Archive
March 2008
Vulnerabilities first published in this month (UTC), newest first.
210 results · Clear filters · Feed
-
Unscored —CVE-2008-1500 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in TinyPortal 0.8.6 and 1.0.3 allows remote attackers to inject a…
-
Unscored —CVE-2008-1495 Public exploit
Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote aut…
-
Unscored —CVE-2008-1498 Public exploit
Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated use…
-
Unscored —CVE-2008-1504 Public exploit
Cross-site scripting (XSS) vulnerability in setup.php3 in phpHeaven phpMyChat 0.14.5 allows remote attackers to inject …
-
Unscored —
ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a …
-
Unscored —
Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial …
-
Unscored —CVE-2008-1484 Public exploit
The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which …
-
Unscored —CVE-2008-1488 Public exploit
Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to ex…
-
Unscored —CVE-2008-0073 Public exploit
Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP serv…
-
Unscored —CVE-2008-0125 Public exploit
Cross-site scripting (XSS) vulnerability in phpstats.php in Michael Wagner phpstats 0.1 alpha allows remote attackers t…
-
Unscored —CVE-2008-1479 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in cyberfrogs.net cfnetgs 0.24 allows remote attackers to inject …
-
Unscored —CVE-2008-1482 Public exploit
Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows…
-
Unscored —CVE-2008-1470 Public exploit
Incomplete blacklist vulnerability in IISWebAgentIF.dll in the WebID RSA Authentication Agent 5.3, and possibly earlier…
-
Unscored —CVE-2008-1471 Public exploit
The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial…
-
Unscored —CVE-2008-1481 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.1.2 allows remote attackers to inject arbitrary web…
-
Unscored —
Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including B…
-
Unscored —CVE-2008-1478 Public exploit
Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service (crash) by opening a FTP passive mode con…
-
Unscored —CVE-2008-1480 Public exploit
rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC req…
-
Unscored —CVE-2008-1465 Public exploit
SQL injection vulnerability in the Detodas Restaurante (com_restaurante) 1.0 component for Mambo and Joomla! allows rem…
-
Unscored —CVE-2008-1463 Public exploit
Cross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows …
-
Unscored —CVE-2008-1462 Public exploit
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-1467 Public exploit
CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacter…
-
Unscored —CVE-2008-1466 Public exploit
Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code …
-
Unscored —
Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename ar…
-
Unscored —CVE-2008-1460 Public exploit
SQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and Joomla! allows remote …
-
Unscored —CVE-2008-1458 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-1459 Public exploit
SQL injection vulnerability in the Alberghi (com_alberghi) 2.1.3 and earlier component for Mambo and Joomla! allows rem…
-
Unscored —
Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-…
-
Unscored —CVE-2008-1426 Public exploit
SQL injection vulnerability in album.asp in KAPhotoservice allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-1425 Public exploit
SQL injection vulnerability in index.php in the gallery module in Easy-Clanpage 2.2 allows remote attackers to execute …
-
Unscored —CVE-2008-1427 Public exploit
SQL injection vulnerability in the Joobi Acajoom (com_acajoom) 1.1.5 and 1.2.5 component for Joomla! allows remote atta…
-
Unscored —CVE-2008-1430 Public exploit
SQL injection vulnerability in links.asp in ASPapp allows remote attackers to execute arbitrary SQL commands via the Ca…
-
Unscored —CVE-2008-1413 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in SNewsCMS Rus 2.1 through 2.4 allows remote attackers to injec…
-
Unscored —CVE-2008-1398 Public exploit
SQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-1404 Public exploit
SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attack…
-
Unscored —CVE-2008-1408 Public exploit
SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 (2.204) FIX 4 allows remote attac…
-
Unscored —CVE-2008-1407 Public exploit
SQL injection vulnerability in index.php in the WebChat 1.60 module for eXV2 allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-1403 Public exploit
Stack-based buffer overflow in the TFTP server in BootManage TFTPD 1.99 and earlier in BootManage Administrator 7.1 and…
-
Unscored —CVE-2008-1411 Public exploit
The PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to cause a denial of …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary P…