Archive
January 2008
Vulnerabilities first published in this month (UTC), newest first.
261 results · Clear filters · Feed
-
Unscored —CVE-2008-0324 Public exploit
Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash…
-
Unscored —
Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbit…
-
Unscored —
Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote a…
-
Unscored —CVE-2008-0298 Public exploit
KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service (browser crash) via a cra…
-
Critical 9.8
Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows use…
-
Unscored —CVE-2008-0297 Public exploit
PhotoKorn allows remote attackers to obtain database credentials via a direct request to update/update3.php, which incl…
-
Unscored —CVE-2008-0291 Public exploit
SQL injection vulnerability in showproduct.asp in RichStrong CMS allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows …
-
Unscored —
Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Pla…
-
Unscored —CVE-2008-0287 Public exploit
PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP cod…
-
Unscored —CVE-2008-0288 Public exploit
Multiple SQL injection vulnerabilities in ImageAlbum 2.0.0b2 allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-0290 Public exploit
Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow (1) remote attackers to execute arbitr…
-
Unscored —CVE-2008-0289 Public exploit
PHP remote file inclusion vulnerability in view_func.php in Member Area System (MAS) 1.7 and possibly others allows rem…
-
Unscored —CVE-2008-0286 Public exploit
SQL injection vulnerability in admin/login.php in Article Dashboard allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-0280 Public exploit
SQL injection vulnerability in index.php in MTCMS 2.0 and possibly earlier versions allows remote attackers to execute …
-
Unscored —CVE-2008-0282 Public exploit
SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2008-0283 Public exploit
PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execu…
-
Unscored —CVE-2008-0281 Public exploit
SQL injection vulnerability in liste.php in ID-Commerce 2.0 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-0262 Public exploit
SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute…
-
Unscored —CVE-2008-0268 Public exploit
Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2008-0278 Public exploit
SQL injection vulnerability in index.php in X7 Chat 2.0.5 and possibly earlier allows remote attackers to execute arbit…
-
Unscored —CVE-2008-0270 Public exploit
SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote authenticated users to execute a…
-
Unscored —CVE-2008-0256 Public exploit
Multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote attackers to execute arbitrar…
-
Unscored —CVE-2008-0259 Public exploit
Multiple directory traversal vulnerabilities in _mg/php/mg_thumbs.php in minimal Gallery 0.8 allow remote attackers to …
-
Unscored —CVE-2008-0255 Public exploit
SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute ar…
-
Unscored —CVE-2008-0253 Public exploit
SQL injection vulnerability in full_text.php in Binn SBuilder allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-0265 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Search function in the web management interface in F5 BIG-IP…
-
Unscored —CVE-2008-0258 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PHP Running Management (phpRunMan) before 1.0.3 allows remote …
-
Unscored —CVE-2008-0260 Public exploit
minimal Gallery 0.8 allows remote attackers to obtain configuration information via a direct request to php_info.php, w…
-
Unscored —CVE-2008-0266 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the a…
-
Unscored —CVE-2008-0267 Public exploit
Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL com…
-
Unscored —CVE-2008-0279 Public exploit
SQL injection vulnerability in liretopic.php in Xforum 1.4 and possibly others allows remote attackers to execute arbit…
-
Unscored —CVE-2008-0254 Public exploit
SQL injection vulnerability in activate.php in TutorialCMS (aka Photoshop Tutorials) 1.02, when magic_quotes_gpc is dis…
-
Unscored —CVE-2008-0245 Public exploit
admin.php in UploadImage 1.0 does not check for the original password before making a change to a new password, which a…
-
Unscored —CVE-2008-0249 Public exploit
PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to admin/backup_phpwebqu…
-
Unscored —
SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell m…
-
Unscored —
Buffer overflow in an ActiveX control in ccpm_0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers t…
-
Unscored —
Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a S…
-
Unscored —CVE-2008-0251 Public exploit
Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execut…
-
Unscored —CVE-2008-0246 Public exploit
admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which …