Archive
April 2008
Vulnerabilities first published in this month (UTC), newest first.
456 results · Feed
-
Unscored —
The NNSTAT (aka SYSPROC.NNSTAT) procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 on Windows allo…
-
Unscored —
BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities on Motorola Surfboard with software SB5100-2.3.3.0-SCM00-NOS…
-
Unscored —
Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via a file:///%E2 link that…
-
Unscored —
Unspecified vulnerability in Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash…
-
Unscored —
Sun Java System Directory Proxy Server 6.0, 6.1, and 6.2 classifies a connection using the "bind-dn" criteria, which ca…
-
Unscored —
start_kdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service a…
-
Unscored —
Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to 4.0…
-
Unscored —CVE-2008-1986 Public exploit
Cross-site scripting (XSS) vulnerability in liste_article.php in Blog Pixel Motion (aka PixelMotion) allows remote atta…
-
Unscored —
Unrestricted file upload vulnerability in the file_upload function in core/misc.class.php in EncapsGallery 2.0.2 allows…
-
Unscored —CVE-2008-1989 Public exploit
PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_…
-
Unscored —CVE-2008-1992 Public exploit
Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp or (3…
-
Unscored —CVE-2008-1985 Public exploit
Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2008-1993 Public exploit
Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrar…
-
Unscored —
Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5 through 1.0.5-7 allow …
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in EncapsGallery 2.0.2 allows remote attackers to inject arbitra…
-
Unscored —CVE-2008-1990 Public exploit
Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-1991 Public exploit
Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inj…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module for Drupal allows remote authent…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Drupal modules (1) Internationalization (i18n) 5.x before 5.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module,…
-
Unscored —CVE-2008-1982 Public exploit
SQL injection vulnerability in ss_load.php in the Spreadsheet (wpSS) 0.6 and earlier plugin for WordPress allows remote…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Internationalization (i18n) Drupal module 5.x before 5.x-2.3 and…
-
Unscored —CVE-2008-1979 Public exploit
The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denia…
-
Unscored —
The eTrust Common Services (Transport) Daemon (eCSqdmn) in CA Secure Content Manager 8.0.28000.511 and earlier allows r…
-
Unscored —CVE-2008-1983 Public exploit
Cross-site scripting (XSS) vulnerability in Advanced Electron Forum (AEF) 1.0.6 allows remote attackers to inject arbit…
-
Unscored —CVE-2008-1974 Public exploit
Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and…
-
Unscored —CVE-2008-1975 Public exploit
SQL injection vulnerability in index.php in E-RESERV 2.1 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2008-1971 Public exploit
phShoutBox Final 1.5 and earlier only checks passwords when specified in $_POST, which allows remote attackers to gain …
-
Unscored —
muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentia…
-
Unscored —CVE-2008-1973 Public exploit
Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause a denial of service (…
-
Unscored —
Multiple buffer overflows in the JAR file administration routines in the BSU JAVA subcomponent in IBM DB2 8 before FP16…
-
Unscored —CVE-2008-1967 Public exploit
Cross-site scripting (XSS) vulnerability in CFLogon/CFLogon.asp in Cezanne 6.5.1 and 7 allows remote attackers to injec…
-
Unscored —CVE-2008-1969 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Cezanne 6.5.1 and 7 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2008-1968 Public exploit
Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to execute arbitrary SQL commands …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071…
-
Unscored —
Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Upd…
-
Unscored —
Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1…
-
Unscored —
Stack-based buffer overflow in the demux_nsf_send_headers function in src/demuxers/demux_nsf.c in xine-lib allows remot…