Archive
24 March 2008
Vulnerabilities first published on this day (UTC), newest first.
42 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary w…
-
Unscored —
SQL injection vulnerability in Phorum before 5.2.6, when mysql_use_ft is disabled, allows remote attackers to execute a…
-
Unscored —CVE-2008-1484 Public exploit
The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which …
-
Unscored —
OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set …
-
Unscored —
Cross-site scripting (XSS) vulnerability in PunBB 1.2.16 and earlier allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2008-1488 Public exploit
Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to ex…
-
Unscored —
Unspecified vulnerability in customer.php in FreeWebshop.org 2.2.5, 2.2.6 and 2.2.7WIP1/2 allows remote attackers to ga…
-
Unscored —CVE-2008-0073 Public exploit
Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP serv…
-
Unscored —CVE-2008-0125 Public exploit
Cross-site scripting (XSS) vulnerability in phpstats.php in Michael Wagner phpstats 0.1 alpha allows remote attackers t…
-
Unscored —CVE-2008-0951 EPSS 30%
Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted rem…
-
Medium 6.1
Roundup vulnerability related to Cross-site scripting (XSS)
Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting (XSS).
-
Unscored —CVE-2008-1479 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in cyberfrogs.net cfnetgs 0.24 allows remote attackers to inject …
-
Unscored —CVE-2008-1482 Public exploit
Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows…
-
Unscored —CVE-2008-1470 Public exploit
Incomplete blacklist vulnerability in IISWebAgentIF.dll in the WebID RSA Authentication Agent 5.3, and possibly earlier…
-
Unscored —CVE-2008-1471 Public exploit
The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial…
-
Unscored —
The Altiris Client Service (AClient.exe) in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local user…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in busca.php in eForum 0.4 allow remote attackers to inject arbitra…
-
Unscored —CVE-2008-1481 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.1.2 allows remote attackers to inject arbitrary web…
-
Unscored —
Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including B…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2008-1478 Public exploit
Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service (crash) by opening a FTP passive mode con…
-
Unscored —CVE-2008-1480 Public exploit
rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC req…
-
Critical 9.1
Roundup xml-rpc server improper check of property permissions
The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the (1) list, (2) display, and (3) set methods.
-
Unscored —
Gallarific Free Edition 1.1 does not require authentication for (1) photos.php, (2) comments.php, and (3) gallery.php i…
-
Unscored —CVE-2008-1465 Public exploit
SQL injection vulnerability in the Detodas Restaurante (com_restaurante) 1.0 component for Mambo and Joomla! allows rem…
-
Unscored —CVE-2008-1463 Public exploit
Cross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows …
-
Unscored —
Multiple SQL injection vulnerabilities in Gallarific Free Edition 1.1 allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-1462 Public exploit
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL…
-
Unscored —
Cross-site scripting (XSS) vulnerability in namazu.cgi in Namazu before 2.0.18 allows remote attackers to inject arbitr…
-
Unscored —CVE-2008-1467 Public exploit
CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacter…
-
Unscored —CVE-2008-1466 Public exploit
Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code …
-
Unscored —
Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename ar…
-
Unscored —CVE-2008-1460 Public exploit
SQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and Joomla! allows remote …
-
Unscored —CVE-2008-1458 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-1459 Public exploit
SQL injection vulnerability in the Alberghi (com_alberghi) 2.1.3 and earlier component for Mambo and Joomla! allows rem…
-
Unscored —
ViewVC before 1.0.5 includes "all-forbidden" files within search results that list CVS or Subversion (SVN) commits, whi…
-
Unscored —
The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edit…
-
Unscored —
ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access control, which allows remo…
-
Unscored —
ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remo…
-
Unscored —
Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-…