Archive
January 2008
Vulnerabilities first published in this month (UTC), newest first.
498 results · Feed
-
Unscored —CVE-2008-0187 Public exploit
SQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and earlier, allows remote att…
-
Unscored —CVE-2008-0185 Public exploit
SQL injection vulnerability in index.php in NetRisk 1.9.7 and possibly earlier versions allows remote attackers to exec…
-
Unscored —CVE-2007-5762 Public exploit
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by ope…
-
Unscored —
The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 befo…
-
Unscored —
The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 befo…
-
Unscored —
PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superu…
-
Unscored —
Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 b…
-
Unscored —
The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 befo…
-
Unscored —
ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on Unix and Linux allows local use…
-
Unscored —
Unrestricted file upload vulnerability in uploadrequest.asp in Layton HelpBox 3.7.1 allows remote authenticated users t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Layton HelpBox 3.7.1 allow remote authenticated users to inject …
-
Unscored —
Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is valid in a failed login at…
-
Unscored —
Multiple SQL injection vulnerabilities in Layton HelpBox 3.7.1 allow (1) remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-0151 Public exploit
Heap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows remote attackers to cause …
-
Unscored —
telnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service (process crash and re…
-
Unscored —CVE-2008-0158 Public exploit
Directory traversal vulnerability in index.php in Shop-Script 2.0 and possibly other versions allows remote attackers t…
-
Unscored —CVE-2008-0155 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to inject arbit…
-
Unscored —CVE-2008-0149 Public exploit
TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls…
-
Unscored —CVE-2008-0157 Public exploit
SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-0159 Public exploit
SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —
Unspecified vulnerability in the LDAP authentication feature in Aruba Mobility Controller 2.3.6.15, 2.5.2.11, 2.5.4.25,…
-
Unscored —
SLnet.exe in SeattleLab SLNet RF Telnet Server 4.1.1.3758 and earlier allows user-assisted remote attackers to cause a …
-
Unscored —CVE-2008-0147 Public exploit
SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magic_quotes_gpc is disabled, allows remo…
-
Unscored —
Absolute path traversal vulnerability in index.php in Million Dollar Script 2.0.14 allows remote attackers to read arbi…
-
Unscored —CVE-2008-0154 Public exploit
SQL injection vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-0148 Public exploit
TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell comma…
-
Unscored —
The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \\.\NantSys device in…
-
Unscored —
STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management (ESM) 3.5, and other ESM versions before 3.5.0.82…
-
Unscored —
Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (to…
-
Unscored —CVE-2007-0069 EPSS 49%
Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to …
-
Unscored —CVE-2007-0066 EPSS 32%
The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled…
-
Unscored —
Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, …
-
Unscored —CVE-2007-5360 EPSS 15%
Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC def…
-
Unscored —CVE-2008-0140 Public exploit
Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users t…
-
Unscored —CVE-2008-0137 Public exploit
PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to e…
-
Unscored —CVE-2008-0143 Public exploit
PHP remote file inclusion vulnerability in common/db.php in samPHPweb, possibly 4.2.2 and others, as provided with SAM …
-
Unscored —
Unspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown impact and attack vect…
-
Unscored —CVE-2008-0141 Public exploit
actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it e…
-
Unscored —CVE-2008-0135 Public exploit
Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote atta…