Archive
12 February 2008
Vulnerabilities first published on this day (UTC), newest first.
39 results · Clear filters · Feed
-
Unscored —
Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Wo…
-
Unscored —
Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote at…
-
Unscored —
wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows r…
-
Unscored —CVE-2008-0729 Public exploit
Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion a…
-
Unscored —CVE-2008-0009 Public exploit
The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain user…
-
Unscored —CVE-2008-0010 Public exploit
The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certa…
-
Unscored —CVE-2008-0600 Public exploit
The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer bef…
-
Unscored —CVE-2008-0636 Public exploit
Level Platforms, Inc. (LPI) Managed Workplace Service Center 4.x, 5.x and 6.x allows remote attackers to obtain sensiti…
-
High 7.8
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary cod…
KEV Jun 8, 2022 -
Unscored —CVE-2008-0721 Public exploit
SQL injection vulnerability in index.php in the Sermon (com_sermon) 0.2 component for Mambo allows remote attackers to …
-
Unscored —CVE-2008-0722 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Pagetool 1.0.7 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2008-0724 Public exploit
The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartex…
-
Unscored —CVE-2008-0719 Public exploit
SQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce On…
-
Unscored —CVE-2008-0714 Public exploit
SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-0723 Public exploit
Cross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other earlier 1.6.x versions, allows re…
-
Unscored —CVE-2008-0688 Public exploit
Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inj…
-
Unscored —CVE-2008-0678 Public exploit
SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-0685 Public exploit
SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-0700 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Crux Software CruxCMS 3.0 allows remote attackers to inject a…
-
Unscored —CVE-2008-0675 Public exploit
SQL injection vulnerability in cms/index.pl in The Everything Development Engine in The Everything Development System P…
-
Unscored —CVE-2008-0683 Public exploit
SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress a…
-
Unscored —CVE-2008-0676 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2008-0680 Public exploit
SNMPd in MikroTik RouterOS 3.2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a cr…
-
Unscored —
Stack-based buffer overflow in the add_line_buffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attack…
-
Unscored —
Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of…
-
Unscored —CVE-2008-0677 Public exploit
SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the i…
-
Unscored —CVE-2008-0670 Public exploit
SQL injection vulnerability in index.php in the Noticias (com_noticias) 1.0 component for Joomla! allows remote attacke…
-
Unscored —CVE-2008-0682 Public exploit
SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attacker…
-
Unscored —CVE-2008-0689 Public exploit
SQL injection vulnerability in index.php in the Marketplace (com_marketplace) 1.1.1 and 1.1.1-pl1 component for Joomla!…
-
Unscored —CVE-2008-0695 Public exploit
SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-0684 Public exploit
Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbit…
-
Unscored —CVE-2008-0691 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP-Footnotes 2.2 plugin for …
-
Unscored —CVE-2008-0692 Public exploit
SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-0686 Public exploit
SQL injection vulnerability in index.php in the NeoReferences (com_neoreferences) 1.3.1 and 1.3.3 component for Joomla!…
-
Unscored —CVE-2008-0679 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2008-0681 Public exploit
SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-0703 Public exploit
Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. (do…
-
Unscored —CVE-2008-0690 Public exploit
SQL injection vulnerability in index.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote …
-
Medium —
Exposure of Sensitive Information in Apache Tomcat
Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs…