Archive
January 2008
Vulnerabilities first published in this month (UTC), newest first.
498 results · Feed
-
Unscored —
Unspecified vulnerability in HP-UX B.11.31, when running ARPA Transport, allows remote attackers to cause a denial of s…
-
Unscored —CVE-2008-0398 Public exploit
Cross-site scripting (XSS) vulnerability in aflog 1.01, and possibly earlier versions, allows remote attackers to injec…
-
Unscored —
Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment (T…
-
Unscored —CVE-2008-0400 Public exploit
Cross-site scripting (XSS) vulnerability in header.tpl.php in the modern template for Singapore 0.10.1 allows remote at…
-
Unscored —
Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows rem…
-
Unscored —CVE-2008-0399 Public exploit
Multiple buffer overflows in Toshiba Surveillance (Surveillix) RecordSend ActiveX control (MeIpCamX.DLL 1.0.0.4) allow …
-
Unscored —CVE-2008-0403 Public exploit
The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, whi…
-
Unscored —
Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Mantis before 1.1.1 allows remote attackers to inject arbitrary web script …
-
Unscored —
Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RC…
-
Unscored —CVE-2008-0397 Public exploit
Multiple SQL injection vulnerabilities in aflog 1.01, and possibly earlier versions, allow remote attackers to execute …
-
Unscored —CVE-2008-0396 Public exploit
Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Se…
-
Unscored —CVE-2008-0393 Public exploit
Directory traversal vulnerability in info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execu…
-
Unscored —
Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to …
-
Unscored —CVE-2008-0388 Public exploit
SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-0390 Public exploit
stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code int…
-
Unscored —CVE-2008-0391 Public exploit
inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an ar…
-
Unscored —
Unspecified vulnerability in the serveServletsByClassnameEnabled feature in IBM WebSphere Application Server (WAS) 6.0 …
-
Unscored —
The SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5.5.21 does not set the…
-
Unscored —
Unrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to upload and execute arbi…
-
Unscored —
Unspecified vulnerability in Mahara before 0.9.1 has unknown impact and remote attack vectors, probably related to cros…
-
Unscored —
Multiple stack-based buffer overflows in in_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote attackers to execute arb…
-
Unscored —
Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder.dll 1.1.0.29) allows r…
-
Unscored —
PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute…
-
Unscored —CVE-2008-0372 Public exploit
8e6 R3000 Internet Filter 2.0.05.33, and other versions before 2.0.11, allows remote attackers to bypass intended restr…
-
Unscored —CVE-2008-0371 Public exploit
Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled, allow remote authenticate…
-
Unscored —
Unspecified vulnerability in OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 allows remo…
-
Unscored —
Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via…
-
Unscored —CVE-2008-0383 Public exploit
Multiple SQL injection vulnerabilities in MyBB 1.2.10 and earlier allow remote moderators and administrators to execute…
-
Unscored —
Cross-site scripting (XSS) vulnerability in dohtaccess.html in cPanel before 11.17 build 19417 allows remote attackers …
-
Unscored —
Stack-based buffer overflow in SocksCap 2.40-051231 and earlier, when "Resolve all names remotely" is enabled, allows r…
-
Unscored —CVE-2008-0379 Public exploit
Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release…
-
Unscored —
MicroNews allows remote attackers to bypass authentication and gain administrative privileges via a direct request to a…
-
Unscored —
OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer i…
-
Unscored —CVE-2008-0384 Public exploit
OpenBSD 4.2 allows local users to cause a denial of service (kernel panic) by calling the SIOCGIFRTLABEL IOCTL on an in…
-
Unscored —
Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays …
-
Unscored —
Multiple unspecified programs in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allow local users to create ar…
-
Unscored —
onedcu in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allows local users to create arbitrary files via the …
-
Unscored —CVE-2008-0365 Public exploit
Multiple buffer overflows in CORE FORCE before 0.95.172 allow local users to cause a denial of service (system crash) a…
-
Unscored —
CORE FORCE before 0.95.172 does not properly validate arguments to SSDT hook handler functions in the Registry module, …