Skip to content
OpenAdvisories

Archive

21 February 2008

Vulnerabilities first published on this day (UTC), newest first.

40 results · Feed

  • Unscored —

    Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service …

  • Unscored —

    Heap-based buffer overflow in the Veritas Enterprise Administrator (VEA) service (aka vxsvc.exe) in Symantec Veritas St…

  • Unscored —

    The Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation 5.0 for Windows al…

  • Unscored —
    CVE-2008-0879 Public exploit

    SQL injection vulnerability in modules.php in the Web_Links module for PHP-Nuke allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-0873 Public exploit

    SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute…

  • Unscored —
    CVE-2008-0872 Public exploit

    Cross-site scripting (XSS) vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject a…

  • Unscored —

    Unspecified vulnerability in Hitachi EUR Print Manager, and related Client and Local Server products, 05-06 through 05-…

  • Unscored —
    CVE-2008-0871 Public exploit EPSS 33%

    Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2008-0878 Public exploit

    SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to…

  • Unscored —
    CVE-2008-0881 Public exploit

    SQL injection vulnerability in modules.php in the Okul 1.0 module for PHP-Nuke allows remote attackers to execute arbit…

  • Unscored —

    Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2008-0874 Public exploit

    SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary…

  • Unscored —

    Unspecified vulnerability in the SEWB3 messaging service in Hitachi SEWB3/PLATFORM and SEWB3/MI-PLATFORM 01-00 through …

  • Unscored —
    CVE-2008-0880 Public exploit

    SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-0877 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arb…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote attackers to inject arbitrary…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 a…

  • Unscored —

    BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the …

  • Unscored —

    Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for ins…

  • Unscored —

    IBM Lotus Notes 6.0, 6.5, 7.0, and 8.0 signs an unsigned applet when a user forwards an email message to another user, …

  • Unscored —

    BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in leg/Main.nsf in IBM Lotus Quickplace 7.0 allows remote attackers to inject …

  • Unscored —

    Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administ…

  • Unscored —
    CVE-2008-0857 Public exploit

    SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-0852 Public exploit

    freeSSHd 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a SSH2_MSG_NEWKEYS packet to …

  • Unscored —
    CVE-2008-0855 Public exploit

    SQL injection vulnerability in the Facile Forms (com_facileforms) component for Joomla! and Mambo allows remote attacke…

  • Unscored —
    CVE-2008-0854 Public exploit

    SQL injection vulnerability in the com_salesrep component for Joomla! and Mambo allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-0851 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 allow remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2008-0853 Public exploit

    SQL injection vulnerability in the com_detail component for Joomla! and Mambo allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-0847 Public exploit

    SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary …

  • Unscored —

    Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote …

  • Unscored —
    CVE-2008-0850 Public exploit

    Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2008-0856 Public exploit

    Multiple SQL injection vulnerabilities in e-Vision CMS 2.02 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —

    Buffer overflow in the Visnetic anti-virus plugin in Kerio MailServer before 6.5.0 might allow remote attackers to exec…

  • Unscored —

    SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote…

  • Unscored —

    Unspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a denial of service (crash)…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in lostsheep.php in Crafty Syntax Live Help (CSLH) before 2.14.16, allows remo…

  • Unscored —

    Multiple heap-based buffer overflows in EMC RepliStor 6.2 SP2, and possibly earlier versions, allow remote attackers to…