Archive
February 2008
Vulnerabilities first published in this month (UTC), newest first.
533 results · Feed
-
Unscored —
Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL derefere…
-
Unscored —CVE-2008-0943 Public exploit
Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.4.24 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-0939 Public exploit
Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow r…
-
Unscored —
Multiple race conditions in the CPU Performance Counters (cpc) subsystem in the kernel in Sun Solaris 10 allow local us…
-
Unscored —
Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local users with PRIV_DTRA…
-
Unscored —CVE-2008-0936 Public exploit
SQL injection vulnerability in index.php in the Prayer List (prayerlist) 1.04 module for XOOPS allows remote attackers …
-
Unscored —CVE-2008-0937 Public exploit
SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 module for XOOPS allows remote attackers to…
-
Unscored —
Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4…
-
Unscored —CVE-2008-0934 Public exploit
SQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote attackers to execute arbi…
-
Unscored —CVE-2008-0920 Public exploit
SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5…
-
Unscored —CVE-2008-0911 Public exploit
SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execut…
-
Unscored —
Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere…
-
Unscored —CVE-2008-0922 Public exploit
SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-0919 Public exploit
Cross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information Management (OSSIM) 0.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 allows remote attackers to inj…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.8…
-
Unscored —CVE-2008-0921 Public exploit
SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Tor World Tor Search 1.1 and earlier, I-Navigator 4.0, Mobile Frontier 2.1 …
-
Unscored —CVE-2008-0916 Public exploit
SQL injection vulnerability in the Highwood Design hwdVideoShare (com_hwdvideoshare) 1.1.3 Alpha component for Joomla! …
-
Unscored —
The Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 stores the number of remainin…
-
Unscored —CVE-2008-0918 Public exploit
SQL injection vulnerability in includes/count_dl_or_link.inc.php in the astatsPRO (com_astatspro) 1.0.1 component for J…
-
Unscored —
Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-S…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 1…
-
Unscored —CVE-2008-0905 Public exploit
Directory traversal vulnerability in globsy_edit.php in Globsy 1.0 allows remote attackers to read arbitrary files via …
-
Unscored —
Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interacti…
-
Unscored —
Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and …
-
Unscored —CVE-2008-0900 EPSS 10%
Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows…
-
Unscored —
Cross-site scripting (XSS) vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to inject…
-
Unscored —
SQL injection vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to execute arbitrary S…
-
Unscored —
BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for applicat…
-
Unscored —
Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" p…
-
Unscored —
BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, rem…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remot…
-
Unscored —
The distributed queue feature in JMS in BEA WebLogic Server 9.0 through 10.0, in certain configurations, does not prope…
-
Unscored —
misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to …
-
Unscored —
BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attac…
-
Unscored —CVE-2008-0907 Public exploit
SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-0906 Public exploit
SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service …