Archive
February 2008
Vulnerabilities first published in this month (UTC), newest first.
533 results · Feed
-
Unscored —
Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.…
-
Unscored —CVE-2008-1042 Public exploit
Directory traversal vulnerability in include/body.inc.php in Linux Web Shop (LWS) php Download Manager 1.0 and 1.1 allo…
-
Unscored —CVE-2008-1044 Public exploit
Stack-based buffer overflow in the Quantum Streaming Player (Quantum Streaming IE Player) ActiveX control (aka QSP2IE.Q…
-
Unscored —CVE-2008-1053 Public exploit
Multiple SQL injection vulnerabilities in the Kose_Yazilari module for PHP-Nuke allow remote attackers to execute arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in manager/xmedia.php in Plume CMS 1.2.2 allows remote attackers to inject arb…
-
Unscored —CVE-2008-1038 Public exploit
PHP remote file inclusion vulnerability in mod/mod.extmanager.php in DBHcms 1.1.4 and earlier allows remote attackers t…
-
Unscored —CVE-2008-1037 Public exploit
Cross-site scripting (XSS) vulnerability in the file listing function in the web management interface in Packeteer Pack…
-
Unscored —CVE-2008-1054 Public exploit
Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin Su…
-
Unscored —
Cross-site scripting (XSS) vulnerability in mwhois.php in Matt Wilson Matt's Whois (MWhois) allows remote attackers to …
-
Unscored —
Cross-site scripting (XSS) vulnerability in tiki-edit_article.php in TikiWiki before 1.9.10.1 allows remote attackers t…
-
Unscored —CVE-2008-1052 Public exploit
The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of serv…
-
Unscored —
PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 B…
-
Low —CVE-2008-1045 Public exploit
Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp
Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_files.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the resource parameter.
-
Unscored —
Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, …
-
Unscored —
PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execut…
-
Unscored —
PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers …
-
Unscored —CVE-2008-1055 Public exploit
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earl…
-
Unscored —CVE-2008-1050 Public exploit
SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-1039 Public exploit
SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
The MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and earlier, allows remote …
-
Unscored —
lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size of a file descriptor ar…
-
Unscored —
sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial …
-
Unscored —
Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2,…
-
Unscored —
Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (m…
-
Unscored —
Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a den…
-
Unscored —
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allow…
-
Unscored —
Open redirect vulnerability in spyce/examples/redirect.spy in Spyce - Python Server Pages (PSP) 2.1.3 allows remote att…
-
Unscored —
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allow…
-
Unscored —CVE-2008-0980 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers t…
-
Unscored —
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allow…
-
Unscored —
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allow…
-
Unscored —
Stack consumption vulnerability in Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mi…
-
Unscored —CVE-2008-0982 Public exploit
Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to obtain sensitive information via a direct request fo…
-
Unscored —
Buffer overflow in Double-Take (aka HP StorageWorks Storage Mirroring) 4.5.0.1629, and other 4.5.0.x versions, allows r…
-
Unscored —
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allow…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote authent…
-
Unscored —
Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Mess…
-
Unscored —CVE-2008-0942 Public exploit
SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows r…
-
Unscored —
diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via s…
-
Unscored —
Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1…