Archive
2 April 2008
Vulnerabilities first published on this day (UTC), newest first.
40 results · Feed
-
Unscored —CVE-2008-1331 Public exploit
cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/01…
-
Unscored —
Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to pe…
-
Unscored —
OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directiv…
-
Unscored —CVE-2008-0069 Public exploit
Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code v…
-
Unscored —
Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 mig…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in JV2 Quick Gallery 1.1 allows remote attackers to inject arbitr…
-
Unscored —
Multiple SQL injection vulnerabilities in CuteFlow 2.10.0 allow remote authenticated users to execute arbitrary SQL com…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in GeeCarts allow remote attackers to execute arbitrary PHP code via…
-
Unscored —
Unspecified vulnerability in Mondo Rescue before 2.2.5 has unknown impact and attack vectors, related to the use of (1)…
-
Unscored —CVE-2008-1640 Public exploit
SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Bo…
-
Unscored —
SQL injection vulnerability in viewlinks.php in Sava's Link Manager 2.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —
CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users…
-
Unscored —CVE-2008-1645 Public exploit
Directory traversal vulnerability in body.php in phpSpamManager (phpSM) 0.53 beta allows remote attackers to read arbit…
-
Unscored —CVE-2008-1623 Public exploit
SQL injection vulnerability in admin_view_image.php in Smoothflash allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-1646 Public exploit
SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to e…
-
Unscored —CVE-2008-1620 Public exploit
Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r34…
-
Unscored —
Directory traversal vulnerability in the _serve_request_multiple function in lib/Perlbal/ClientHTTPBase.pm in Perlbal b…
-
Unscored —CVE-2008-1625 Public exploit
aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, whic…
-
Unscored —CVE-2008-1650 Public exploit
SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL …
-
Unscored —
Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.7 SP5 and…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in JV2 Folder Gallery 3.1 allows remote attackers to inject arbit…
-
Unscored —CVE-2008-1649 Public exploit
Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers t…
-
Unscored —CVE-2008-1651 Public exploit
Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arb…
-
Unscored —
Nik Sharpener Pro, possibly 2.0, uses world-writable permissions for plug-in files, which allows local users to gain pr…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in CuteFlow 1.5.0 and 2.10.0 allow remote attackers to inject arbit…
-
Unscored —
Directory traversal vulnerability in index.php in Sava's Link Manager 2.0 allows remote attackers to include and execut…
-
Unscored —
Directory traversal vulnerability in index.php in Sava's GuestBook 2.0 allows remote attackers to include and execute a…
-
Unscored —CVE-2008-1647 Public exploit
The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0…
-
Unscored —
SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an un…
-
Unscored —
Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message with a malfo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHPkrm before 1.5.0 allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2008-1641 Public exploit
SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbe…
-
Unscored —CVE-2008-1621 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script o…
-
Unscored —CVE-2008-1624 Public exploit
Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include…
-
Unscored —
SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2008-1635 Public exploit
Directory traversal vulnerability in view_private.php in Keep It Simple Guest Book (KISGB) 5.0.0 and earlier allows rem…
-
Unscored —CVE-2008-1639 Public exploit
SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
suPHP before 0.6.3 allows local users to gain privileges via (1) a race condition that involves multiple symlink change…
-
Unscored —
The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via cer…