Skip to content
OpenAdvisories

Archive

4 April 2008

Vulnerabilities first published on this day (UTC), newest first.

22 results · Feed

  • Unscored —
    CVE-2008-1682 Public exploit EPSS 27%

    PHP remote file inclusion vulnerability in quiz/common/db_config.inc.php in the Online FlashQuiz (com_onlineflashquiz) …

  • Unscored —

    Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to th…

  • Unscored —

    The Disaster Recovery Framework (DRF) master server in Cisco Unified Communications products, including Unified Communi…

  • Unscored —

    Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execu…

  • Unscored —

    Stack-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via a cra…

  • Unscored —

    Apple QuickTime before 7.4.5 does not properly handle external URLs in movies, which allows remote attackers to obtain …

  • Unscored —

    Heap-based buffer overflow in clipping region (aka crgn) atom handling in quicktime.qts in Apple QuickTime before 7.4.5…

  • Unscored —

    Apple QuickTime before 7.4.5 does not properly handle movie media tracks, which allows remote attackers to execute arbi…

  • Unscored —

    Heap-based buffer overflow in quickTime.qts in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrar…

  • Unscored —

    Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote a…

  • Unscored —

    Heap-based buffer overflow in Apple QuickTime before 7.4.5 allows remote attackers to execute arbitrary code via an MP4…

  • Unscored —

    Heap-based buffer overflow in Clip opcode parsing in Apple QuickTime before 7.4.5 on Windows allows remote attackers to…

  • Unscored —

    Buffer overflow in the data reference atom handling in Apple QuickTime before 7.4.5 allows remote attackers to execute …

  • Unscored —

    Heap-based buffer overflow in Animation codec content handling in Apple QuickTime before 7.4.5 on Windows allows remote…

  • Unscored —

    Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode ("-B"), allows remote atta…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in cc_guestbook.pl in CGI City CC GuestBook allows remote attackers to inject …

  • Unscored —

    The Replace function in the capp-lspp-config script in the (1) lspp-eal4-config-ibm and (2) capp-lspp-eal4-config-hp pa…

  • Unscored —

    The ExpandCert function in Apache-SSL before apache_1.3.41+ssl_1.59 does not properly handle (1) '/' and (2) '=' charac…

  • Unscored —
    CVE-2008-1680 Public exploit

    PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain configuration information via a direct request to maintenan…

  • Unscored —

    Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allow…

  • Unscored —

    Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF …

  • Unscored —

    The Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before SP2 does not validate t…