Skip to content
OpenAdvisories

Archive

15 February 2008

Vulnerabilities first published on this day (UTC), newest first.

25 results · Feed

  • Unscored —
    CVE-2008-0800 Public exploit

    SQL injection vulnerability in index.php in the McQuiz (com_mcquiz) 0.9 Final component for Joomla! allows remote attac…

  • Unscored —
    CVE-2008-0803 Public exploit EPSS 33%

    Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbi…

  • Unscored —
    CVE-2008-0802 Public exploit

    SQL injection vulnerability in index.php in the MediaSlide (com_mediaslide) 0.5 component for Joomla! allows remote att…

  • Unscored —
    CVE-2008-0798 Public exploit

    Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magic_quotes_gpc is disabled, allow…

  • Unscored —

    Directory traversal vulnerability in lib/download.php in iTheora 1.0 rc1 allows remote attackers to read arbitrary file…

  • Unscored —
    CVE-2008-0796 Public exploit

    SQL injection vulnerability in threads.php in Nuboard 0.5 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-0795 Public exploit

    SQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and Joomla! allows remote …

  • Unscored —
    CVE-2008-0799 Public exploit

    SQL injection vulnerability in index.php in the Quiz (com_quiz) 0.81 and earlier component for Mambo and Joomla! allows…

  • Unscored —
    CVE-2008-0801 Public exploit

    SQL injection vulnerability in index.php in the PAXXGallery (com_paxxgallery) 0.2 component for Mambo and Joomla! allow…

  • Unscored —

    Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCC…

  • Unscored —

    Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-S…

  • Unscored —

    SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQ…

  • Unscored —

    The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial…

  • Unscored —

    The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sen…

  • Unscored —
    CVE-2008-0794 Public exploit

    Directory traversal vulnerability in user/header.php in Affiliate Market 0.1 BETA allows remote attackers to include an…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in search.asp in Tendenci CMS allow remote attackers to inject arbi…

  • Unscored —

    Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attacker…

  • Unscored —

    Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote…

  • Unscored —

    ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to cause a denial of service (CPU consumptio…

  • Unscored —

    Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remo…

  • Unscored —

    Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2008-0790 Public exploit

    Directory traversal vulnerability in ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to read…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to (1) hij…

  • Medium 6.1

    Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) We…

  • Unscored —
    CVE-2008-0787 Public exploit

    SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execu…