17 April 2008

30 results · Feed

• Unscored —
  CVE-2008-1881 Public exploit EPSS 12%

  Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers t…

  vlc Debian
  Apr 17, 2008
• Unscored —
  CVE-2008-1878 Public exploit EPSS 15%

  Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and ear…

  Apr 17, 2008
• Unscored —
  CVE-2007-6715

  Mozilla Firefox allows remote attackers to cause a denial of service (crash) via crafted image, as demonstrated by the …

  Apr 17, 2008
• Unscored —
  CVE-2007-6714

  DBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such as Active Directory, al…

  Apr 17, 2008
• Unscored —
  CVE-2008-1877

  tss 0.8.1 allows local users to read arbitrary files via the -a parameter, which is processed while tss is running with…

  Apr 17, 2008
• Unscored —
  CVE-2008-0320 Public exploit EPSS 57%

  Heap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote attackers to cause a denial o…

  Apr 17, 2008
• Unscored —
  CVE-2008-1868 Public exploit

  admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote att…

  Apr 17, 2008
• Unscored —
  CVE-2008-1875 Public exploit

  SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote…

  Apr 17, 2008
• Unscored —
  CVE-2008-1867 Public exploit

  SQL injection vulnerability in Blog Pixel Motion (aka Blog PixelMotion) allows remote attackers to execute arbitrary SQ…

  Apr 17, 2008
• Unscored —
  CVE-2008-1872 Public exploit

  SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrar…

  Apr 17, 2008
• Unscored —
  CVE-2008-1870 Public exploit

  SQL injection vulnerability in getdata.php in PIGMy-SQL 1.4.1 and earlier allows remote attackers to execute arbitrary …

  Apr 17, 2008
• Unscored —
  CVE-2008-1863 Public exploit

  SQL injection vulnerability in view_reviews.php in Prozilla Cheat Script (aka Cheats) 2.0 allows remote attackers to ex…

  Apr 17, 2008
• Unscored —
  CVE-2008-1873 Public exploit

  Cross-site scripting (XSS) vulnerability in the private message feature in Nuke ET 3.2 and 3.4, when using Internet Exp…

  Apr 17, 2008
• Unscored —
  CVE-2008-1025

  Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to in…

  Apr 17, 2008
• Unscored —
  CVE-2008-1871 Public exploit

  SQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote authenticated users to e…

  Apr 17, 2008
• Unscored —
  CVE-2008-1865

  Stack-based buffer overflow in the msx_readnode function in libmosix.c in openmosix-tools (aka userspace-tools) in open…

  Apr 17, 2008
• Unscored —
  CVE-2008-1874 Public exploit

  SQL injection vulnerability in account/user/mail.html in Xpoze Pro 3.05 and earlier allows remote authenticated users t…

  Apr 17, 2008
• Unscored —
  CVE-2008-1876 Public exploit EPSS 28%

  PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers to execute arbitrary PH…

  Apr 17, 2008
• Unscored —
  CVE-2008-1864 Public exploit

  SQL injection vulnerability in project.php in Prozilla Freelancers allows remote attackers to execute arbitrary SQL com…

  Apr 17, 2008
• Unscored —
  CVE-2008-1866 Public exploit

  admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remot…

  Apr 17, 2008
• Unscored —
  CVE-2008-1024

  Apple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause a denial of service (c…

  Apr 17, 2008
• Unscored —
  CVE-2008-1380

  The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allo…

  Apr 17, 2008
• Unscored —
  CVE-2008-1869 Public exploit

  SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id …

  Apr 17, 2008
• Unscored —
  CVE-2008-1026

  Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp) in Apple WebKit, as use…

  Apr 17, 2008
• Unscored —
  CVE-2007-5745

  Multiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause a denial of service (…

  Apr 17, 2008
• Unscored —
  CVE-2007-5746

  Integer overflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly…

  Apr 17, 2008
• Unscored —
  CVE-2007-5747

  Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibl…

  Apr 17, 2008
• Unscored —
  CVE-2008-1860 Public exploit

  Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitra…

  Apr 17, 2008
• Unscored —
  CVE-2008-1861 Public exploit

  Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and earlier, when register_g…

  Apr 17, 2008
• Unscored —
  CVE-2008-1862 Public exploit

  ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which a…

  Apr 17, 2008