Archive
March 2008
Vulnerabilities first published in this month (UTC), newest first.
210 results · Clear filters · Feed
-
Unscored —CVE-2008-1245 Public exploit
cgi-bin/setup_virtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a…
-
Unscored —CVE-2008-1242 Public exploit
The control panel on the Belkin F5D7230-4 router with firmware 9.01.10 maintains authentication state by IP address, wh…
-
Unscored —CVE-2008-1219 Public exploit
SQL injection vulnerability in the Kutub-i Sitte (KutubiSitte) 1.1 module for PHP-Nuke allows remote attackers to execu…
-
Unscored —CVE-2008-1229 Public exploit
Cross-site scripting (XSS) vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to inject a…
-
Unscored —CVE-2008-1262 Public exploit
The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication c…
-
Unscored —CVE-2008-1247 Public exploit
The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts,…
-
Unscored —CVE-2008-1220 Public exploit
SQL injection vulnerability in the 4nChat 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-1230 Public exploit
Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to upload and execute arb…
-
Unscored —CVE-2008-1231 Public exploit
Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and exe…
-
Unscored —CVE-2008-1225 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in WebCT Campus Edition 4.1.5.8, when "Don't wrap text" is enabled,…
-
Unscored —CVE-2008-1215 Public exploit
Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed…
-
Unscored —CVE-2008-1208 Public exploit
Cross-site scripting (XSS) vulnerability in the login page in Check Point VPN-1 UTM Edge W Embedded NGX 7.0.48x allows …
-
Unscored —
Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, …
-
Unscored —CVE-2003-1550 Public exploit
XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsO…
-
Unscored —CVE-2003-1548 Public exploit
MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to obtain sensitive information via an invalid IDAdmin or other…
-
Unscored —CVE-2008-0985 Public exploit
Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allow…
-
Unscored —CVE-2008-0986 Public exploit
Integer overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK m3-rc37a and earlier,…
-
Unscored —CVE-2008-1181 Public exploit
Juniper Networks Secure Access 2000 5.5 R1 (build 11711) allows remote attackers to obtain sensitive information via a …
-
Unscored —CVE-2008-1177 Public exploit
SQL injection vulnerability in shop/detail.php in Affiliate Market (affmarket) 0.1 BETA allows remote attackers to exec…
-
Unscored —CVE-2008-1174 Public exploit
Cross-site scripting (XSS) vulnerability in editUser.asp in AuthentiX 6.3b1 Trial allows remote attackers to inject arb…
-
Unscored —CVE-2008-1178 Public exploit
Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to r…
-
Unscored —CVE-2008-1176 Public exploit
Cross-site scripting (XSS) vulnerability in function/sideblock.php in Affiliate Market (affmarket) 0.1 BETA allows remo…
-
Unscored —CVE-2008-1173 Public exploit
Cross-site scripting (XSS) vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to …
-
Unscored —CVE-2008-1180 Public exploit
Cross-site scripting (XSS) vulnerability in dana-na/auth/rdremediate.cgi in Juniper Networks Secure Access 2000 5.5 R1 …
-
Unscored —CVE-2008-1170 Public exploit
Multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow remote attackers to execute arbitrary PHP code v…
-
Unscored —CVE-2008-1169 Public exploit
Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote …
-
Unscored —CVE-2008-1162 Public exploit
SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execut…
-
Unscored —CVE-2008-1164 Public exploit
SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-1163 Public exploit
SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbi…
-
Unscored —CVE-2007-6704 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass 4100 SSL VPN 5.4.1 through 5.5.2 and 6.0 through 6.0…
-
Unscored —
Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, whe…
-
Unscored —CVE-2008-1140 Public exploit
DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISK_IOCTL …
-
Unscored —CVE-2008-1137 Public exploit
SQL injection vulnerability in the Garys Cookbook (com_garyscookbook) 1.1.1 and earlier component for Mambo and Joomla!…
-
Unscored —CVE-2008-1141 Public exploit
Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (kern…
-
Unscored —CVE-2008-1139 Public exploit
DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain…
-
Unscored —CVE-2008-1138 Public exploit
DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a…
-
Unscored —CVE-2008-1134 Public exploit
OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 supports authentication with a cookie that lacks a shared secre…
-
Unscored —CVE-2008-1136 Public exploit
The Utils::runScripts function in src/utils.cpp in vdccm 0.92 through 0.10.0 in SynCE (SynCE-dccm) allows remote attack…
-
Unscored —CVE-2007-6702 Public exploit
goform/QuickStart_c0 on the GoAhead Web Server on the FS4104-AW (aka rooter) VDSL device contains a password in the typ…
-
Unscored —CVE-2008-1129 Public exploit
Cross-site scripting (XSS) vulnerability in admin/users/self.php in XRMS CRM allows remote attackers to inject arbitrar…