Archive
January 2008
Vulnerabilities first published in this month (UTC), newest first.
498 results · Feed
-
Unscored —
TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through…
-
Unscored —CVE-2008-0287 Public exploit
PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP cod…
-
Unscored —CVE-2008-0288 Public exploit
Multiple SQL injection vulnerabilities in ImageAlbum 2.0.0b2 allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Unspecified vulnerability in Passcode Lock in Apple iPhone 1.0 through 1.1.2 allows users with physical access to execu…
-
Unscored —
The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-re…
-
Unscored —
Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (applicati…
-
Unscored —CVE-2008-0122 EPSS 12%
Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 …
-
Unscored —CVE-2008-0290 Public exploit
Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow (1) remote attackers to execute arbitr…
-
Unscored —
The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device …
-
Unscored —CVE-2008-0289 Public exploit
PHP remote file inclusion vulnerability in view_func.php in Member Area System (MAS) 1.7 and possibly others allows rem…
-
Unscored —
Unspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1.1 through 1.1.2, and M…
-
Unscored —CVE-2008-0286 Public exploit
SQL injection vulnerability in admin/login.php in Article Dashboard allows remote attackers to execute arbitrary SQL co…
-
Unscored —
ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service (crash) …
-
Unscored —CVE-2008-0280 Public exploit
SQL injection vulnerability in index.php in MTCMS 2.0 and possibly earlier versions allows remote attackers to execute …
-
Unscored —CVE-2008-0282 Public exploit
SQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2008-0283 Public exploit
PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to in…
-
Unscored —CVE-2008-0281 Public exploit
SQL injection vulnerability in liste.php in ID-Commerce 2.0 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-0262 Public exploit
SQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows remote attackers to execute…
-
Unscored —CVE-2008-0268 Public exploit
Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2008-0278 Public exploit
SQL injection vulnerability in index.php in X7 Chat 2.0.5 and possibly earlier allows remote attackers to execute arbit…
-
Unscored —
Unspecified vulnerability in the dotoprocs function in Sun Solaris 10 allows local users to cause a denial of service (…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the aggregator module in Drupal 4.7.x before 4.7.11 and 5.x before 5…
-
Unscored —
SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-0270 Public exploit
SQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote authenticated users to execute a…
-
Unscored —CVE-2008-0256 Public exploit
Multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote attackers to execute arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.pl in Dansie Search Engine 2.7 allows remote attackers to inject arb…
-
Unscored —CVE-2008-0259 Public exploit
Multiple directory traversal vulnerabilities in _mg/php/mg_thumbs.php in minimal Gallery 0.8 allow remote attackers to …
-
Unscored —CVE-2008-0255 Public exploit
SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute ar…
-
Unscored —
Unspecified vulnerability in the Fileshare module for Drupal allows remote authenticated users with node-creation privi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Devel module before 5.x-0.1 for Drupal allows remote attackers to injec…
-
Unscored —CVE-2008-0253 Public exploit
SQL injection vulnerability in full_text.php in Binn SBuilder allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-0265 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Search function in the web management interface in F5 BIG-IP…
-
Unscored —
The Atom 4.7 before 4.7.x-1.0 and 5.x before 5.x-1.0 module for Drupal does not properly manage permissions for node (1…
-
Unscored —
VFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access mode by using the fla…
-
Unscored —
Interpretation conflict in Drupal 4.7.x before 4.7.11 and 5.x before 5.6, when Internet Explorer 6 is used, allows remo…
-
Unscored —CVE-2008-0258 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PHP Running Management (phpRunMan) before 1.0.3 allows remote …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Drupal 4.7.x and 5.x, when certain .htaccess protections are disabled, allo…
-
Unscored —
Unspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows remote attackers to cause …
-
Unscored —
Unspecified vulnerability in the Meta Tags (aka Nodewords) 5.x-1.6 module for Drupal, when images are permitted in node…