Skip to content
OpenAdvisories

Archive

28 February 2008

Vulnerabilities first published on this day (UTC), newest first.

23 results · Feed

  • Unscored —

    The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of …

  • Unscored —

    The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote at…

  • Unscored —

    The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2008-0411 Public exploit EPSS 15%

    Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attack…

  • Unscored —
    CVE-2008-1069 Public exploit EPSS 29%

    Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arb…

  • Unscored —
    CVE-2008-1068 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow remote attackers to exe…

  • Unscored —
    CVE-2008-1067 Public exploit EPSS 22%

    Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP …

  • Unscored —

    Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other vers…

  • Unscored —

    Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec S…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3-beta1 allows remote authenticated users to inj…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in images.php in the Red Mexico RMSOFT Gallery System (GS) 2.0 module (aka rmg…

  • Unscored —

    Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats (xmmemberstats) 2.0e module for XOOPS allow r…

  • Unscored —

    The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and other products, allows …

  • Unscored —

    Cross-site scripting (XSS) vulnerability index.php in the XM-Memberstats (xmmemberstats) module for XOOPS allows remote…

  • Unscored —
    CVE-2003-1545 Public exploit

    Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read…

  • Unscored —

    Heap-based buffer overflow in the activePDF Server service (aka APServer.exe) in activePDF Server 3.8.4 and 3.8.5.14, a…

  • Unscored —

    InterVideo IMC Server (aka IMCSvr.exe) and InterVideo Home Theater (aka IHT.exe) in InterVideo WinDVD Media Center 2.11…

  • Unscored —

    The tcp_respond function in netinet/tcp_subr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service (pa…

  • Unscored —
    CVE-2008-1059 Public exploit Scanner template EPSS 48%

    PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for Word…

  • Unscored —
    CVE-2008-1061 Public exploit Scanner template

    Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote a…

  • Unscored —
    CVE-2008-1060 Public exploit EPSS 44%

    Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote …

  • Unscored —

    Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via …

  • Unscored —

    The ip6_check_rh0hdr function in netinet6/ip6_input.c in OpenBSD 4.2 allows attackers to cause a denial of service (pan…