Skip to content
OpenAdvisories

Archive

12 February 2008

Vulnerabilities first published on this day (UTC), newest first.

← January 2008 2008 / February /12 March 2008 →
  1. 119
  2. 2 
  3. 3 
  4. 415
  5. 533
  6. 634
  7. 717
  8. 820
  9. 92
  10. 10 
  11. 114
  12. 1291
  13. 1356
  14. 1410
  15. 1525
  16. 16 
  17. 17 
  18. 187
  19. 1925
  20. 2016
  21. 2140
  22. 2229
  23. 23 
  24. 24 
  25. 2525
  26. 266
  27. 2719
  28. 2823
  29. 2917
All Critical High Medium Low Exploited only Public exploit

91 results · Feed

  • Unscored —
    CVE-2008-0684 Public exploit

    Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2008-0691 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP-Footnotes 2.2 plugin for …

    Web / CMS
  • Unscored —
    CVE-2008-0692 Public exploit

    SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-0686 Public exploit

    SQL injection vulnerability in index.php in the NeoReferences (com_neoreferences) 1.3.1 and 1.3.3 component for Joomla!…

  • Unscored —
    CVE-2008-0679 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2008-0681 Public exploit

    SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-0703 Public exploit

    Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. (do…

  • Unscored —
    CVE-2008-0696

    IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown…

  • Unscored —
    CVE-2008-0690 Public exploit

    SQL injection vulnerability in index.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote …

  • Medium —
    CVE-2007-6286

    Apache Tomcat Does Not Properly Handle Empty Requests

    Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent request…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2007-5333 Public exploit EPSS 63%

    Exposure of Sensitive Information in Apache Tomcat

    Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs…

    org.apache.tomcat:tomcat Maven