Skip to content
OpenAdvisories

Archive

1 February 2008

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —

    The BDB backend for slapd in OpenLDAP before 2.3.36 allows remote authenticated users to cause a denial of service (cra…

  • Unscored —
    CVE-2008-0550 Public exploit EPSS 54%

    Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or…

  • Unscored —

    Integer overflow in the OggHeaderParse function in Steamcast 0.9.75 and earlier allows remote authenticated users to ca…

  • Unscored —
    CVE-2008-0551 Public exploit EPSS 30%

    The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong …

  • Unscored —

    Heap-based buffer overflow in the IMG_LoadLBM_RW function in IMG_lbm.c in SDL_image before 1.2.7 allows remote attacker…

  • Unscored —
    CVE-2008-0552 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in eTicket 1.5.6-RC4 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-0547 Public exploit

    Cross-site scripting (XSS) vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and probably ea…

  • Unscored —
    CVE-2008-0540 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in trixbox 2.4.2.0 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2008-0541 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in forum.php in Gerd Tentler Simple Forum 3.2 allow remote attacker…

  • Unscored —

    Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large integer in…

  • Unscored —
    CVE-2008-0546 Public exploit

    Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers …

  • Unscored —
    CVE-2008-0545 Public exploit

    Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to include and execute arb…

  • Unscored —
    CVE-2008-0538 Public exploit

    Multiple SQL injection vulnerabilities in phpIP Management 4.3.2 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-0542 Public exploit

    Directory traversal vulnerability in thumbnail.php in Gerd Tentler Simple Forum 3.2 allows remote attackers to read arb…

  • Unscored —
    CVE-2008-0539 Public exploit

    Cross-site scripting (XSS) vulnerability in dms/policy/rep_request.php in F5 BIG-IP Application Security Manager (ASM) …

  • Unscored —

    Multiple SQL injection vulnerabilities in Pre Dynamic Institution allow remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2007-6697 Public exploit EPSS 11%

    Buffer overflow in the LWZReadByte function in IMG_gif.c in SDL_image before 1.2.7 allows remote attackers to cause a d…

  • Unscored —
    CVE-2007-6696 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar 1.1.6 allow remote attackers to inject arbitrary web…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in Drake CMS 0.4.9 allows remote attackers to inject arbitrary we…