Skip to content
OpenAdvisories

Archive

January 2008

Vulnerabilities first published in this month (UTC), newest first.

← December 2007 2008 / January February 2008 →
  1. 1 
  2. 2 
  3. 311
  4. 454
  5. 5 
  6. 6 
  7. 7 
  8. 845
  9. 934
  10. 1038
  11. 1113
  12. 1216
  13. 13 
  14. 14 
  15. 1535
  16. 1628
  17. 1746
  18. 1823
  19. 19 
  20. 20 
  21. 21 
  22. 2216
  23. 2341
  24. 2414
  25. 2513
  26. 26 
  27. 27 
  28. 2810
  29. 2920
  30. 3015
  31. 3126
All Critical High Medium Low Exploited only Public exploit

498 results · Feed

  • Unscored —
    CVE-2008-0146 Public exploit

    Cross-site scripting (XSS) vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2008-0144 Public exploit EPSS 45%

    PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-0136

    Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami…

  • Unscored —
    CVE-2008-0138 Public exploit

    PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module for XOOPS, when regist…

  • Unscored —
    CVE-2008-0133 Public exploit

    Multiple SQL injection vulnerabilities in Tribisur 2.1 and earlier allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-0139 Public exploit EPSS 22%

    Eval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2008-0142 Public exploit

    Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2007-6675

    The b_system_comments_show function in htdocs/modules/system/blocks/system_blocks.php in XOOPS before 2.0.18 does not c…

  • Unscored —
    CVE-2007-6676

    The default configuration of Uber Uploader (UU) 5.3.6 and earlier does not block uploads of (1) .html, (2) .asp, and ot…

  • Unscored —
    CVE-2007-6674

    Cross-site scripting (XSS) vulnerability in Default.asp in RapidShare Database allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2007-6421

    Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 thro…

    apache2 Debian
  • Unscored —
    CVE-2007-6422

    The balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Mult…

    apache2 Debian
  • Unscored —
    CVE-2007-6388 EPSS 76%

    Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.…

    apache2 Debian
  • Unscored —
    CVE-2008-0130

    SQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-0129 Public exploit

    SQL injection vulnerability in starnet/addons/slideshow_full.php in Site@School 2.3.10 and earlier allows remote attack…

  • Unscored —
    CVE-2008-0131

    Cross-site scripting (XSS) vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to …

  • Unscored —
    CVE-2008-0132 Public exploit

    Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message win…

  • Unscored —
    CVE-2007-6671 Public exploit

    SQL injection vulnerability in login_form.asp in Instant Softwares Dating Site allows remote attackers to execute arbit…

  • Medium —
    CVE-2007-6672

    Mortbay Jetty Double Slash URI Information Disclosure Vulnerability

    Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI.

    org.mortbay.jetty:jetty Maven
  • Unscored —
    CVE-2007-6673 Public exploit

    Cross-site scripting (XSS) vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HT…

  • Unscored —
    CVE-2008-0100 Public exploit

    Stack-based buffer overflow in the Scene::errorf function in Scene.cpp in White_Dune 0.29 beta791 and earlier allows re…

    whitedune Debian
  • Unscored —
    CVE-2008-0094 Public exploit

    Multiple directory traversal vulnerabilities in MODx Content Management System 0.9.6.1 allow remote attackers to (1) in…

  • Unscored —
    CVE-2008-0098

    Buffer overflow in RealPlayer 11 build 6.0.14.748 allows remote attackers to execute arbitrary code via unspecified vec…

  • Unscored —
    CVE-2008-0095 Public exploit EPSS 25%

    The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW be…

    asterisk Debian
  • Unscored —
    CVE-2008-0096 Public exploit

    Multiple buffer overflows in Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01.0003 and earlier allow remote attackers to e…

  • Unscored —
    CVE-2008-0101

    Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791 and earlier allows remot…

    whitedune Debian
  • Unscored —
    CVE-2008-0099 Public exploit

    Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-0097

    Format string vulnerability in the log function in Georgia SoftWorks SSH2 Server (GSW_SSHD) 7.01.0003 and earlier allow…

  • Unscored —
    CVE-2007-6668 Public exploit

    admin/uploadgames.php in MySpace Content Zone (MCZ) 3.x does not require administrative privileges, which allows remote…

  • Unscored —
    CVE-2007-6670 Public exploit

    SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2007-6669 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2008-0093

    Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow r…

  • Unscored —
    CVE-2007-5965

    QSslSocket in Trolltech Qt 4.3.0 through 4.3.2 does not properly verify SSL certificates, which might make it easier fo…

  • Unscored —
    CVE-2007-6654 Public exploit

    Buffer overflow in a certain ActiveX control in Macrovision InstallShield Update Service Web Agent 5.1.100.47363 allows…

  • Unscored —
    CVE-2007-6658 Public exploit

    SQL injection vulnerability in admin.php/vars.php in CustomCMS (CCMS) 3.1 Demo allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-6666 Public exploit

    SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2007-6660

    2z project 0.9.6.1 allows remote attackers to obtain sensitive information via (1) a request to index.php with an inval…

  • Unscored —
    CVE-2007-6647 Public exploit

    SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2007-6656 Public exploit

    SQL injection vulnerability in content_css.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remot…

  • Unscored —
    CVE-2007-6653 Public exploit

    Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrar…