Archive
February 2008
Vulnerabilities first published in this month (UTC), newest first.
533 results · Feed
-
Unscored —CVE-2008-0751 Public exploit
Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity, when using Internet Exp…
-
Unscored —CVE-2008-0754 Public exploit
Multiple SQL injection vulnerabilities in index.php in the Rapid Recipe (com_rapidrecipe) 1.6.5 component for Joomla! a…
-
Unscored —CVE-2008-0746 Public exploit
SQL injection vulnerability in index.php in the Gallery (com_gallery) component for Mambo and Joomla! allows remote att…
-
Unscored —CVE-2008-0755 Public exploit
Format string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft Opium OPI Server 4.10.1028…
-
Unscored —CVE-2008-0745 Public exploit
Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbi…
-
Unscored —CVE-2008-0743 Public exploit
PHP remote file inclusion vulnerability in members_help.php in Joovili 2.1 and earlier allows remote attackers to execu…
-
Unscored —CVE-2008-0744 Public exploit
SQL injection vulnerability in user_login.asp in PreProjects.com Pre Hotels & Resorts Management System allows remote a…
-
Unscored —CVE-2008-0742 Public exploit
Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include…
-
Unscored —CVE-2003-1540 Public exploit
WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote …
-
Unscored —CVE-2008-0737 Public exploit
SQL injection vulnerability in admin/utilities_ConfigHelp.asp in CandyPress (CP) 4.1.1.26, and other 4.x and 3.x versio…
-
Unscored —CVE-2008-0734 Public exploit
SQL injection vulnerability in class_auth.php in Limbo CMS 1.0.4.2, and possibly earlier versions, allows remote attack…
-
Unscored —CVE-2008-0733 Public exploit
SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary…
-
Unscored —
Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server (WAS) before 6.0.2…
-
Unscored —CVE-2008-0735 Public exploit
SQL injection vulnerability in mod/gallery/ajax/gallery_data.php in AuraCMS 2.2 allows remote attackers to execute arbi…
-
Unscored —CVE-2008-0738 Public exploit
Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers …
-
Unscored —
IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) and 6.1 before Fix Pack 15 (6.1.0.15) writes…
-
Unscored —CVE-2008-0739 Public exploit
SQL injection vulnerability in admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and earlier 4.x and 3.x version…
-
Unscored —CVE-2008-0736 Public exploit
admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and possibly other 4.x and 3.x versions, allows remote attacke…
-
Unscored —CVE-2008-0103 EPSS 30%
Unspecified vulnerability in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows …
-
Unscored —
IBM DB2 Universal Database (UDB) Administration Server (DAS) 8 before Fix Pack 16 and 9 before Fix Pack 4 allows remote…
-
Unscored —
Untrusted search path vulnerability in db2pd in IBM DB2 Universal Database (UDB) 8 before FixPak 16 and 9 before Fix Pa…
-
Unscored —
Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Wo…
-
Unscored —
Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote at…
-
Unscored —CVE-2008-0109 EPSS 31%
Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to exec…
-
Unscored —CVE-2008-0102 EPSS 37%
Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arb…
-
Unscored —CVE-2008-0078 EPSS 29%
Unspecified vulnerability in an ActiveX control (dxtmsft.dll) in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7…
-
Unscored —CVE-2008-0076 EPSS 29%
Unspecified vulnerability in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute …
-
Unscored —CVE-2008-0104 EPSS 29%
Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arb…
-
Unscored —CVE-2008-0080 EPSS 41%
Heap-based buffer overflow in the WebDAV Mini-Redirector in Microsoft Windows XP SP2, Server 2003 SP1 and SP2, and Vist…
-
Unscored —CVE-2008-0077 EPSS 37%
Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute …
-
Unscored —CVE-2007-0065 EPSS 43%
Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Serv…
-
Unscored —
wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and Works Suite 2005, allows r…
-
Unscored —CVE-2008-0729 Public exploit
Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion a…
-
Unscored —CVE-2008-0009 Public exploit
The vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certain user…
-
Unscored —CVE-2008-0010 Public exploit
The copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not validate a certa…
-
Unscored —
Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain p…
-
Unscored —CVE-2008-0088 EPSS 29%
Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory A…
-
Unscored —
The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow…
-
Unscored —CVE-2008-0600 Public exploit
The vmsplice_to_pipe function in Linux kernel 2.6.17 through 2.6.24.1 does not validate a certain userspace pointer bef…
-
Unscored —CVE-2008-0084 EPSS 74%
Unspecified vulnerability in the TCP/IP support in Microsoft Windows Vista allows remote DHCP servers to cause a denial…