18 July 2008

30 results · Feed

• Unscored —
  CVE-2008-3225

  Joomla! before 1.5.4 allows attackers to access administration functionality, which has unknown impact and attack vecto…

  Jul 18, 2008
• Unscored —
  CVE-2008-3214

  dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or…

  dnsmasq Debian
  Jul 18, 2008
• Unscored —
  CVE-2008-3233 Public exploit

  Cross-site scripting (XSS) vulnerability in WordPress before 2.6, SVN development versions only, allows remote attacker…

  Jul 18, 2008
• Unscored —
  CVE-2008-3230

  The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted G…

  ffmpeg Debian
  Jul 18, 2008
• Unscored —
  CVE-2008-3223

  SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL…

  Jul 18, 2008
• Unscored —
  CVE-2008-3232

  Unrestricted file upload vulnerability in ecrire/images.php in Dotclear 1.2.7.1 and earlier allows remote authenticated…

  Jul 18, 2008
• Unscored —
  CVE-2008-3219

  The Drupal filter_xss_admin function in 5.x before 5.8 and 6.x before 6.3 does not "prevent use of the object HTML tag …

  Jul 18, 2008
• Unscored —
  CVE-2008-3222

  Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules "terminate the cur…

  Jul 18, 2008
• Unscored —
  CVE-2008-3220

  Cross-site request forgery (CSRF) vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3 allows remote attackers to …

  Jul 18, 2008
• Unscored —
  CVE-2008-3231

  xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstr…

  Jul 18, 2008
• Unscored —
  CVE-2008-3224

  Unspecified vulnerability in phpBB before 3.0.1 has unknown impact and attack vectors related to "urls gone through red…

  Jul 18, 2008
• Unscored —
  CVE-2008-3234 Public exploit

  sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain a…

  openssh Debian
  Jul 18, 2008
• Unscored —
  CVE-2008-3217

  PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, whi…

  pdns-recursor Debian
  Jul 18, 2008
• Unscored —
  CVE-2008-3221

  Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrat…

  Jul 18, 2008
• Medium —
  CVE-2008-3218

  Drupal vulnerable to Cross-site Scripting

  Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) un…

  drupal/drupal Packagist
  Jul 18, 2008
• Unscored —
  CVE-2008-3216

  The save function in br/prefmanager.d in projectl 1.001 creates a projectL.prf file in the current working directory, w…

  projectl Debian
  Jul 18, 2008
• Medium —
  CVE-2008-3228

  Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs

  Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.

  joomla/joomla-platform Packagist
  Jul 18, 2008
• High —
  CVE-2008-3227

  Joomla! Open Redirect vulnerability

  Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability.

  joomla/framework Packagist
  Jul 18, 2008
• Unscored —
  CVE-2008-3229

  Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privi…

  Jul 18, 2008
• Medium —
  CVE-2008-3226

  Joomla! allows attackers to access cached pages

  The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors.

  joomla/joomla-platform Packagist
  Jul 18, 2008
• Unscored —
  CVE-2008-3215

  libclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service via a malformed Petite …

  clamav Debian
  Jul 18, 2008
• Unscored —
  CVE-2008-2934

  Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service (application crash) or …

  Jul 18, 2008
• Unscored —
  CVE-2008-3207 Public exploit

  PHP remote file inclusion vulnerability in cms/modules/form.lib.php in Pragyan CMS 2.6.2, when register_globals is enab…

  Jul 18, 2008
• Unscored —
  CVE-2008-3209 Public exploit

  Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remo…

  Jul 18, 2008
• Unscored —
  CVE-2008-3210 Public exploit

  rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service (dae…

  Jul 18, 2008
• Unscored —
  CVE-2008-3213 Public exploit

  SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute …

  Jul 18, 2008
• Unscored —
  CVE-2008-3212 Public exploit

  Multiple SQL injection vulnerabilities in Scripteen Free Image Hosting Script 1.2.1 allow remote attackers to execute a…

  Jul 18, 2008
• Unscored —
  CVE-2008-3208 Public exploit

  Simple DNS Plus 4.1, 5.0, and possibly other versions before 5.1.101 allows remote attackers to cause a denial of servi…

  Jul 18, 2008
• Unscored —
  CVE-2008-3211 Public exploit

  Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrat…

  Jul 18, 2008
• Unscored —
  CVE-2008-3206 Public exploit

  SQL injection vulnerability in browse.groups.php in Yuhhu Pubs Black Cat allows remote attackers to execute arbitrary S…

  Jul 18, 2008