Skip to content
OpenAdvisories

Archive

8 August 2008

Vulnerabilities first published on this day (UTC), newest first.

21 results · Feed

  • Unscored —

    Unspecified vulnerability in libc on HP HP-UX B.11.23 and B.11.31 allows remote attackers to cause a denial of service …

  • Unscored —

    QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on …

  • Unscored —
    CVE-2008-3556 Public exploit

    Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute a…

  • Unscored —

    The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive informati…

  • Unscored —

    The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attacker…

  • Unscored —

    Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local us…

  • Unscored —
    CVE-2008-3557 Public exploit

    Free Hosting Manager 1.2 and 2.0 allows remote attackers to bypass authentication and gain administrative access by set…

  • Unscored —
    CVE-2008-3559 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web sc…

  • Unscored —

    PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers …

  • Unscored —
    CVE-2008-3558 Public exploit EPSS 65%

    Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before…

  • Unscored —

    Multiple unspecified vulnerabilities in Sun Java Platform Micro Edition (aka Java ME, J2ME, or mobile Java), as distrib…

  • Unscored —

    Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition devices allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-3560 Public exploit

    Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops allows remote attackers…

  • Unscored —

    Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition FP1, and possibly later devices, allow remote attac…

  • Unscored —
    CVE-2008-3555 Public exploit

    Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3)…

  • Unscored —

    The shmem_delete_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows lo…

  • Unscored —
    CVE-2008-3554 Public exploit

    SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —

    Use-after-free vulnerability in the _gnutls_handshake_hash_buffers_clear function in lib/gnutls_handshake.c in libgnutl…

  • Unscored —

    Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o …

  • Unscored —
    CVE-2008-0964 Public exploit EPSS 14%

    Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o o…

  • Unscored —

    The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kern…