Skip to content
OpenAdvisories

Archive

February 2008

Vulnerabilities first published in this month (UTC), newest first.

← January 2008 2008 / February March 2008 →
  1. 119
  2. 2 
  3. 3 
  4. 415
  5. 533
  6. 634
  7. 717
  8. 820
  9. 92
  10. 10 
  11. 114
  12. 1291
  13. 1356
  14. 1410
  15. 1525
  16. 16 
  17. 17 
  18. 187
  19. 1925
  20. 2016
  21. 2140
  22. 2229
  23. 23 
  24. 24 
  25. 2525
  26. 266
  27. 2719
  28. 2823
  29. 2917
All Critical High Medium Low Exploited only Public exploit

533 results · Feed

  • Unscored —
    CVE-2008-0699

    Unspecified vulnerability in the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C) in IBM DB2 UDB before 8.2 Fixpak 16, 9.1 bef…

  • Unscored —
    CVE-2008-0683 Public exploit

    SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress a…

    Web / CMS
  • Unscored —
    CVE-2008-0697

    Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via u…

  • Unscored —
    CVE-2008-0676 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2008-0669

    Cross-site scripting (XSS) vulnerability in search.cgi in Sift Unity allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2008-0680 Public exploit

    SNMPd in MikroTik RouterOS 3.2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a cr…

  • Unscored —
    CVE-2008-0698

    Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors, and an impact probabl…

  • Unscored —
    CVE-2008-0671 Public exploit EPSS 16%

    Stack-based buffer overflow in the add_line_buffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attack…

    tintin++ Debian
  • Unscored —
    CVE-2008-0702 Public exploit Scanner template

    Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of…

  • Unscored —
    CVE-2008-0693

    Stack-based buffer overflow in PQCore.exe in Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 allow…

  • Unscored —
    CVE-2008-0701

    ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote at…

  • Unscored —
    CVE-2008-0677 Public exploit

    SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the i…

  • Unscored —
    CVE-2008-0687

    Cross-site scripting (XSS) vulnerability in siteadmin/editor_files/includes/load_message.php in the Youtube Clone Scrip…

  • Unscored —
    CVE-2008-0670 Public exploit

    SQL injection vulnerability in index.php in the Noticias (com_noticias) 1.0 component for Joomla! allows remote attacke…

  • Unscored —
    CVE-2008-0694

    Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to …

  • Unscored —
    CVE-2008-0682 Public exploit

    SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attacker…

  • Unscored —
    CVE-2008-0689 Public exploit

    SQL injection vulnerability in index.php in the Marketplace (com_marketplace) 1.1.1 and 1.1.1-pl1 component for Joomla!…

  • Unscored —
    CVE-2008-0695 Public exploit

    SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-0684 Public exploit

    Cross-site scripting (XSS) vulnerability in ViewCat.php in iTechClassifieds 3.0 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2008-0691 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in admin_panel.php in the Simon Elvery WP-Footnotes 2.2 plugin for …

    Web / CMS
  • Unscored —
    CVE-2008-0692 Public exploit

    SQL injection vulnerability in bidhistory.php in iTechBids 3 Gold and 5.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-0686 Public exploit

    SQL injection vulnerability in index.php in the NeoReferences (com_neoreferences) 1.3.1 and 1.3.3 component for Joomla!…

  • Unscored —
    CVE-2008-0679 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2008-0681 Public exploit

    SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-0703 Public exploit

    Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. (do…

  • Unscored —
    CVE-2008-0696

    IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown…

  • Unscored —
    CVE-2008-0690 Public exploit

    SQL injection vulnerability in index.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote …

  • Medium —
    CVE-2007-6286

    Apache Tomcat Does Not Properly Handle Empty Requests

    Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent request…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2007-5333 Public exploit EPSS 63%

    Exposure of Sensitive Information in Apache Tomcat

    Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2008-0668

    The excel_read_HLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assist…

    gnumeric Debian
  • Unscored —
    CVE-2008-0665

    wml_backend/p1_ipp/ipp.src in Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a …

    wml Debian
  • Unscored —
    CVE-2008-0666

    Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on (1) the /tmp…

    wml Debian
  • Unscored —
    CVE-2008-0667

    The DOC.print function in the Adobe JavaScript API, as used by Adobe Acrobat and Reader before 8.1.2, allows remote att…

  • Unscored —
    CVE-2008-0593

    Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property o…

  • Unscored —
    CVE-2008-0594

    Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web pa…

  • Unscored —
    CVE-2008-0591

    Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirma…

  • Unscored —
    CVE-2008-0592

    Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of s…

  • Unscored —
    CVE-2008-0419

    Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and caus…

  • Unscored —
    CVE-2008-0413

    The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow…

  • Unscored —
    CVE-2008-0417

    CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the us…