Skip to content
OpenAdvisories

Archive

29 February 2008

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —

    dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in…

  • Unscored —

    SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to execute arbitrary SQL…

  • Unscored —

    Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attacke…

  • Unscored —
    CVE-2008-1110 Public exploit EPSS 10%

    Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin in xine-lib before 1.1.…

  • Unscored —
    CVE-2007-6016 Public exploit EPSS 50%

    Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the schedu…

  • Unscored —

    The PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Syma…

  • Unscored —

    Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10 allows remote attack…

  • Unscored —

    The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use t…

  • Unscored —

    Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site scripting (XSS) attac…

  • Unscored —

    expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwr…

  • Unscored —

    Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comm…

  • Unscored —

    Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the char…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search.php in Interspire Shopping Cart 1.x allows remote attackers to injec…

  • Unscored —
    CVE-2008-1077 Public exploit

    SQL injection vulnerability in index.php in the Simpleboard (com_simpleboard) 1.0.3 Stable component for Mambo and Joom…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in Maian Cart 1.1 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2008-1074 Public exploit EPSS 37%

    PHP remote file inclusion vulnerability in lib/head_auth.php in GROUP-E 1.6.41 allows remote attackers to execute arbit…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the report interface in Internet Security Systems (ISS) Internet Scanner 7.…