Archive
January 2008
Vulnerabilities first published in this month (UTC), newest first.
261 results · Clear filters · Feed
-
Unscored —CVE-2008-0123 Public exploit
Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, all…
-
Unscored —CVE-2008-0239 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7…
-
Unscored —CVE-2008-0240 Public exploit
/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to in…
-
Unscored —CVE-2008-0233 Public exploit
Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended acc…
-
Unscored —
The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execute arbitrary comman…
-
Unscored —
Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, all…
-
Unscored —
An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary comm…
-
Unscored —CVE-2008-0232 Public exploit
Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-0231 Public exploit
Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange …
-
Unscored —CVE-2008-0230 Public exploit
PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote att…
-
Unscored —CVE-2008-0222 Public exploit
Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows rem…
-
Unscored —
Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows …
-
Unscored —CVE-2008-0228 Public exploit
Cross-site request forgery (CSRF) vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with fi…
-
Unscored —CVE-2008-0224 Public exploit
SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attack…
-
Unscored —
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attack…
-
Unscored —CVE-2008-0219 Public exploit
SQL injection vulnerability in soporte_horizontal_w.php in PHP Webquest 2.6 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-0221 Public exploit
Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx …
-
Unscored —CVE-2008-0218 Public exploit
Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to in…
-
Unscored —
Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.…
-
Unscored —CVE-2008-0193 Public exploit
Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x throug…
-
Unscored —CVE-2008-0192 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2008-0207 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2008-0127 Public exploit
The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of…
-
Unscored —CVE-2008-0210 Public exploit
Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests,…
-
Unscored —CVE-2008-0190 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in templates/example_template.php in AwesomeTemplateEngine allow re…
-
Unscored —CVE-2008-0184 Public exploit
Absolute path traversal vulnerability in index.php in Sys-Hotel on Line System allows remote attackers to read arbitrar…
-
Unscored —CVE-2008-0186 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to …
-
Unscored —CVE-2008-0187 Public exploit
SQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and earlier, allows remote att…
-
Unscored —CVE-2008-0185 Public exploit
SQL injection vulnerability in index.php in NetRisk 1.9.7 and possibly earlier versions allows remote attackers to exec…
-
Unscored —CVE-2007-5762 Public exploit
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by ope…
-
Unscored —CVE-2008-0151 Public exploit
Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause …
-
Unscored —
telnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service (process crash and re…
-
Unscored —CVE-2008-0158 Public exploit
Directory traversal vulnerability in index.php in Shop-Script 2.0 and possibly other versions allows remote attackers t…
-
Unscored —CVE-2008-0155 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to inject arbit…
-
Unscored —CVE-2008-0149 Public exploit
TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls…
-
Unscored —CVE-2008-0157 Public exploit
SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-0159 Public exploit
SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-0147 Public exploit
SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magic_quotes_gpc is disabled, allows remo…
-
Unscored —CVE-2008-0154 Public exploit
SQL injection vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-0148 Public exploit
TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell comma…