Archive
January 2008
Vulnerabilities first published in this month (UTC), newest first.
498 results · Feed
-
Unscored —CVE-2008-0325 Public exploit
SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to del…
-
Unscored —CVE-2008-0326 Public exploit
SQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-0332 Public exploit
Directory traversal vulnerability in arias/help/effect.php in aria 0.99-6 allows remote attackers to include and execut…
-
Unscored —CVE-2008-0327 Public exploit
SQL injection vulnerability in show.php in FaScript FaMp3 1.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
Cross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web…
-
Unscored —
Open System Consultants (OSC) Radiator before 4.0 allows remote attackers to cause a denial of service (daemon crash) v…
-
Unscored —CVE-2008-0329 Public exploit
LulieBlog 1.0.1 and 1.0.2 does not restrict access to (1) article_suppr.php, (2) comment_accepter.php, and (3) comment_…
-
Unscored —CVE-2008-0027 EPSS 57%
Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Comm…
-
Unscored —CVE-2008-0324 Public exploit
Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash…
-
Unscored —
Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute …
-
Unscored —
Multiple unspecified vulnerabilities in Menalto Gallery before 2.2.4 have unknown impact, related to (1) "hotlink prote…
-
Unscored —
Menalto Gallery before 2.2.4 does not properly check for malicious file extensions during file uploads, which allows at…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Menalto Gallery before 2.2.4 allow remote attackers to inject ar…
-
Unscored —
Unspecified vulnerability in the Publish XP module Menalto Gallery before 2.2.4 allows attackers to create albums and u…
-
Unscored —
Unspecified vulnerability in the WebCam module in Menalto Gallery before 2.2.4 has unknown impact and attack vectors re…
-
Unscored —
The Gallery Remote module in Menalto Gallery before 2.2.4 does not check permissions for unspecified GR commands, which…
-
Unscored —
The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files vi…
-
Unscored —
Unspecified vulnerability in the Installation application in Menalto Gallery before 2.2.4 has unknown impact and attack…
-
Unscored —
Open redirect vulnerability in Menalto Gallery before 2.2.4 allows remote attackers to redirect users to arbitrary web …
-
Unscored —
Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbit…
-
Unscored —
The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via (1) the :demuxdump-f…
-
Unscored —
Format string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote a…
-
Unscored —
The RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service (crash) via a request witho…
-
Medium 6.5
Paramiko Unsafe randomness usage may allow access to sensitive information
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by predicting the state of the pool.
-
Unscored —CVE-2008-0298 Public exploit
KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service (browser crash) via a cra…
-
Critical 9.8
Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows use…
-
Unscored —CVE-2008-0297 Public exploit
PhotoKorn allows remote attackers to obtain database credentials via a direct request to update/update3.php, which incl…
-
Unscored —
Cross-site scripting (XSS) vulnerability in photo_album.pl in Dansie Photo Album 1.0 allows remote attackers to inject …
-
Unscored —CVE-2008-0291 Public exploit
SQL injection vulnerability in showproduct.asp in RichStrong CMS allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
Unspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain modifications, allows remo…
-
Unscored —
Heap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d and earlier on Windows …
-
Unscored —
Unspecified vulnerability in the seat-locking implementation in FreeSeat before 1.1.5d allows attackers to book a seat …
-
Unscored —
Heap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in VideoLAN VLC Media Pla…
-
Unscored —
Buffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a crafted compresse…
-
Unscored —
Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (applicati…
-
Unscored —
Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Re…
-
Unscored —
TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through…
-
Unscored —
Heap-based buffer overflow in TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Messa…
-
Unscored —
TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through…