Archive
May 2008
Vulnerabilities first published in this month (UTC), newest first.
386 results · Feed
-
Unscored —
The SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs Iconfidant SSH before 2.3.8, a…
-
Unscored —
Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs I…
-
Unscored —
Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x befo…
-
Unscored —
Multiple unspecified vulnerabilities in the SSH server in Cisco IOS 12.4 allow remote attackers to cause a denial of se…
-
Unscored —
preprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissim…
-
Unscored —
Unspecified vulnerability in Cisco Unified Customer Voice Portal (CVP) 4.0.x before 4.0(2)_ES14, 4.1.x before 4.1(1)_ES…
-
Unscored —CVE-2008-2416 Public exploit
SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-2413 Public exploit
Cross-site scripting (XSS) vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-2415 Public exploit
Directory traversal vulnerability in template/purpletech/base_include.php in DigitalHive (aka hive) 2.0 RC2 allows remo…
-
Unscored —CVE-2008-2006 Public exploit
Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to cause a denial of ser…
-
Unscored —CVE-2008-2412 Public exploit
SQL injection vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Unspecified vulnerability in stunnel before 4.23, when running as a service on Windows, allows local users to gain priv…
-
Unscored —CVE-2008-2417 Public exploit
SQL injection vulnerability in showQAnswer.asp in How2ASP.net Webboard 4.1 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-2414 Public exploit
Cross-site scripting (XSS) vulnerability in send_email.php in AN Guestbook (ANG) 0.4 allows remote attackers to inject …
-
Unscored —
Directory traversal vulnerability in the FireFTP add-on before 0.98.20080518 for Firefox allows remote FTP servers to c…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the servlet engine and Web container in the Web Server service in IBM Lotus…
-
Unscored —CVE-2008-2411 Public exploit
SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote…
-
Unscored —
Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allow…
-
Unscored —
Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 throu…
-
Unscored —
Unspecified vulnerability in useradd on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary file…
-
Unscored —
The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 conti…
-
Unscored —CVE-2008-1948 EPSS 12%
The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.…
-
Unscored —
Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS be…
-
Unscored —CVE-2008-1104 EPSS 23%
Stack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote attackers to execute arbi…
-
Unscored —
Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka -…
-
Unscored —
SubSonic allows remote attackers to bypass pagesize limits and cause a denial of service (CPU consumption) via a pagein…
-
Unscored —CVE-2008-2395 Public exploit
SQL injection vulnerability in thread.php in AlkalinePHP 0.80.00 beta and earlier allows remote attackers to execute ar…
-
Unscored —
Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators t…
-
Unscored —CVE-2008-2241 EPSS 12%
Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote atta…
-
Unscored —CVE-2008-2394 Public exploit
Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-2396 Public exploit
PHP remote file inclusion vulnerability in index.php in Wajox Software microSSys CMS 1.5 and earlier, when register_glo…
-
Unscored —CVE-2008-2393 Public exploit
SQL injection vulnerability in play.php in EntertainmentScript 1.4.0 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-2242 EPSS 15%
Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow re…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search-results.dot in dotCMS 1.x allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-2390 Public exploit
Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute methods, which allows…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attacker…
-
Unscored —
Multiple stack-based buffer overflows in the PhotoStockPlus Uploader Tool ActiveX control (PSPUploader.ocx) allow remot…
-
Unscored —CVE-2008-2351 Public exploit
Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-2353 Public exploit
Directory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote attackers to include an…
-
Unscored —CVE-2008-2348 Public exploit
MeltingIce File System 1.0 allows remote attackers to bypass application authentication, create new user accounts, and …