Archive
May 2008
Vulnerabilities first published in this month (UTC), newest first.
386 results · Feed
-
Unscored —
Unspecified vulnerability in the web server in eMule X-Ray before 1.4 allows remote attackers to trigger memory corrupt…
-
Unscored —CVE-2008-2505 Public exploit
Cross-site scripting (XSS) vulnerability in result.php in Simpel Side Weblosning 1 through 4 allows remote attackers to…
-
Unscored —CVE-2008-2504 Public exploit
Multiple SQL injection vulnerabilities in Simpel Side Netbutik 1 through 4 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2008-2501 Public exploit
Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-2508 Public exploit
Cross-site scripting (XSS) vulnerability in news.php in Tr Script News 2.1 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2008-2507 Public exploit
Cross-site scripting (XSS) vulnerability in Calcium40.pl in Brown Bear Software Calcium 3.10 and 4.0.4 allows remote at…
-
Unscored —CVE-2008-2506 Public exploit
Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote attackers to execute arbitrar…
-
Unscored —
Buffer overflow in Uploadlist in eMule X-Ray before 1.4 has unknown impact and remote attack vectors.
-
Unscored —CVE-2008-2510 Public exploit
SQL injection vulnerability in wp-uploadfile.php in the Upload File plugin for WordPress allows remote attackers to exe…
-
Unscored —CVE-2008-2509 Public exploit
SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —
Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng.ocx allows remote att…
-
Unscored —
Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2 ActiveX control in NCTA…
-
Unscored —
Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioInformation2 ActiveX control in …
-
Unscored —
Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote …
-
Unscored —
OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits t…
-
Unscored —
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote a…
-
Unscored —
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP…
-
Unscored —
robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to execute arbitrary command…
-
Unscored —
The (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check function in arch/spar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the MOStlyContent Editor (MOStlyCE) component before 3.0 for Mambo allows r…
-
Unscored —
Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote attackers to execute ar…
-
Unscored —
Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF…
-
Unscored —CVE-2008-2491 Public exploit
SQL injection vulnerability in adv_cat.php in AbleSpace 1.0 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-2479 Public exploit
Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary SQL commands via the (…
-
Unscored —CVE-2008-2496 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Quate CMS 0.3.4 allow remote attackers to inject arbitrary web s…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the KJ Image Lightbox 2 (aka kj_imagelightbox2) extension 1.4.2 and earlier…
-
Unscored —CVE-2008-2492 Public exploit
Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-2487 Public exploit
SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-2480 Public exploit
PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote attackers …
-
Unscored —
Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magic_quotes_gpc is disabled, allow rem…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the URL redirection script (inc/url_redirection.inc.php) in PCPIN Chat befo…
-
Unscored —
CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct…
-
Unscored —CVE-2008-2478 Public exploit
scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and earlier allows remote authenticated users …
-
Unscored —CVE-2008-2483 Public exploit
Directory traversal vulnerability in index.php in Xomol CMS 1.20071213 allows remote attackers to include and execute a…
-
Unscored —
Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an unknown impact via a …
-
Unscored —
SQL injection vulnerability in the Library for Frontend Plugins (aka sg_zfelib) extension 1.1.512 and earlier for TYPO3…
-
Unscored —CVE-2008-2493 Public exploit
Cross-site scripting (XSS) vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows remote attackers to inje…
-
Unscored —CVE-2008-2482 Public exploit
Directory traversal vulnerability in install_mod.php in insanevisions OneCMS 2.5 allows remote attackers to include and…
-
Unscored —CVE-2008-2481 Public exploit
PHP remote file inclusion vulnerability in authentication/phpbb3/phpbb3.functions.php in phpRaider 1.0.7 and 1.0.7a, wh…
-
Unscored —CVE-2008-2477 Public exploit
SQL injection vulnerability in index.php in MxBB (aka MX-System) Portal 2.7.3 allows remote attackers to execute arbitr…