Archive
January 2008
Vulnerabilities first published in this month (UTC), newest first.
498 results · Feed
-
Unscored —
Unspecified vulnerability in the Pegasus CIM Server in IBM Hardware Management Console (HMC) 7 R3.2.0 allows remote att…
-
Unscored —CVE-2008-0473 Public exploit
RTE_popup_save_file.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload (1) .html and (2) .htm files …
-
Unscored —CVE-2008-0478 Public exploit
Directory traversal vulnerability in index.php in SetCMS 3.6.5 allows remote attackers to include and execute arbitrary…
-
Unscored —CVE-2008-0468 Public exploit
SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —
ManageEngine Applications Manager 8.1 build 8100 allows remote attackers to obtain sensitive information ( Home->Summar…
-
Unscored —CVE-2008-0469 Public exploit
SQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows remote attackers to ex…
-
Unscored —
ManageEngine Applications Manager 8.1 build 8100 does not check authentication for monitorType.do and unspecified other…
-
Unscored —CVE-2008-0480 Public exploit
Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrar…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in modcp.php in Woltlab Burning Board (wBB) 2.3.6 PL2 allows remote att…
-
Unscored —
A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the Execute…
-
Unscored —CVE-2008-0474 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 8.1 build 8100 allow remote at…
-
Unscored —CVE-2008-0481 Public exploit
Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to li…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete privat…
-
Unscored —
Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgr…
-
Unscored —CVE-2008-0479 Public exploit
Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbit…
-
Unscored —
The chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might …
-
Unscored —
Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote a…
-
Unscored —
GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames…
-
Unscored —
Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier vers…
-
Unscored —
Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execu…
-
Unscored —
Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 …
-
Unscored —
Cross-site scripting (XSS) vulnerability in HTTP File Server (HFS) before 2.2c allows remote attackers to inject arbitr…
-
Unscored —CVE-2008-0466 Public exploit
Web Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02…
-
Unscored —
Multiple directory traversal vulnerabilities in HTTP File Server (HFS) before 2.2c, when account names are used as log …
-
Unscored —
HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64…
-
Unscored —CVE-2008-0406 Public exploit
HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allows remote attackers to cause a de…
-
Unscored —
The pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresu…
-
Unscored —
HTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage details by using an id ele…
-
Unscored —
HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authenticatio…
-
Unscored —
Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode…
-
Unscored —
libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexi…
-
Unscored —CVE-2008-0458 Public exploit
Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and …
-
Unscored —CVE-2008-0465 Public exploit
Directory traversal vulnerability in optimizer.php in Seagull 0.6.3 allows remote attackers to read arbitrary files via…
-
Unscored —CVE-2008-0459 Public exploit
Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magic_quotes_gpc is disabled, all…
-
Unscored —CVE-2008-0464 Public exploit
Directory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7.0 and Mail 2004 Enterp…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Workflow 4.7.x before 4.7.x-1.2 and 5.x before 5.x-1.2 module for Drupa…
-
Unscored —CVE-2008-0461 Public exploit
SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_quotes_gpc …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Archive 5.x before 5.x-1.8 module for Drupal allows remote attackers to…
-
Unscored —CVE-2008-0460 EPSS 15%
Cross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10 through 1.10.2, 1.9 t…
-
Unscored —CVE-2008-0454 EPSS 25%
Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x…