Archive
March 2008
Vulnerabilities first published in this month (UTC), newest first.
520 results · Feed
-
Unscored —
mod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, whic…
-
Unscored —
A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 3-bit random hops (aka "Algorithm X3"), as …
-
Unscored —
phpMyAdmin before 2.11.5 accesses $_REQUEST to obtain some parameters instead of $_GET and $_POST, which allows attacke…
-
Unscored —
A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 2-bit random hops (aka "Algorithm X2"), as …
-
Unscored —
Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, whe…
-
Unscored —
A certain pseudo-random number generator (PRNG) algorithm that uses ADD with 0 random hops (aka "Algorithm A0"), as use…
-
Unscored —CVE-2008-1140 Public exploit
DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISK_IOCTL …
-
Unscored —CVE-2008-1137 Public exploit
SQL injection vulnerability in the Garys Cookbook (com_garyscookbook) 1.1.1 and earlier component for Mambo and Joomla!…
-
Unscored —CVE-2008-1141 Public exploit
Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (kern…
-
Unscored —CVE-2008-1139 Public exploit
DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain…
-
Unscored —CVE-2008-1138 Public exploit
DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a…
-
Unscored —
OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 generates different responses depending on whether or not a use…
-
Unscored —CVE-2008-1134 Public exploit
OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 supports authentication with a cookie that lacks a shared secre…
-
Unscored —CVE-2008-1136 Public exploit
The Utils::runScripts function in src/utils.cpp in vdccm 0.92 through 0.10.0 in SynCE (SynCE-dccm) allows remote attack…
-
Unscored —
Unspecified vulnerability in vdccm before 0.10.1 in SynCE (SynCE-dccm) might allow attackers to cause a denial of servi…
-
Unscored —CVE-2007-6702 Public exploit
goform/QuickStart_c0 on the GoAhead Web Server on the FS4104-AW (aka rooter) VDSL device contains a password in the typ…
-
Unscored —
The Drupal.checkPlain function in Drupal 6.0 only escapes the first instance of a character in ECMAScript, which allows…
-
Unscored —
The outboxWriteUnsent function in FTPThread.class in SendFile.jar for Beehive Software SendFile.NET uses hard-coded cre…
-
Unscored —
w_editeur.c in XWine 1.0.1 for Debian GNU/Linux allows local users to overwrite or print arbitrary files via a symlink …
-
Unscored —
w_export.c in XWine 1.0.1 on Debian GNU/Linux sets insecure permissions (0666) for /etc/wine/config, which might allow …
-
Unscored —
Untrusted search path vulnerability in src/mainwindow.c in Net Activity Viewer 0.2.1 allows local users with Net Activi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Drupal 6.0 allows remote authenticated users to inject arbitrary web script…
-
Unscored —
Unspecified vulnerability in IBM WebSphere MQ 6.0.x before 6.0.2.2 and 5.3 before Fix Pack 14 allows attackers to bypas…
-
Unscored —CVE-2008-1129 Public exploit
Cross-site scripting (XSS) vulnerability in admin/users/self.php in XRMS CRM allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-1128 Public exploit
PHP remote file inclusion vulnerability in tourney/index.php in phpMyTourney 2 allows remote attackers to execute arbit…
-
Unscored —CVE-2008-1127 Public exploit
Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute …
-
Unscored —
Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host u…
-
Unscored —CVE-2008-1122 Public exploit
SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL c…
-
Unscored —
Format string vulnerability in the embedded Internet Explorer component for Mirabilis ICQ 6 build 6043 allows remote se…
-
Unscored —CVE-2008-1125 Public exploit
Multiple directory traversal vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to read…
-
Unscored —CVE-2008-1119 Public exploit
Directory traversal vulnerability in include/doc/get_image.php in Centreon 1.4.2.3 and earlier allows remote attackers …
-
Unscored —
PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute ar…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers t…
-
Unscored —CVE-2008-1121 Public exploit
SQL injection vulnerability in index.php in eazyPortal 1.0 and earlier allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-1123 Public exploit
Multiple PHP remote file inclusion vulnerabilities in SiteBuilder Elite 1.2 allow remote attackers to execute arbitrary…
-
Unscored —
Insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) in Rising Antivirus Online Scanner al…
-
Unscored —
Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate…
-
Unscored —
Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol (PEAP), do not validat…
-
Unscored —
Unspecified vulnerability in Sun Solaris 8 directory functions allows local users to cause a denial of service (panic) …
-
Unscored —
Multiple stack-based buffer overflows in the Learn2 Corporation STRunner (aka Street Technologies) ActiveX control in i…