Skip to content
OpenAdvisories

Archive

February 2008

Vulnerabilities first published in this month (UTC), newest first.

533 results · Feed

  • Unscored —
    CVE-2008-0624 Public exploit

    Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers t…

  • Unscored —

    Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via …

  • Unscored —

    Buffer overflow in stream_cddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execu…

  • Unscored —
    CVE-2008-0623 Public exploit

    Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows…

  • Unscored —
    CVE-2008-0601 Public exploit

    SQL injection vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to execute …

  • Unscored —
    CVE-2008-0616 Public exploit

    SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote au…

  • Unscored —

    SQL injection vulnerability in index.php in the Sigsiu Online Business Index 2 (SOBI2, com_sobi2) 2.5.3 component for J…

  • Unscored —

    The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does no…

  • Unscored —
    CVE-2008-0614 Public exploit

    SQL injection vulnerability in index.php in Photokorn Gallery 1.543 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-0621 Public exploit EPSS 73%

    Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers t…

  • Unscored —
    CVE-2008-0602 Public exploit

    Directory traversal vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to in…

  • Unscored —
    CVE-2008-0612 Public exploit

    Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and ex…

  • Unscored —

    The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS_FTP 6.1 allows remote attackers to cause a denia…

  • Unscored —
    CVE-2008-0611 Public exploit

    SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attacker…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allow remo…

  • Unscored —
    CVE-2008-0606 Public exploit

    SQL injection vulnerability in index.php in the Shambo2 (com_shambo2) component for Mambo and Joomla! allows remote att…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.7.0 plugin for WordPress allow remote attacke…

  • Unscored —
    CVE-2008-0603 Public exploit

    SQL injection vulnerability in index.php in the amazOOP Awesom! (com_awesom) 0.3.2component for Mambo and Joomla! allow…

  • Unscored —
    CVE-2008-0613 Public exploit

    Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to redirect users to arbitrary w…

  • Unscored —

    Directory traversal vulnerability in wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allows…

  • Unscored —
    CVE-2008-0619 Public exploit EPSS 11%

    Buffer overflow in NeroMediaPlayer.exe in Nero Media Player 1.4.0.35 and earlier allows remote attackers to execute arb…

  • Unscored —
    CVE-2008-0609 Public exploit

    Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in RaidenHTTPD 2.0.19 and earlier allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-0610 Public exploit EPSS 39%

    Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cp…

  • Unscored —

    SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2008-0605 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in AstroSoft HelpDesk before 1.95.228 allow remote attackers to inj…

  • Unscored —
    CVE-2008-0590 Public exploit EPSS 22%

    Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of servi…

  • Unscored —

    Array index vulnerability in libmpdemux/demux_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier ver…

  • Unscored —
    CVE-2008-0485 Public exploit

    Array index error in libmpdemux/demux_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbi…

  • Unscored —
    CVE-2006-4220 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess before 7 Support Pack 3 Pub…

  • Unscored —

    The ps program in bos.rte.control in IBM AIX 5.2, 5.3, and 6.1 allows local users to obtain sensitive information via u…

  • Unscored —

    Geert Moernaut LSrunasE and Supercrypt use an encryption key composed of an SHA1 hash of a fixed string embedded in the…

  • Unscored —

    Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x…

  • Unscored —

    Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related t…

  • Unscored —

    Buffer overflow in the utape program in devices.scsi.tape.diag in IBM AIX 5.2 and 5.3 allows local users to gain privil…

  • Unscored —

    Multiple buffer overflows in bos.rte.control in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecifie…

  • Unscored —
    CVE-2008-0579 Public exploit

    SQL injection vulnerability in index.php in the buslicense (com_buslicense) component for Joomla! allows remote attacke…

  • Unscored —

    Geert Moernaut LSrunasE allows local users to gain privileges by obtaining the encrypted password from a batch file, an…

  • Unscored —

    sysmgt.websm.webaccess in IBM AIX 5.2 and 5.3 has world writable permissions for unspecified WebSM Remote Client files,…

  • Unscored —

    Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.1 through 3.6.0.244 on Windows allow…