Skip to content
OpenAdvisories

Archive

6 February 2008

Vulnerabilities first published on this day (UTC), newest first.

34 results · Feed

  • Unscored —

    ovtopmd in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to cause a denial of …

  • Unscored —

    The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity refer…

  • Unscored —
    CVE-2008-0634 Public exploit

    Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Nam…

  • Unscored —
    CVE-2008-0625 Public exploit

    Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56 allows remote attacke…

  • Unscored —
    CVE-2008-0631 Public exploit

    Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to (1) overwrite arbitrary files…

  • Unscored —
    CVE-2008-0632 Public exploit

    Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-0633 Public exploit

    Buffer overflow in Anon Proxy Server 0.102 and earlier, when user authentication is enabled, allows remote attackers to…

  • Unscored —
    CVE-2008-0635 EPSS 12%

    Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-0624 Public exploit

    Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers t…

  • Unscored —

    Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via …

  • Unscored —

    Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execu…

  • Unscored —
    CVE-2008-0623 Public exploit

    Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows…

  • Unscored —
    CVE-2008-0601 Public exploit

    SQL injection vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to execute …

  • Unscored —
    CVE-2008-0616 Public exploit

    SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote au…

  • Unscored —

    SQL injection vulnerability in index.php in the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) 2.5.3 component for J…

  • Unscored —

    The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does no…

  • Unscored —
    CVE-2008-0614 Public exploit

    SQL injection vulnerability in index.php in Photokorn Gallery 1.543 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-0621 Public exploit EPSS 73%

    Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers t…

  • Unscored —
    CVE-2008-0602 Public exploit

    Directory traversal vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to in…

  • Unscored —
    CVE-2008-0612 Public exploit

    Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and ex…

  • Unscored —

    The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS_FTP 6.1 allows remote attackers to cause a denia…

  • Unscored —
    CVE-2008-0611 Public exploit

    SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attacker…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allow remo…

  • Unscored —
    CVE-2008-0606 Public exploit

    SQL injection vulnerability in index.php in the Shambo2 (com_shambo2) component for Mambo and Joomla! allows remote att…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.7.0 plugin for WordPress allow remote attacke…

  • Unscored —
    CVE-2008-0603 Public exploit

    SQL injection vulnerability in index.php in the amazOOP Awesom! (com_awesom) 0.3.2component for Mambo and Joomla! allow…

  • Unscored —
    CVE-2008-0613 Public exploit

    Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to redirect users to arbitrary w…

  • Unscored —

    Directory traversal vulnerability in wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allows…

  • Unscored —
    CVE-2008-0619 Public exploit EPSS 11%

    Buffer overflow in NeroMediaPlayer.exe in Nero Media Player 1.4.0.35 and earlier allows remote attackers to execute arb…

  • Unscored —
    CVE-2008-0609 Public exploit

    Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in RaidenHTTPD 2.0.19 and earlier allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-0610 Public exploit EPSS 39%

    Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cp…

  • Unscored —

    SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2008-0605 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in AstroSoft HelpDesk before 1.95.228 allow remote attackers to inj…