Archive
July 2008
Vulnerabilities first published in this month (UTC), newest first.
520 results · Feed
-
Unscored —CVE-2008-3178 Public exploit
Unrestricted file upload vulnerability in upload_pictures.php in WebXell Editor 0.1.3 allows remote attackers to execut…
-
Unscored —CVE-2008-3182 Public exploit
Stack-based buffer overflow in DAP.exe in Download Accelerator Plus (DAP) 7.0.1.3, 8.6.6.3, and other 8.x versions allo…
-
Unscored —CVE-2008-3180 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in upload/file/language_menu.php in ContentNow CMS 1.4.1 allow remo…
-
Unscored —CVE-2008-3181 Public exploit
Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execu…
-
Unscored —CVE-2008-3184 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x ve…
-
Unscored —CVE-2008-3165 Public exploit
Directory traversal vulnerability in rss.php in fuzzylime (cms) 3.01a and earlier, when magic_quotes_gpc is disabled, a…
-
Unscored —CVE-2008-3162 Public exploit
Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remo…
-
Unscored —
The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers…
-
Unscored —CVE-2008-3167 Public exploit
Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow rem…
-
Unscored —CVE-2008-3166 Public exploit
PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals …
-
Unscored —
Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which co…
-
Unscored —CVE-2008-3173 EPSS 11%
Microsoft Internet Explorer allows web sites to set cookies for domains that have a public suffix with more than one do…
-
Unscored —CVE-2008-3163 Public exploit
Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbi…
-
Unscored —
Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service…
-
Unscored —
Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, wh…
-
Unscored —
Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to…
-
Unscored —CVE-2008-3164 Public exploit
Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote…
-
Unscored —
Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows …
-
Unscored —
Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers t…
-
Unscored —CVE-2003-1559 EPSS 16%
Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in…
-
Unscored —
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicod…
-
Unscored —
Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attack…
-
Unscored —
JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage…
-
Unscored —
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for …
-
Unscored —
Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N series Filer a…
-
Unscored —CVE-2008-3161 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in jsp/common/system/debug.jsp in IBM Maximo 4.1 and 5.2 allow remo…
-
Unscored —
Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2…
-
Unscored —
Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to exec…
-
Unscored —
The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non…
-
Unscored —CVE-2008-2304 Public exploit
Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows us…
-
Unscored —
WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remo…
-
Unscored —CVE-2008-3154 Public exploit
SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Nortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent sessions, which allows …
-
Unscored —CVE-2008-3151 Public exploit
SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2008-3158 Public exploit
Unspecified vulnerability in NWFS.SYS in Novell Client for Windows 4.91 SP4 has unknown impact and attack vectors, poss…
-
Unscored —CVE-2008-3153 Public exploit
SQL injection vulnerability in Triton CMS Pro allows remote attackers to execute arbitrary SQL commands via the X-Forwa…
-
Unscored —CVE-2008-3152 Public exploit
SQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-3156 Public exploit
The ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote attackers to download an…
-
Unscored —CVE-2008-3155 Public exploit
Stack-based buffer overflow in the ActiveX control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote atta…
-
Unscored —
The SNMP daemon in the F5 FirePass 1200 6.0.2 hotfix 3 allows remote attackers to cause a denial of service (daemon cra…