Archive
13 August 2008
Vulnerabilities first published on this day (UTC), newest first.
39 results · Feed
-
Unscored —
Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIB…
-
Unscored —CVE-2008-3673 Public exploit
SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-3674 Public exploit
SQL injection vulnerability in ugroups.php in PozScripts TubeGuru Video Sharing Script allows remote attackers to execu…
-
Unscored —CVE-2008-3670 Public exploit
SQL injection vulnerability in authordetail.php in Article Friendly Pro allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-3669 Public exploit
SQL injection vulnerability in comments.php in ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script (a…
-
Unscored —CVE-2008-3672 Public exploit
SQL injection vulnerability in showcategory.php in PozScripts Classified Ads allows remote attackers to execute arbitra…
-
Unscored —
Acronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an FTP server, which allows…
-
Unscored —
ftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-syste…
-
Unscored —CVE-2008-3667 Public exploit
Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a …
-
Unscored —CVE-2008-3668 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote …
-
Unscored —
Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv_96 allows (1) context-dependent attackers to cau…
-
Unscored —CVE-2008-1456 EPSS 28%
Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, V…
-
Unscored —CVE-2008-1457 EPSS 36%
The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server…
-
Unscored —
VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionalit…
-
Unscored —CVE-2008-2258 EPSS 35%
Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, which allows remote att…
-
Unscored —CVE-2008-2256 EPSS 29%
Microsoft Internet Explorer 5.01, 6, and 7 does not properly handle objects that have been incorrectly initialized or d…
-
Unscored —CVE-2008-2259 EPSS 30%
Microsoft Internet Explorer 6 and 7 does not perform proper "argument validation" during print preview, which allows re…
-
Unscored —CVE-2008-2254 EPSS 29%
Microsoft Internet Explorer 6 and 7 accesses uninitialized memory, which allows remote attackers to cause a denial of s…
-
Unscored —CVE-2008-2257 EPSS 35%
Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, which allows remote att…
-
Unscored —CVE-2008-2255 EPSS 29%
Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory, which allows remote attackers to cause a deni…
-
Unscored —
src/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle when it has been initi…
-
Unscored —
Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFil…
-
Unscored —
Unspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows attackers to obtain "path and PHP configuration" …
-
Unscored —
Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware before 2.0 have unknown impact and attack vectors.
-
Unscored —
Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to …
-
Unscored —
The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does…
-
Unscored —
Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and at…
-
Unscored —
Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly res…
-
Unscored —CVE-2008-0121 EPSS 31%
A "memory calculation error" in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via …
-
Unscored —CVE-2008-0120 EPSS 32%
Integer overflow in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary code via a PowerPoint…
-
Unscored —CVE-2008-0082 EPSS 34%
An ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 is marked as safe-for-scripting, which a…
-
Unscored —CVE-2008-1448 EPSS 27%
The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, doe…
-
Unscored —CVE-2008-1455 EPSS 26%
A "memory calculation error" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and 2007 through SP1; Office …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow re…
-
Unscored —CVE-2008-3649 Public exploit
SQL injection vulnerability in categorydetail.php in Article Friendly Standard allows remote attackers to execute arbit…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in files generated by Adobe Presenter 6 and 7 before 7.0.1 allow re…
-
Unscored —
Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Manag…
-
Medium —
Apache Tomcat Directory Traversal vulnerability
Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the …
-
Unscored —CVE-2008-2246 EPSS 32%
Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Serv…