Skip to content
OpenAdvisories

Archive

14 July 2008

Vulnerabilities first published on this day (UTC), newest first.

26 results · Feed

  • Unscored —
    CVE-2008-3165 Public exploit

    Directory traversal vulnerability in rss.php in fuzzylime (cms) 3.01a and earlier, when magic_quotes_gpc is disabled, a…

  • Unscored —
    CVE-2008-3162 Public exploit

    Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remo…

  • Unscored —

    The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers…

  • Unscored —
    CVE-2008-3167 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow rem…

  • Unscored —
    CVE-2008-3166 Public exploit

    PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals …

  • Unscored —

    Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which co…

  • Unscored —
    CVE-2008-3173 EPSS 11%

    Microsoft Internet Explorer allows web sites to set cookies for domains that have a public suffix with more than one do…

  • Unscored —
    CVE-2008-3163 Public exploit

    Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbi…

  • Unscored —

    Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service…

  • Unscored —

    Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, wh…

  • Unscored —

    Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to…

  • Unscored —
    CVE-2008-3164 Public exploit

    Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote…

  • Unscored —

    Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows …

  • Unscored —

    Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers t…

  • Unscored —
    CVE-2003-1559 EPSS 16%

    Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in…

  • Unscored —

    Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicod…

  • Unscored —

    Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attack…

  • Unscored —

    JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage…

  • Unscored —

    Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for …

  • Unscored —

    Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N series Filer a…

  • Unscored —
    CVE-2008-3161 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in jsp/common/system/debug.jsp in IBM Maximo 4.1 and 5.2 allow remo…

  • Unscored —

    Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2…

  • Unscored —
    CVE-2008-2303 Public exploit EPSS 13%

    Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to exec…

  • Unscored —

    The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non…

  • Unscored —
    CVE-2008-2304 Public exploit

    Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows us…

  • Unscored —

    WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remo…