Skip to content
OpenAdvisories

Archive

24 July 2008

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —
    CVE-2008-3292 Public exploit

    constants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain administrator privileges by s…

  • Unscored —
    CVE-2008-3293 Public exploit

    Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the…

  • Unscored —

    src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-c…

  • Unscored —
    CVE-2008-3291 Public exploit

    SQL injection vulnerability in index.php in AproxEngine (aka Aprox CMS Engine) 5.1.0.4 allows remote attackers to execu…

  • Unscored —

    EMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified point, which allows r…

  • Unscored —

    retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service (dae…

  • Unscored —
    CVE-2008-3286 Public exploit

    SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) VERIFYCONTENT or (…

  • Unscored —
    CVE-2008-3285 Public exploit

    The Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute arbitrary code via a …

  • Unscored —

    The Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a "weak hash algorithm," which make…

  • Unscored —

    retroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a denial of service (dae…

  • Unscored —
    CVE-2008-3267 Public exploit

    SQL injection vulnerability in mojoJobs.cgi in MojoJobs allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-3266 Public exploit

    SQL injection vulnerability in picture_pic_bv.asp in SoftAcid Hotel Reservation System (HRS) Multi allows remote attack…

  • Unscored —

    The LDT implementation in the Linux kernel 2.6.25.x before 2.6.25.11 on x86_64 platforms uses an incorrect size for ldt…

  • Unscored —
    CVE-2008-3269 Public exploit EPSS 11%

    WRPCServer.exe in WinSoftMagic WinRemotePC (WRPC) Lite 2008 and Full 2008 allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2008-3265 Public exploit

    SQL injection vulnerability in the DT Register (com_dtregister) 2.2.3 component for Joomla! allows remote attackers to …

  • Unscored —

    Unspecified vulnerability in phpScheduleIt 1.2.0 through 1.2.9, when useLogonName is enabled, allows remote attackers w…

  • Unscored —

    The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.2…