploit
SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-0326 Public exploit
SQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-0332 Public exploit
Directory traversal vulnerability in arias/help/effect.php in aria 0.99-6 allows remote attackers to include and execut…
-
Unscored —CVE-2008-0327 Public exploit
SQL injection vulnerability in show.php in FaScript FaMp3 1.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-0329 Public exploit
LulieBlog 1.0.1 and 1.0.2 does not restrict access to (1) article_suppr.php, (2) comment_accepter.php, and (3) comment_…