Skip to content
OpenAdvisories

Archive

February 2008

Vulnerabilities first published in this month (UTC), newest first.

533 results · Feed

  • Unscored —

    Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to exe…

  • Unscored —

    Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into…

  • Unscored —

    The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows r…

  • Unscored —
    CVE-2008-0418 Public exploit

    Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before…

  • Unscored —

    Novell Challenge Response Client (LCM) 2.7.5 and earlier, as used with Novell Client for Windows 4.91 SP4, allows users…

  • Unscored —
    CVE-2008-0661 Public exploit

    Buffer overflow in dBpowerAMP Audio Player Release 2 allows remote attackers to execute arbitrary code via a .M3U file …

  • Unscored —

    The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credential…

  • Unscored —

    Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocas…

  • Unscored —

    Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the co…

  • Unscored —
    CVE-2008-0660 Public exploit EPSS 38%

    Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0…

  • Unscored —

    The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attacker…

  • Unscored —
    CVE-2008-0659 Public exploit EPSS 56%

    Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used …

  • Unscored —

    Multiple unspecified vulnerabilities in HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13, and 4.20 allow remote authenti…

  • Unscored —

    Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in netpbm before 10.27 allows remote…

  • Unscored —

    Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range che…

  • Unscored —

    Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms (HPVR) 6 and earlier allows remote attacker…

  • Unscored —
    CVE-2008-0177 Public exploit EPSS 16%

    The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check t…

  • Unscored —

    Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers…

  • Unscored —

    Multiple directory traversal vulnerabilities in Azucar CMS 1.3 allow remote attackers to include and execute arbitrary …

  • Unscored —
    CVE-2008-0649 Public exploit

    SQL injection vulnerability in detail.php in Astanda Directory Project (ADP) 1.2 and 1.3 allows remote attackers to exe…

  • Unscored —
    CVE-2008-0652 Public exploit

    SQL injection vulnerability in index.php in the Downloads (com_downloads) component for Mambo and Joomla! allows remote…

  • Unscored —
    CVE-2008-0650 Public exploit

    SQL injection vulnerability in login.php in Simple OS CMS 0.1c beta allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-0647 Public exploit

    Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18…

  • Unscored —
    CVE-2008-0457 Public exploit EPSS 12%

    Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, …

  • Unscored —
    CVE-2008-0645 Public exploit EPSS 33%

    Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitra…

  • Unscored —

    Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 …

  • Unscored —
    CVE-2008-0648 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in OpenSiteAdmin 0.9.1.1 and earlier allow remote attackers to execu…

  • High 8.8
    CVE-2008-0655 Exploited EPSS 38%

    Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.

    KEV Jun 8, 2022
  • Unscored —
    CVE-2008-0651 Public exploit

    SQL injection vulnerability in login.php in Pedro Santana Codice CMS allows remote attackers to execute arbitrary SQL c…

  • Unscored —

    Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0…

  • Unscored —
    CVE-2008-0653 Public exploit

    SQL injection vulnerability in index.php in the Ynews (com_ynews) 1.0.0 component for Joomla! allows remote attackers t…

  • Unscored —

    The bdecode_recursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as use…

  • Unscored —

    ovtopmd in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to cause a denial of …

  • Unscored —

    The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity refer…

  • Unscored —
    CVE-2008-0634 Public exploit

    Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Nam…

  • Unscored —
    CVE-2008-0625 Public exploit

    Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56 allows remote attacke…

  • Unscored —
    CVE-2008-0631 Public exploit

    Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to (1) overwrite arbitrary files…

  • Unscored —
    CVE-2008-0632 Public exploit

    Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-0633 Public exploit

    Buffer overflow in Anon Proxy Server 0.102 and earlier, when user authentication is enabled, allows remote attackers to…

  • Unscored —
    CVE-2008-0635 EPSS 12%

    Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbi…