Archive
July 2008
Vulnerabilities first published in this month (UTC), newest first.
520 results · Feed
-
Unscored —CVE-2008-2968 Public exploit
SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows re…
-
Unscored —CVE-2008-2969 Public exploit
Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, a…
-
Unscored —CVE-2008-2971 Public exploit
SQL injection vulnerability in links-extern.php in CiBlog 3.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-2981 Public exploit
PHP remote file inclusion vulnerability in admin/templates/template_thumbnail.php in HomePH Design 2.10 RC2, when regis…
-
Unscored —CVE-2008-2980 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in HomePH Design 2.10 RC2 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2008-2963 Public exploit
Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) v…
-
Unscored —CVE-2008-2964 Public exploit
SQL injection vulnerability in guide.php in ResearchGuide 0.5 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-2967 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier,…
-
Unscored —CVE-2008-2982 Public exploit
Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when register_globals is enabled, allow remote …
-
Unscored —CVE-2008-2990 Public exploit
PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 f…
-
Unscored —CVE-2008-2973 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in chathead.php in MM Chat 1.5 allow remote attackers to inject arb…
-
Unscored —CVE-2008-2985 Public exploit
Directory traversal vulnerability in load_language.php in CMReams CMS 1.3.1.1 Beta 2, when register_globals is enabled,…
-
Unscored —CVE-2008-2986 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpDMCA 1.0.0 allow remote attackers to execute arbitrary PHP cod…
-
Unscored —
Buffer overflow in a certain ActiveX control (vb6skit.dll) in Microsoft Visual Basic Enterprise Edition 6.0 SP6 might a…
-
Unscored —CVE-2008-2966 Public exploit
Directory traversal vulnerability in viewprofile.php in JaxUltraBB 2.0 and earlier allows remote attackers to read arbi…
-
Unscored —CVE-2008-2974 Public exploit
Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when register_globals is enabled, allows remote att…
-
Unscored —CVE-2008-2984 Public exploit
Cross-site scripting (XSS) vulnerability in backend/umleitung.php in CMReams CMS 1.3.1.1 Beta 2 allows remote attackers…
-
Unscored —CVE-2008-2962 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in MyBlog allow remote attackers to inject arbitrary web script or …
-
Unscored —CVE-2008-2977 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Ourvideo CMS 9.5 allow remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2008-2965 Public exploit
Cross-site scripting (XSS) vulnerability in viewforum.php in JaxUltraBB (JUBB) 2.0 and earlier allows remote attackers …
-
Unscored —CVE-2008-2978 Public exploit
Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when register_globals is enabled, allows remote …
-
Unscored —CVE-2008-2989 Public exploit
SQL injection vulnerability in index.php in HoMaP-CMS 0.1 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote attackers to upload and execu…
-
Unscored —CVE-2008-2975 Public exploit
Cross-site scripting (XSS) vulnerability in admin/objects/obj_image.php in TinX/cms 1.1 allows remote attackers to inje…
-
Unscored —CVE-2008-2987 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Benja CMS 0.1 allow remote attackers to inject arbitrary web scr…
-
Unscored —
Integer overflow in the sctp_getsockopt_local_addrs_old function in net/sctp/socket.c in the Stream Control Transmissio…
-
Unscored —
The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption)…
-
Unscored —CVE-2008-2955 Public exploit
Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain cha…
-
Unscored —
Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via "partial file list…
-
Unscored —
The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of…
-
Unscored —
Race condition in (1) checkinstall 1.6.1 and (2) installwatch allows local users to overwrite arbitrary files and have …
-
Unscored —
client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) …
-
Unscored —
liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attackers to cause a denial of service (program termination) via…
-
Unscored —
Apple Mac OS X before 10.5 uses weak permissions for the User Template directory, which allows local users to gain priv…
-
Unscored —
Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.4 allows user-assisted remote attackers t…
-
Unscored —
Launch Services in Apple Mac OS X before 10.5, when Open Safe Files is enabled, allows remote attackers to execute arbi…
-
Unscored —
Dock in Apple Mac OS X 10.5 before 10.5.4, when Exposé hot corners is enabled, allows physically proximate attackers to…
-
Unscored —
Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute a…
-
Unscored —
Unspecified vulnerability in Alias Manager in Apple Mac OS X 10.5.1 and earlier on Intel platforms allows local users t…
-
Unscored —
Memory leak in Pidgin 2.0.0, and possibly other versions, allows remote attackers to cause a denial of service (memory …