Archive
March 2008
Vulnerabilities first published in this month (UTC), newest first.
520 results · Feed
-
Unscored —CVE-2008-1272 Public exploit
Multiple SQL injection vulnerabilities in BM Classifieds 20080309 and earlier allow remote attackers to execute arbitra…
-
Unscored —CVE-2008-1276 Public exploit
Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3…
-
Unscored —CVE-2008-1278 Public exploit
The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote atta…
-
Unscored —
Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and …
-
Unscored —
Directory traversal vulnerability in TFTPsrvs.exe 2.5.3.1 and earlier, as used in Argon Technology Client Management Se…
-
Unscored —CVE-2008-1275 Public exploit
Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x a…
-
Unscored —CVE-2008-1273 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web scri…
-
Unscored —
Buffer overflow in the Matroska demuxer (demuxers/demux_matroska.c) in xine-lib before 1.1.10.1 allows remote attackers…
-
Unscored —
mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow re…
-
Unscored —
The ZyXEL P-660HW series router has "admin" as its default password, which allows remote attackers to gain administrati…
-
Unscored —
Stack-based buffer overflow in the silc_fingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Confere…
-
Unscored —
The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware maintains authentication state by IP address, which allows remo…
-
Unscored —CVE-2008-1228 Public exploit
Cross-site scripting (XSS) vulnerability in admin.php in MG2 (formerly Minigal) allows remote attackers to inject arbit…
-
Unscored —
snomControl.swf in the central phone server for the Snom 320 SIP Phone allows remote attackers to cause a denial of ser…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Sno…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Dokeos 1.8.4 before SP3 allows remote attackers to inject arbitrary web scr…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities on the Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware a…
-
Unscored —
Cross-site scripting (XSS) vulnerability on the Linksys WRT300N router with firmware 2.00.20, when Mozilla Firefox or A…
-
Unscored —
The Linksys WRT54G router allows remote attackers to cause a denial of service (device restart) via a long username and…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration Suite (ZCS) 4.0.3, 4.5.6, and possibly othe…
-
Unscored —
The web interface on the central phone server for the Snom 320 SIP Phone allows remote attackers to make arbitrary phon…
-
Unscored —
Multiple buffer overflows in the web interface on the D-Link DI-524 router allow remote attackers to cause a denial of …
-
Unscored —CVE-2008-1244 Public exploit
cgi-bin/setup_dns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allow…
-
Unscored —
The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive fi…
-
Unscored —CVE-2008-1221 Public exploit
Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Mana…
-
High 7.8
The Cisco PIX/ASA Finesse Operation System 7.1 and 7.2 allows local users to gain privileges by entering characters at …
-
Unscored —
The Linksys WRT54G router stores passwords and keys in cleartext in the Config.bin file, which might allow remote authe…
-
Unscored —CVE-2008-1245 Public exploit
cgi-bin/setup_virtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a…
-
Unscored —CVE-2008-1242 Public exploit
The control panel on the Belkin F5D7230-4 router with firmware 9.01.10 maintains authentication state by IP address, wh…
-
Unscored —CVE-2008-1219 Public exploit
SQL injection vulnerability in the Kutub-i Sitte (KutubiSitte) 1.1 module for PHP-Nuke allows remote attackers to execu…
-
Unscored —
The Zyxel P-2602HW-D1A router with 3.40(AJZ.1) firmware provides different responses to admin page requests depending o…
-
Unscored —
cp06_wifi_m_nocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credenti…
-
Unscored —CVE-2008-1229 Public exploit
Cross-site scripting (XSS) vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to inject a…
-
Unscored —CVE-2008-1262 Public exploit
The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication c…
-
Unscored —CVE-2008-1247 Public exploit
The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts,…
-
Unscored —CVE-2008-1220 Public exploit
SQL injection vulnerability in the 4nChat 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Unspecified vulnerability in Dokeos 1.8.4 before SP3 allows attackers to execute arbitrary code via unspecified vectors.
-
Unscored —CVE-2008-1230 Public exploit
Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to upload and execute arb…
-
Unscored —CVE-2008-1231 Public exploit
Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and exe…
-
Unscored —
The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which al…