Skip to content
OpenAdvisories

Archive

12 February 2008

Vulnerabilities first published on this day (UTC), newest first.

← January 2008 2008 / February /12 March 2008 →
  1. 119
  2. 2 
  3. 3 
  4. 415
  5. 533
  6. 634
  7. 717
  8. 820
  9. 92
  10. 10 
  11. 114
  12. 1291
  13. 1356
  14. 1410
  15. 1525
  16. 16 
  17. 17 
  18. 187
  19. 1925
  20. 2016
  21. 2140
  22. 2229
  23. 23 
  24. 24 
  25. 2525
  26. 266
  27. 2719
  28. 2823
  29. 2917
All Critical High Medium Low Exploited only Public exploit

91 results · Feed

  • Unscored —
    CVE-2008-0416

    Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, an…

  • Unscored —
    CVE-2008-0717

    Cross-site scripting (XSS) vulnerability in Caching Proxy (CP) 5.1 through 6.1 in IBM WebSphere Edge Server, when CGI m…

  • Unscored —
    CVE-2008-0715

    Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2008-0721 Public exploit

    SQL injection vulnerability in index.php in the Sermon (com_sermon) 0.2 component for Mambo allows remote attackers to …

  • Unscored —
    CVE-2008-0722 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Pagetool 1.0.7 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2008-0720

    Cross-site scripting (XSS) vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320 allows remote attackers …

  • Unscored —
    CVE-2008-0716

    The agent in Symantec Altiris Notification Server before 6.0 SP3 R7 allows local users to gain privileges via a "Shatte…

  • Unscored —
    CVE-2008-0724 Public exploit

    The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartex…

  • Unscored —
    CVE-2008-0719 Public exploit

    SQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce On…

  • Unscored —
    CVE-2008-0718

    Unspecified vulnerability in the USB Mouse STREAMS module (usbms) in Sun Solaris 9 and 10, when 64-bit mode is enabled,…

  • Unscored —
    CVE-2008-0714 Public exploit

    SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-0725

    Multiple heap-based buffer overflows in the (1) FTP service and (2) administration service in Titan FTP Server 6.0.5.54…

  • Unscored —
    CVE-2008-0723 Public exploit

    Cross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other earlier 1.6.x versions, allows re…

  • Unscored —
    CVE-2008-0215

    Multiple unspecified vulnerabilities in HP Storage Essentials Storage Resource Management (SRM) before 6.0.0 allow remo…

  • Unscored —
    CVE-2008-0672

    The process_chat_input function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of ser…

    tintin++ Debian
  • Unscored —
    CVE-2008-0673

    TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an…

    tintin++ Debian
  • Medium —
    CVE-2008-0002

    Apache Tomcat Sensitive Information Disclosure

    Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this …

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2008-0688 Public exploit

    Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inj…

  • Unscored —
    CVE-2008-0678 Public exploit

    SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-0685 Public exploit

    SQL injection vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-0700 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in Crux Software CruxCMS 3.0 allows remote attackers to inject a…

  • Unscored —
    CVE-2008-0675 Public exploit

    SQL injection vulnerability in cms/index.pl in The Everything Development Engine in The Everything Development System P…

  • Unscored —
    CVE-2008-0699

    Unspecified vulnerability in the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C) in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 bef…

  • Unscored —
    CVE-2008-0683 Public exploit

    SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress a…

    Web / CMS
  • Unscored —
    CVE-2008-0697

    Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via u…

  • Unscored —
    CVE-2008-0676 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2008-0669

    Cross-site scripting (XSS) vulnerability in search.cgi in Sift Unity allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2008-0680 Public exploit

    SNMPd in MikroTik RouterOS 3.2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a cr…

  • Unscored —
    CVE-2008-0698

    Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors, and an impact probabl…

  • Unscored —
    CVE-2008-0671 Public exploit EPSS 16%

    Stack-based buffer overflow in the add_line_buffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attack…

    tintin++ Debian
  • Unscored —
    CVE-2008-0702 Public exploit Scanner template

    Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of…

  • Unscored —
    CVE-2008-0693

    Stack-based buffer overflow in PQCore.exe in Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 allow…

  • Unscored —
    CVE-2008-0701

    ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote at…

  • Unscored —
    CVE-2008-0677 Public exploit

    SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the i…

  • Unscored —
    CVE-2008-0687

    Cross-site scripting (XSS) vulnerability in siteadmin/editor_files/includes/load_message.php in the Youtube Clone Scrip…

  • Unscored —
    CVE-2008-0670 Public exploit

    SQL injection vulnerability in index.php in the Noticias (com_noticias) 1.0 component for Joomla! allows remote attacke…

  • Unscored —
    CVE-2008-0694

    Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to …

  • Unscored —
    CVE-2008-0682 Public exploit

    SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attacker…

  • Unscored —
    CVE-2008-0689 Public exploit

    SQL injection vulnerability in index.php in the Marketplace (com_marketplace) 1.1.1 and 1.1.1-pl1 component for Joomla!…

  • Unscored —
    CVE-2008-0695 Public exploit

    SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL comm…