Skip to content
OpenAdvisories

Archive

February 2008

Vulnerabilities first published in this month (UTC), newest first.

250 results · Clear filters · Feed

  • Unscored —
    CVE-2008-0764 Public exploit

    Format string vulnerability in the logging function in Larson Network Print Server (LstNPS) 9.4.2 build 105 and earlier…

  • Unscored —
    CVE-2008-0761 Public exploit

    SQL injection vulnerability in index.php in the Prince Clan Chess Club (com_pcchess) 0.8 and earlier component for Joom…

  • Unscored —
    CVE-2008-0767 Public exploit

    ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a certain "number of URL…

  • Unscored —
    CVE-2008-0760 Public exploit

    Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1…

  • Unscored —
    CVE-2008-0756 Public exploit

    The LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.…

  • Unscored —
    CVE-2008-0748 Public exploit EPSS 16%

    Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyI…

  • Unscored —
    CVE-2008-0747 Public exploit

    Stack-based buffer overflow in COWON America jetAudio 7.0.5 and earlier allows user-assisted remote attackers to execut…

  • Unscored —
    CVE-2008-0749 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Calimero.CMS 3.3 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2008-0753 Public exploit

    SQL injection vulnerability in calendar.php in Virtual War (VWar) 1.5 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-0752 Public exploit

    SQL injection vulnerability in index.php in the Neogallery (com_neogallery) 1.1 component for Joomla! allows remote att…

  • Unscored —
    CVE-2008-0751 Public exploit

    Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Exp…

  • Unscored —
    CVE-2008-0754 Public exploit

    Multiple SQL injection vulnerabilities in index.php in the Rapid Recipe (com_rapidrecipe) 1.6.5 component for Joomla! a…

  • Unscored —
    CVE-2008-0746 Public exploit

    SQL injection vulnerability in index.php in the Gallery (com_gallery) component for Mambo and Joomla! allows remote att…

  • Unscored —
    CVE-2008-0755 Public exploit

    Format string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft Opium OPI Server 4.10.1028…

  • Unscored —
    CVE-2008-0745 Public exploit

    Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbi…

  • Unscored —
    CVE-2008-0743 Public exploit

    PHP remote file inclusion vulnerability in members_help.php in Joovili 2.1 and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2008-0744 Public exploit

    SQL injection vulnerability in user_login.asp in PreProjects.com Pre Hotels & Resorts Management System allows remote a…

  • Unscored —
    CVE-2008-0742 Public exploit

    Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include…

  • Unscored —
    CVE-2003-1540 Public exploit

    WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote …

  • Unscored —
    CVE-2008-0737 Public exploit

    SQL injection vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and other 4.x and 3.x versio…

  • Unscored —
    CVE-2008-0734 Public exploit

    SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attack…

  • Unscored —
    CVE-2008-0733 Public exploit

    SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-0735 Public exploit

    SQL injection vulnerability in mod/gallery/ajax/gallery_data.php in AuraCMS 2.2 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-0738 Public exploit

    Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers …

  • Unscored —
    CVE-2008-0739 Public exploit

    SQL injection vulnerability in admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and earlier 4.x and 3.x version…

  • Unscored —
    CVE-2008-0736 Public exploit

    admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and possibly other 4.x and 3.x versions, allows remote attacke…

  • Unscored —
    CVE-2008-0108 Public exploit EPSS 53%

    Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Wo…

  • Unscored —
    CVE-2008-0105 Public exploit EPSS 44%

    Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote at…

  • Unscored —
    CVE-2007-0216 Public exploit EPSS 38%

    wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows r…

  • Unscored —
    CVE-2008-0729 Public exploit

    Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion a…

  • Unscored —
    CVE-2008-0009 Public exploit

    The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain user…

  • Unscored —
    CVE-2008-0010 Public exploit

    The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certa…

  • Unscored —
    CVE-2008-0600 Public exploit

    The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer bef…

  • Unscored —
    CVE-2008-0636 Public exploit

    Level Platforms, Inc. (LPI) Managed Workplace Service Center 4.x, 5.x and 6.x allows remote attackers to obtain sensiti…

  • High 7.8
    CVE-2007-5659 Exploited Public exploit EPSS 87%

    Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary cod…

    KEV Jun 8, 2022
  • Unscored —
    CVE-2008-0721 Public exploit

    SQL injection vulnerability in index.php in the Sermon (com_sermon) 0.2 component for Mambo allows remote attackers to …

  • Unscored —
    CVE-2008-0722 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Pagetool 1.0.7 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2008-0724 Public exploit

    The Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores passwords in cleartex…

  • Unscored —
    CVE-2008-0719 Public exploit

    SQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce On…

  • Unscored —
    CVE-2008-0714 Public exploit

    SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL comman…