Archive
July 2008
Vulnerabilities first published in this month (UTC), newest first.
520 results · Feed
-
Unscored —
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_…
-
Unscored —
Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4…
-
Unscored —CVE-2008-2244 EPSS 32%
Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malforme…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Tinytax module (aka Tinytax taxonomy block) 5.x before 5.x-1.10-1 for D…
-
Unscored —
The Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's authentication level to match t…
-
Unscored —
Multiple SQL injection vulnerabilities in index.php in BlognPlus (BURO GUN +) 2.5.5 MySQL and PostgreSQL editions allow…
-
Unscored —
The Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote attack…
-
Unscored —CVE-2008-3088 Public exploit
Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attacke…
-
Unscored —CVE-2008-3087 Public exploit
Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. (dot d…
-
Unscored —
SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote …
-
Unscored —CVE-2008-3089 Public exploit
SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote attackers to execute …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC…
-
Unscored —CVE-2008-3093 Public exploit
Unrestricted file upload vulnerability in ImperialBB 2.3.5 and earlier allows remote authenticated users to upload and …
-
Medium 6.1CVE-2008-2991 EPSS 17%
Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary w…
-
Unscored —
The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the…
-
Unscored —
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) 2.1.10 and 2.1.11 on Linux and Windows …
-
Unscored —
Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote a…
-
Unscored —CVE-2008-3080 Public exploit
Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to pe…
-
Unscored —CVE-2008-3083 Public exploit
SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers t…
-
Unscored —
Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vector…
-
Unscored —
Multiple unspecified "input validation" vulnerabilities in the Web management interface (aka Messaging Administration i…
-
Unscored —
Cross-site scripting (XSS) vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and…
-
Unscored —
arch/x86/kernel/ptrace.c in the Linux kernel before 2.6.25.10 on the x86_64 platform leaks task_struct references into …
-
Unscored —
The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial …
-
Unscored —
Memory leak in a certain Red Hat deployment of vsftpd before 2.0.5 on Red Hat Enterprise Linux (RHEL) 3 and 4, when PAM…
-
Unscored —
Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attacker…
-
Unscored —CVE-2007-1899 Public exploit
Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL com…
-
Critical 9.8
SQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to exec…
-
Medium 5.3
myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to c…
-
Medium 5.3
class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a …
-
Unscored —CVE-2007-3653 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to…
-
Unscored —CVE-2008-0086 EPSS 62%
Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000…
-
Unscored —CVE-2008-0106 EPSS 35%
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authentic…
-
Unscored —CVE-2008-0107 EPSS 35%
Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express …
-
Unscored —CVE-2008-0085 EPSS 11%
SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, …
-
Unscored —
The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Wind…
-
Unscored —CVE-2008-1454 EPSS 34%
Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote …
-
Unscored —CVE-2008-1435 EPSS 29%
Windows Explorer in Microsoft Windows Vista up to SP1, and Server 2008, allows user-assisted remote attackers to execut…
-
Unscored —
Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netsca…