Skip to content
OpenAdvisories

Archive

February 2008

Vulnerabilities first published in this month (UTC), newest first.

← January 2008 2008 / February March 2008 →
  1. 119
  2. 2 
  3. 3 
  4. 415
  5. 533
  6. 634
  7. 717
  8. 820
  9. 92
  10. 10 
  11. 114
  12. 1291
  13. 1356
  14. 1410
  15. 1525
  16. 16 
  17. 17 
  18. 187
  19. 1925
  20. 2016
  21. 2140
  22. 2229
  23. 23 
  24. 24 
  25. 2525
  26. 266
  27. 2719
  28. 2823
  29. 2917
All Critical High Medium Low Exploited only Public exploit

533 results · Feed

  • Unscored —
    CVE-2008-0806

    wyrd 1.4.3b allows local users to overwrite arbitrary files via a symlink attack on the wyrd-tmp.[USERID] temporary fil…

    wyrd Debian
  • Unscored —
    CVE-2008-0804 Public exploit

    PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows remote attackers to exe…

  • Unscored —
    CVE-2008-0805 Public exploit

    Unrestricted file upload vulnerability in image.php in PHPizabi 0.848b C1 HFP1 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-0556

    Cross-site request forgery (CSRF) vulnerability in OpenCA PKI 0.9.2.5, and possibly earlier versions, allows remote att…

  • Unscored —
    CVE-2007-6258 Public exploit EPSS 41%

    Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers …

  • Unscored —
    CVE-2008-0674

    Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containin…

    pcre3 Debian
  • Unscored —
    CVE-2007-6313

    MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which…

  • Unscored —
    CVE-2008-0800 Public exploit

    SQL injection vulnerability in index.php in the McQuiz (com_mcquiz) 0.9 Final component for Joomla! allows remote attac…

  • Unscored —
    CVE-2008-0803 Public exploit EPSS 33%

    Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbi…

  • Unscored —
    CVE-2008-0802 Public exploit

    SQL injection vulnerability in index.php in the MediaSlide (com_mediaslide) 0.5 component for Joomla! allows remote att…

  • Unscored —
    CVE-2008-0798 Public exploit

    Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magic_quotes_gpc is disabled, allow…

  • Unscored —
    CVE-2008-0797

    Directory traversal vulnerability in lib/download.php in iTheora 1.0 rc1 allows remote attackers to read arbitrary file…

  • Unscored —
    CVE-2008-0796 Public exploit

    SQL injection vulnerability in threads.php in Nuboard 0.5 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-0795 Public exploit

    SQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and Joomla! allows remote …

  • Unscored —
    CVE-2008-0799 Public exploit

    SQL injection vulnerability in index.php in the Quiz (com_quiz) 0.81 and earlier component for Mambo and Joomla! allows…

  • Unscored —
    CVE-2008-0801 Public exploit

    SQL injection vulnerability in index.php in the PAXXGallery (com_paxxgallery) 0.2 component for Mambo and Joomla! allow…

  • Unscored —
    CVE-2008-0529

    Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCC…

  • Unscored —
    CVE-2008-0792

    Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-S…

  • Unscored —
    CVE-2008-0789

    SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-0527

    The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial…

  • Unscored —
    CVE-2008-0777

    The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sen…

  • Unscored —
    CVE-2008-0794 Public exploit

    Directory traversal vulnerability in user/header.php in Affiliate Market 0.1 BETA allows remote attackers to include an…

  • Unscored —
    CVE-2008-0793

    Multiple cross-site scripting (XSS) vulnerabilities in search.asp in Tendenci CMS allow remote attackers to inject arbi…

  • Unscored —
    CVE-2008-0528

    Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attacker…

  • Unscored —
    CVE-2008-0530

    Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote…

  • Unscored —
    CVE-2008-0791

    ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to cause a denial of service (CPU consumptio…

  • Unscored —
    CVE-2008-0531

    Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remo…

  • Unscored —
    CVE-2008-0526

    Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2008-0790 Public exploit

    Directory traversal vulnerability in ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to read…

  • Unscored —
    CVE-2008-0788

    Multiple cross-site request forgery (CSRF) vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to (1) hij…

  • Medium 6.1
    CVE-2008-0642

    Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) We…

  • Unscored —
    CVE-2008-0787 Public exploit

    SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execu…

  • Unscored —
    CVE-2008-0783 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote a…

    cacti Debian
  • Unscored —
    CVE-2008-0784

    graph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain the full path via an i…

    cacti Debian
  • Unscored —
    CVE-2008-0786

    CRLF injection vulnerability in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k, when running on older PHP interprete…

    cacti Debian
  • Unscored —
    CVE-2008-0785 Public exploit

    Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated …

    cacti Debian
  • Medium —
    CVE-2008-0781

    MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) message, (2) pagename, and (3) target filenames.

    moin PyPI
  • Medium —
    CVE-2008-0782 Public exploit EPSS 15%

    MoinMoin Directory traversal vulnerability

    Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the MOIN_ID user ID in a cookie for a userform action. NOTE: this issue can be leveraged for PHP code execution via the …

    moin PyPI
  • Medium —
    CVE-2008-0780

    MoinMoin Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the login action.

    moin PyPI
  • Unscored —
    CVE-2008-0779

    The fortimon.sys device driver in Fortinet FortiClient Host Security 3.0 MR5 Patch 3 and earlier does not properly init…