Archive
March 2008
Vulnerabilities first published in this month (UTC), newest first.
520 results · Feed
-
Unscored —
Unspecified vulnerability in customer.php in FreeWebshop.org 2.2.5, 2.2.6 and 2.2.7WIP1/2 allows remote attackers to ga…
-
Unscored —CVE-2008-0073 Public exploit
Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP serv…
-
Unscored —CVE-2008-0125 Public exploit
Cross-site scripting (XSS) vulnerability in phpstats.php in Michael Wagner phpstats 0.1 alpha allows remote attackers t…
-
Unscored —CVE-2008-0951 EPSS 30%
Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted rem…
-
Medium 6.1
Roundup vulnerability related to Cross-site scripting (XSS)
Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting (XSS).
-
Unscored —CVE-2008-1479 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in cyberfrogs.net cfnetgs 0.24 allows remote attackers to inject …
-
Unscored —CVE-2008-1482 Public exploit
Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows…
-
Unscored —CVE-2008-1470 Public exploit
Incomplete blacklist vulnerability in IISWebAgentIF.dll in the WebID RSA Authentication Agent 5.3, and possibly earlier…
-
Unscored —CVE-2008-1471 Public exploit
The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial…
-
Unscored —
The Altiris Client Service (AClient.exe) in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local user…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in busca.php in eForum 0.4 allow remote attackers to inject arbitra…
-
Unscored —CVE-2008-1481 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.1.2 allows remote attackers to inject arbitrary web…
-
Unscored —
Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including B…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2008-1478 Public exploit
Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service (crash) by opening a FTP passive mode con…
-
Unscored —CVE-2008-1480 Public exploit
rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC req…
-
Critical 9.1
Roundup xml-rpc server improper check of property permissions
The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the (1) list, (2) display, and (3) set methods.
-
Unscored —
Gallarific Free Edition 1.1 does not require authentication for (1) photos.php, (2) comments.php, and (3) gallery.php i…
-
Unscored —CVE-2008-1465 Public exploit
SQL injection vulnerability in the Detodas Restaurante (com_restaurante) 1.0 component for Mambo and Joomla! allows rem…
-
Unscored —CVE-2008-1463 Public exploit
Cross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows …
-
Unscored —
Multiple SQL injection vulnerabilities in Gallarific Free Edition 1.1 allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-1462 Public exploit
SQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to execute arbitrary SQL…
-
Unscored —
Cross-site scripting (XSS) vulnerability in namazu.cgi in Namazu before 2.0.18 allows remote attackers to inject arbitr…
-
Unscored —CVE-2008-1467 Public exploit
CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacter…
-
Unscored —CVE-2008-1466 Public exploit
Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code …
-
Unscored —
Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename ar…
-
Unscored —CVE-2008-1460 Public exploit
SQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and Joomla! allows remote …
-
Unscored —CVE-2008-1458 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2008-1459 Public exploit
SQL injection vulnerability in the Alberghi (com_alberghi) 2.1.3 and earlier component for Mambo and Joomla! allows rem…
-
Unscored —
ViewVC before 1.0.5 includes "all-forbidden" files within search results that list CVS or Subversion (SVN) commits, whi…
-
Unscored —
The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edit…
-
Unscored —
ViewVC before 1.0.5 stores sensitive information under the web root with insufficient access control, which allows remo…
-
Unscored —
ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remo…
-
Unscored —
Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-…
-
Unscored —CVE-2008-1201 EPSS 20%
Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Fla…
-
Unscored —
Multiple stack-based buffer overflows in the phpcups PHP module for CUPS 1.1.23rc1 might allow context-dependent attack…
-
Unscored —
Secure Internet Live Conferencing (SILC) Server before 1.1.1 allows remote attackers to cause a denial of service (daem…
-
Unscored —CVE-2008-1426 Public exploit
SQL injection vulnerability in album.asp in KAPhotoservice allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-1425 Public exploit
SQL injection vulnerability in index.php in the gallery module in Easy-Clanpage 2.2 allows remote attackers to execute …
-
Unscored —CVE-2008-1427 Public exploit
SQL injection vulnerability in the Joobi Acajoom (com_acajoom) 1.1.5 and 1.2.5 component for Joomla! allows remote atta…