Archive
May 2008
Vulnerabilities first published in this month (UTC), newest first.
386 results · Feed
-
Unscored —CVE-2008-2116 Public exploit
Multiple directory traversal vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to …
-
Unscored —CVE-2008-2115 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attack…
-
Unscored —
Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a de…
-
Unscored —
Unspecified vulnerability in HP LDAP-UX vB.04.10 through vB.04.15 allows local users to gain privileges via unknown vec…
-
Unscored —
Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local …
-
Unscored —
Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gai…
-
Unscored —
The Javascript API in Adobe Acrobat Professional 7.0.9 and possibly 8.1.1 exposes a dangerous method, which allows remo…
-
Unscored —
The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a…
-
Unscored —
Linux kernel before 2.4.21 allows local users to cause a denial of service (kernel panic) via asynchronous input or out…
-
Unscored —
The Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host with a 32-bit paravirtua…
-
Unscored —CVE-2008-2111 Public exploit
The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2008-2110 Public exploit
Unrestricted file upload vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to execute arbitrary …
-
Unscored —
The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 32-bit systems, performs a multip…
-
Unscored —
The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5, when running on 64-bit systems, performs a multip…
-
Unscored —
field.c in the libid3tag 0.15.0b library allows context-dependent attackers to cause a denial of service (CPU consumpti…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Bugzilla 2.17.2 and later allows remote attackers to inject arbitrary web s…
-
Unscored —
The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIG…
-
Unscored —CVE-2008-2106 Public exploit
Call of Duty 4 (CoD4) 1.5 and earlier allows remote authenticated users to cause a denial of service (crash) via a type…
-
Unscored —
email_in.pl in Bugzilla 2.23.4, 3.0.x before 3.0.4, and 3.1.x before 3.1.4 allows remote authenticated users to more ea…
-
Unscored —CVE-2008-2096 Public exploit
SQL injection vulnerability in BackLinkSpider allows remote attackers to execute arbitrary SQL commands via the cat_id …
-
Unscored —CVE-2008-2094 Public exploit
SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-2095 Public exploit
SQL injection vulnerability in index.php in the FlippingBook (com_flippingbook) 1.0.4 component for Joomla! allows remo…
-
Unscored —CVE-2008-2092 Public exploit
Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service (crash) via a long ping packe…
-
Unscored —CVE-2008-2091 Public exploit
Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute…
-
Unscored —CVE-2008-2093 Public exploit
SQL injection vulnerability in the Profiler (com_comprofiler) component in Community Builder for Mambo and Joomla! allo…
-
Unscored —
The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, …
-
Unscored —
Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a deni…
-
Unscored —CVE-2008-2088 Public exploit
SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL …
-
Unscored —
Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a deni…
-
Unscored —
Stack-based buffer overflow in the Read32s_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center C…
-
Unscored —CVE-2008-2087 Public exploit
SQL injection vulnerability in search_result.php in Softbiz Web Host Directory Script, when magic_quotes_gpc is disable…
-
Unscored —CVE-2008-0599 EPSS 11%
The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedenc…
-
Unscored —CVE-2008-2081 Public exploit
Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include …
-
Unscored —
The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to …
-
Unscored —
Stack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown impact and attack vectors.
-
Unscored —CVE-2008-2083 Public exploit
SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magic_quotes_gpc is disabled, allows remot…
-
Unscored —CVE-2008-2082 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2008-2084 Public exploit
SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to exe…
-
Unscored —
MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypas…
-
Unscored —CVE-2008-2076 Public exploit
Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to inc…