Archive
January 2008
Vulnerabilities first published in this month (UTC), newest first.
498 results · Feed
-
Unscored —
Buffer overflow in JustSystems JSFC.DLL, as used in multiple JustSystems products such as Ichitaro, allows remote attac…
-
Unscored —CVE-2008-0224 Public exploit
SQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attack…
-
Unscored —
The telnet service in LevelOne WBR-3460 4-Port ADSL 2/2+ Wireless Modem Router with firmware 1.00.11 and 1.00.12 does n…
-
Unscored —
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attack…
-
Unscored —CVE-2008-0219 Public exploit
SQL injection vulnerability in soporte_horizontal_w.php in PHP Webquest 2.6 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-0221 Public exploit
Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx …
-
Unscored —CVE-2008-0218 Public exploit
Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to in…
-
Unscored —
Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.…
-
Unscored —
Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block_write function, wh…
-
Unscored —
Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has …
-
Unscored —
Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before 0.21 allows remote attackers to i…
-
Unscored —
WordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty value of the page par…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in wp-contact-form/options-contactform.php in the WP-Contact…
-
Unscored —CVE-2008-0193 Public exploit
Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x throug…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in cryptographp/admin.php in the Cryptographp 1.2 and earlier plugi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for …
-
Unscored —
Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redi…
-
Unscored —CVE-2008-0192 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2008-0207 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arb…
-
Unscored —
CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbit…
-
Unscored —
Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read ar…
-
Unscored —
Multiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote attackers to read arbitrary f…
-
Unscored —CVE-2008-0127 Public exploit
The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protec…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remot…
-
Unscored —
Cross-site scripting (XSS) vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers t…
-
Unscored —CVE-2008-0210 Public exploit
Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests,…
-
Unscored —CVE-2008-0190 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in templates/example_template.php in AwesomeTemplateEngine allow re…
-
Unscored —
PRO-Search 0.17 and earlier allows remote attackers to cause a denial of service via certain values of the show_page an…
-
Unscored —
WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Peter's Random Anti-Spam Image 0.2.4 and earlier plugin for WordPress allow…
-
Unscored —
Sun JRE 5.0 before update 14 allows remote attackers to cause a denial of service (Internet Explorer crash) via an obje…
-
Unscored —
Stack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow remote attackers to e…
-
Unscored —CVE-2007-6250 EPSS 26%
Stack-based buffer overflow in AOL AOLMediaPlaybackControl (AOLMediaPlaybackControl.exe), as used by AmpX ActiveX contr…
-
Unscored —
Double free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow remote attackers to exec…
-
Unscored —CVE-2008-0184 Public exploit
Absolute path traversal vulnerability in index.php in Sys-Hotel on Line System allows remote attackers to read arbitrar…
-
Unscored —CVE-2008-0186 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to …