Skip to content
OpenAdvisories

Archive

12 August 2008

Vulnerabilities first published on this day (UTC), newest first.

26 results · Feed

  • Unscored —
    CVE-2008-3018 EPSS 30%

    Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of…

  • Unscored —
    CVE-2008-3020 EPSS 30%

    Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file…

  • Unscored —
    CVE-2008-3006 EPSS 36%

    Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and S…

  • Unscored —
    CVE-2008-3019 EPSS 30%

    Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of…

  • Unscored —
    CVE-2008-3005 EPSS 32%

    Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remo…

  • Unscored —
    CVE-2008-3021 EPSS 36%

    Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of…

  • Unscored —

    The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before …

  • Unscored —
    CVE-2008-3648 EPSS 22%

    nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrat…

  • Unscored —

    Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a…

  • Unscored —
    CVE-2008-3460 EPSS 32%

    WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly p…

  • Unscored —
    CVE-2008-3004 EPSS 32%

    Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for…

  • Unscored —

    Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA…

  • Unscored —

    The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and …

  • Unscored —
    CVE-2008-3599 Public exploit

    SQL injection vulnerability in image.php in OpenImpro 1.1 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —

    Unspecified vulnerability in McAfee Encrypted USB Manager 3.1.0.0, when the Re-use Threshold for passwords is nonzero, …

  • Unscored —
    CVE-2008-3598 Public exploit

    Multiple SQL injection vulnerabilities in psipuss 1.0 allow remote attackers to execute arbitrary SQL commands via (1) …

  • Unscored —
    CVE-2008-3602 Public exploit

    admin/wr_admin.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9.1 allows remote attackers to bypass authentic…

  • Unscored —
    CVE-2008-3601 Public exploit

    SQL injection vulnerability in index.php in Quicksilver Forums 1.4.1 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-3604 Public exploit

    SQL injection vulnerability in bannerclick.php in ZeeBuddy 2.1 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-3607 Public exploit

    The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service (d…

  • Unscored —
    CVE-2008-3603 Public exploit

    SQL injection vulnerability in index.php in Vacation Rental Script 3.0 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-3606 Public exploit

    Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users…

  • Unscored —

    Directory traversal vulnerability in contrib/phpBB2/modules.php in Gallery 1.5.7 and 1.6-alpha3, when register_globals …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Harmoni before 1.4.7 allows remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2008-3595 Public exploit

    PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers…

  • Unscored —

    Skulltag before 0.97d2-RC6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon cr…