Archive
30 June 2008
Vulnerabilities first published on this day (UTC), newest first.
39 results · Feed
-
Unscored —
Unspecified vulnerability in the 32-bit and 64-bit emulation in the Linux kernel 2.6.9, 2.6.18, and probably other vers…
-
Unscored —
Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location proper…
-
Unscored —
Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location proper…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the viewfile documentation command in Caucho Resin before 3.0.25, and 3.1.x…
-
Unscored —
Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process …
-
Unscored —
arch/x86_64/lib/copy_user.S in the Linux kernel before 2.6.19 on some AMD64 systems does not erase destination memory l…
-
Unscored —CVE-2008-2947 EPSS 25%
Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restrict…
-
Unscored —
The SNMP-DMI mapper subagent daemon (aka snmpXdmid) in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows re…
-
Unscored —
Double free vulnerability in the utrace support in the Linux kernel, probably 2.6.18, in Red Hat Enterprise Linux (RHEL…
-
Unscored —CVE-2008-2365 Public exploit
Race condition in the ptrace and utrace support in the Linux kernel 2.6.9 through 2.6.25, as used in Red Hat Enterprise…
-
Unscored —CVE-2008-2943 Public exploit
Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated adm…
-
Unscored —CVE-2006-5265 EPSS 10%
Unspecified vulnerability in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allows remote attackers to c…
-
Unscored —CVE-2006-5266 EPSS 16%
Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allow remote attackers to ex…
-
Medium —
Mercurial Directory traversal vulnerability
Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) sequences in a patch file.
-
Unscored —CVE-2008-2909 Public exploit
SQL injection vulnerability in results.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
Multiple stack-based buffer overflows in a certain ActiveX control in ienipp.ocx in Novell iPrint Client for Windows be…
-
Unscored —CVE-2008-2920 Public exploit
admin/filemanager/ (aka the File Manager) in EZTechhelp EZCMS 1.2 and earlier does not require authentication, which al…
-
Unscored —
Cross-site scripting (XSS) vulnerability in read/search/results in Lyris ListManager 8.8, 8.95, and 9.3d allows remote …
-
Unscored —CVE-2008-2911 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Contenido 4.8.4 allow remote attackers to inject ar…
-
Unscored —CVE-2008-2917 Public exploit
SQL injection vulnerability in productsofcat.asp in E-SMART CART allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-2922 Public exploit
Stack-based buffer overflow in artegic Dana IRC client 1.3 and earlier allows remote attackers to cause a denial of ser…
-
Unscored —CVE-2008-2910 Public exploit
Buffer overflow in the DXTTextOutEffect ActiveX control (aka the Text-Effect DXT Filter), as distributed in TextOut.dll…
-
Unscored —CVE-2008-2903 Public exploit
SQL injection vulnerability in news.php in Advanced Webhost Billing System (AWBS) 2.3.3 through 2.7.1, when magic_quote…
-
Unscored —CVE-2008-2914 Public exploit
SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote at…
-
Unscored —
SQL injection vulnerability in Webmatic before 2.8 allows remote attackers to execute arbitrary SQL commands via unspec…
-
Unscored —CVE-2008-2918 Public exploit
SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute ar…
-
Unscored —CVE-2008-2912 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Contenido CMS 4.8.4 allow remote attackers to execute arbitrary P…
-
Unscored —
PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and …
-
Unscored —CVE-2008-2906 Public exploit
SQL injection vulnerability in lista_anexos.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2008-2921 Public exploit
SQL injection vulnerability in index.php in EZTechhelp EZCMS 1.2 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-2913 Public exploit
Directory traversal vulnerability in func.php in Devalcms 1.4a, when magic_quotes_gpc is disabled, allows remote attack…
-
Unscored —CVE-2008-2919 Public exploit
SQL injection vulnerability in listing.php in Gryphon gllcTS2 4.2.4 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-2907 Public exploit
SQL injection vulnerability in admin/index.php in WebChamado 1.1, when magic_quotes_gpc is disabled, allows remote atta…
-
Unscored —CVE-2008-2916 Public exploit
Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magic_quotes_gpc is disabled, allow remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Webmatic before 2.8 allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2008-2915 Public exploit
Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php (aka the search module) in Pre Job Board allow remot…
-
Unscored —CVE-2008-2902 Public exploit
SQL injection vulnerability in profile.php in AlstraSoft AskMe Pro 2.1 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2008-2901 Public exploit
Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.4 allow remote authenticated use…
-
Unscored —CVE-2008-2904 Public exploit
SQL injection vulnerability in shop.php in Conkurent PHPMyCart allows remote attackers to execute arbitrary SQL command…