16 May 2008

34 results · Feed

• Unscored —
  CVE-2008-2279 Public exploit

  Freelance Auction Script 1.0 stores user passwords in plaintext in the tbl_users table, which allows attackers to gain …

  May 16, 2008
• Unscored —
  CVE-2008-2280

  Cross-site scripting (XSS) vulnerability in admin/index.php in Script PHP PicEngine 1.0 allows remote attackers to inje…

  May 16, 2008
• Unscored —
  CVE-2008-2277 Public exploit

  SQL injection vulnerability in detail.php in Feedback and Rating Script 1.0 allows remote attackers to execute arbitrar…

  May 16, 2008
• Unscored —
  CVE-2008-2278 Public exploit

  SQL injection vulnerability in browseproject.php in Freelance Auction Script 1.0 allows remote attackers to execute arb…

  May 16, 2008
• Unscored —
  CVE-2008-1741

  The SIP Proxy (SIPD) service in Cisco Unified Presence before 6.0(3) allows remote attackers to cause a denial of servi…

  May 16, 2008
• Unscored —
  CVE-2008-1740

  The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of s…

  May 16, 2008
• Unscored —
  CVE-2008-1744

  The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3…

  May 16, 2008
• Unscored —
  CVE-2008-1746

  The SNMP Trap Agent service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, …

  May 16, 2008
• Unscored —
  CVE-2008-1419

  Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attack…

  libvorbis libvorbisidec Debian
  May 16, 2008
• Unscored —
  CVE-2008-1747

  Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 befor…

  May 16, 2008
• Unscored —
  CVE-2008-1423

  Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and earlier allows remote…

  libvorbis libvorbisidec Debian
  May 16, 2008
• Unscored —
  CVE-2008-1158

  The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of s…

  May 16, 2008
• Unscored —
  CVE-2008-1745

  Cisco Unified Communications Manager (CUCM) 5.x before 5.1(2) and 6.x before 6.1(1) allows remote attackers to cause a …

  May 16, 2008
• Unscored —
  CVE-2008-1743

  Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x bef…

  May 16, 2008
• Unscored —
  CVE-2008-1420

  Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows re…

  libvorbis Debian
  May 16, 2008
• Unscored —
  CVE-2008-1742

  Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x bef…

  May 16, 2008
• Unscored —
  CVE-2008-1748

  Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), …

  May 16, 2008
• Unscored —
  CVE-2008-2136

  Memory leak in the ipip6_rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3…

  May 16, 2008
• Unscored —
  CVE-2008-2264 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in CyrixMED 1.4 allows remote attackers to inject arbitrary web s…

  May 16, 2008
• Unscored —
  CVE-2008-2009

  Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers t…

  libvorbis libvorbisidec Debian
  May 16, 2008
• Unscored —
  CVE-2008-2165

  Cross-site scripting (XSS) vulnerability in AccessCodeStart.asp in Cisco Building Broadband Service Manager (BBSM) Capt…

  May 16, 2008
• Unscored —
  CVE-2008-2266

  uulib/uunconc.c in UUDeview 0.5.20, as used in nzbget before 0.3.0 and possibly other products, allows local users to o…

  uudeview Debian
  May 16, 2008
• Unscored —
  CVE-2008-2274

  Cross-site scripting (XSS) vulnerability in the sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0,…

  May 16, 2008
• Unscored —
  CVE-2008-2267 Public exploit

  Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and …

  May 16, 2008
• Unscored —
  CVE-2008-2272

  Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Aruba Mobility Controller 2.4.8.x-FIPS, 2.5…

  May 16, 2008
• Unscored —
  CVE-2008-2263 Public exploit

  SQL injection vulnerability in linking.page.php in Automated Link Exchange Portal allows remote attackers to execute ar…

  May 16, 2008
• Unscored —
  CVE-2008-2265 Public exploit

  SQL injection vulnerability in news.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands…

  May 16, 2008
• Unscored —
  CVE-2008-2273

  Unspecified vulnerability in the TACACS authentication component in Aruba Mobility Controller 3.1.x, 3.2.x, and 3.3.x a…

  May 16, 2008
• Unscored —
  CVE-2008-2275

  Unspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9…

  May 16, 2008
• Unscored —
  CVE-2008-2270 Public exploit

  Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to…

  May 16, 2008
• Unscored —
  CVE-2008-2271

  The Site Documentation Drupal module 5.x before 5.x-1.8 and 6.x before 6.x-1.1 allows remote authenticated users to gai…

  May 16, 2008
• Unscored —
  CVE-2008-2276 Public exploit

  Cross-site request forgery (CSRF) vulnerability in manage_user_create.php in Mantis 1.1.1 allows remote attackers to cr…

  May 16, 2008
• Unscored —
  CVE-2008-2268

  Open redirect vulnerability in interface/redirect.htm.php in Mjguest 6.7 GT Rev.01 allows user-assisted remote attacker…

  May 16, 2008
• Unscored —
  CVE-2008-2269 Public exploit

  AustinSmoke GasTracker (AS-GasTracker) 1.0.0 allows remote attackers to bypass authentication and gain privileges by se…

  May 16, 2008