Archive
16 April 2008
Vulnerabilities first published on this day (UTC), newest first.
60 results · Feed
-
Unscored —
Unspecified vulnerability in Flip4Mac WMV before 2.2.0.49 has unknown impact and attack vectors related to malformed WM…
-
Unscored —CVE-2008-1854 Public exploit
Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to c…
-
Unscored —CVE-2008-1859 Public exploit
SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-1856 Public exploit
plugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modi…
-
Unscored —CVE-2008-1855 Public exploit
FrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestr…
-
Unscored —CVE-2008-1858 Public exploit
SQL injection vulnerability in index.php in 724Networks 724CMS 4.01 and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2008-1857 Public exploit
Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attacker…
-
Unscored —CVE-2008-0068 Public exploit
Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 al…
-
Unscored —CVE-2008-0892 EPSS 14%
The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory…
-
Unscored —
Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access t…
-
Unscored —
ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers…
-
Unscored —
ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers…
-
Unscored —
The ovtopmd service in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote …
-
Unscored —
db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pa…
-
Unscored —
Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 befor…
-
Unscored —
SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authentica…
-
Unscored —CVE-2008-1843 Public exploit
SQL injection vulnerability in browse.php in W2B DatingClub (aka Dating Club) allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-1844 Public exploit
SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-1849 Public exploit
Directory traversal vulnerability in index.php in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 a…
-
Unscored —
The default configuration of SAP NetWeaver before 7.0 SP15 does not enable the "Always Use Secure HTML Editor" (aka Edi…
-
Unscored —CVE-2008-1847 Public exploit
SQL injection vulnerability in view.php in CoronaMatrix phpAddressBook 2.11 allows remote attackers to execute arbitrar…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in login.php in Omnistar Interactive OSI Affiliate allow remote att…
-
Unscored —
SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gall…
-
Unscored —
Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2…
-
Unscored —CVE-2008-1848 Public exploit
Cross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and ear…
-
Unscored —
Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows …
-
Unscored —
Multgiple cross-site scripting (XSS) vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote at…
-
Unscored —
The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe …
-
Unscored —CVE-2008-1838 Public exploit
SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —
The Korn shell (aka mksh) before R33d on MirOS (aka MirBSD) does not flush the tty's I/O when invoking mksh in a new te…
-
Unscored —
swfdec_load_object.c in Swfdec before 0.6.4 does not properly restrict local file access from untrusted sandboxes, whic…
-
Unscored —
ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as…
-
Unscored —
ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number,…
-
Unscored —
The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of servi…
-
Unscored —
libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files t…
-
Unscored —
Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code vi…
-
Unscored —
Integer overflow in the ws_getpostvars function in Firefly Media Server (formerly mt-daapd) 0.2.4.1 (0.9~r1696-1.2 on D…
-
Unscored —
Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via …
-
Unscored —
lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers tempo…
-
Unscored —
Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards Enterp…