16 June 2008

31 results · Feed

• Unscored —
  CVE-2008-2723

  embed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via unknown vectors related t…

  Jun 16, 2008
• Unscored —
  CVE-2008-2724

  Menalto Gallery before 2.2.5 does not enforce permissions for non-album items that have been protected by a password, w…

  Jun 16, 2008
• Unscored —
  CVE-2008-2720

  Cross-site scripting (XSS) vulnerability in Menalto Gallery before 2.2.5 allows remote attackers to inject arbitrary we…

  Jun 16, 2008
• Unscored —
  CVE-2008-2721

  Unspecified vulnerability in the album-select module in Menalto Gallery before 2.2.5 allows remote attackers to obtain …

  Jun 16, 2008
• Unscored —
  CVE-2008-2722

  Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive.

  Jun 16, 2008
• Unscored —
  CVE-2008-2719 Public exploit EPSS 10%

  Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers…

  nasm Debian
  Jun 16, 2008
• Unscored —
  CVE-2008-2715

  Unspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images via HTML CANVAS eleme…

  Jun 16, 2008
• Unscored —
  CVE-2008-2718

  Cross-site scripting (XSS) vulnerability in fe_adminlib.inc in TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x …

  Jun 16, 2008
• Unscored —
  CVE-2008-2716

  Unspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of trusted frames on the sa…

  Jun 16, 2008
• Medium —
  CVE-2008-2717

  TYPO3 Unrestricted File Upload vulnerability

  TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or con…

  typo3/cms-core Packagist
  Jun 16, 2008
• Unscored —
  CVE-2008-2714

  Opera before 9.26 allows remote attackers to misrepresent web page addresses using "certain characters" that "cause the…

  Jun 16, 2008
• Unscored —
  CVE-2008-2713

  libclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service via a crafted Petite fi…

  clamav Debian
  Jun 16, 2008
• Unscored —
  CVE-2008-2711

  fetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to cause a denial of ser…

  fetchmail Debian
  Jun 16, 2008
• Unscored —
  CVE-2008-2712 Public exploit EPSS 15%

  Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim script…

  vim Debian
  Jun 16, 2008
• Unscored —
  CVE-2008-2708

  Unspecified vulnerability in the Sun (1) UltraSPARC T2 and (2) UltraSPARC T2+ kernel modules in Sun Solaris 10, and Ope…

  Jun 16, 2008
• Unscored —
  CVE-2008-2710

  Integer signedness error in the ip_set_srcfilter function in the IP Multicast Filter in uts/common/inet/ip/ip_multi.c i…

  Jun 16, 2008
• Unscored —
  CVE-2008-2709

  Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows lo…

  Jun 16, 2008
• Unscored —
  CVE-2008-1807

  FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" fiel…

  freetype Debian
  Jun 16, 2008
• Unscored —
  CVE-2008-1806

  Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted s…

  freetype Debian
  Jun 16, 2008
• Unscored —
  CVE-2008-1379

  Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows con…

  xorg-server Debian
  Jun 16, 2008
• Unscored —
  CVE-2008-1377

  The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProc…

  xorg-server Debian
  Jun 16, 2008
• Unscored —
  CVE-2008-1808

  Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1…

  freetype Debian
  Jun 16, 2008
• Unscored —
  CVE-2008-2362

  Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attacke…

  xorg-server Debian
  Jun 16, 2008
• Unscored —
  CVE-2008-2360

  Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows cont…

  xorg-server Debian
  Jun 16, 2008
• Unscored —
  CVE-2008-2361

  Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 al…

  xorg-server Debian
  Jun 16, 2008
• Unscored —
  CVE-2008-0071 Public exploit

  The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remot…

  Jun 16, 2008
• Unscored —
  CVE-2008-2706

  Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of se…

  Jun 16, 2008
• Unscored —
  CVE-2008-2366

  Untrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1.1.x on Red Hat Enterpr…

  Jun 16, 2008
• Unscored —
  CVE-2008-2707

  Unspecified vulnerability in the e1000g driver in Sun Solaris 10 and OpenSolaris before snv_93 allows remote attackers …

  Jun 16, 2008
• Unscored —
  CVE-2008-2705

  Unspecified vulnerability in Sun Java System Access Manager (AM) 7.1, when used with certain versions and configuration…

  Jun 16, 2008
• Unscored —
  CVE-2008-2639 Public exploit EPSS 78%

  Stack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and CitectFacilities 7, allows re…

  Jun 16, 2008