Archive
June 2008
Vulnerabilities first published in this month (UTC), newest first.
437 results · Feed
-
Unscored —CVE-2008-2830 Public exploit
Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not prope…
-
Unscored —
Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standal…
-
Unscored —
php_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow context-dependent attackers…
-
Unscored —
The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame bu…
-
Unscored —
Stack-based buffer overflow in tmsnc allows remote attackers to cause a denial of service (crash) and possibly execute …
-
Unscored —CVE-2008-2827 Public exploit
The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, whi…
-
Unscored —CVE-2008-2823 Public exploit
SQL injection vulnerability in newsarchive.php in PHPeasyblog (formerly phpeasynews) 1.13 RC2 and earlier allows remote…
-
Unscored —
Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675…
-
Unscored —CVE-2008-2814 Public exploit
Cross-site scripting (XSS) vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows remote attackers to inject…
-
Unscored —CVE-2008-2818 Public exploit
Directory traversal vulnerability in Easy-Clanpage 3.0 b1 allows remote attackers to include and execute arbitrary loca…
-
Unscored —CVE-2008-2822 Public exploit
Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP ser…
-
Unscored —CVE-2008-2816 Public exploit
SQL injection vulnerability in post.php in Oxygen (aka O2PHP Bulletin Board) 2.0 allows remote attackers to execute arb…
-
Unscored —CVE-2008-2821 Public exploit
Directory traversal vulnerability in the FTP client in Glub Tech Secure FTP before 2.5.16 on Windows allows remote FTP …
-
Unscored —CVE-2008-2820 Public exploit
Directory traversal vulnerability in lang/lang-system.php in Open Azimyt CMS 0.22 minimal and 0.21 stable allows remote…
-
Unscored —CVE-2008-2817 Public exploit
SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arb…
-
Unscored —
SQL injection vulnerability in BlognPlus (BURO GUN +) 2.5.4 and earlier MySQL and PostgreSQL editions allows remote att…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the embedded Web Server in Xerox WorkCentre M123, M128, and 133 and WorkCen…
-
Unscored —CVE-2008-2815 Public exploit
SQL injection vulnerability in shopping/index.php in MyMarket 1.72 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-2813 Public exploit
Directory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when magic_quotes_gpc is d…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MainLayout.do in ManageEngine OpUtils 5.0 allows remote attackers to inject…
-
Unscored —
SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2008-2793 Public exploit
SQL injection vulnerability in group_posts.php in ClipShare before 3.0.1 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-2795 Public exploit
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows rem…
-
Unscored —CVE-2008-2796 Public exploit
SQL injection vulnerability in index.php in FreeCMS 0.2 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-2790 Public exploit
SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-2791 Public exploit
SQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power Script 1.0 allows remote…
-
Unscored —CVE-2008-2792 Public exploit
SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local u…
-
Unscored —CVE-2008-2787 Public exploit
Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web…
-
Unscored —
Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_…
-
Unscored —
Directory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows remote attackers to bypa…
-
Unscored —
Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack vectors. NOTE: due to lack of details as of 2008…
-
Unscored —
Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an i…
-
Unscored —CVE-2008-2781 Public exploit
SQL injection vulnerability in index.php in DZOIC Handshakes 3.5 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-2783 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition, and Kronolith allow …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Ortro before 1.3.1 allows remote attackers to inject arbitrary web script o…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-2778 Public exploit
SQL injection vulnerability in inc/class_search.php in the Search System in RevokeBB 1.0 RC11 allows remote attackers t…
-
Unscored —
SQL injection vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to execute arbitrary SQL comman…