Archive

27 August 2008

Vulnerabilities first published on this day (UTC), newest first.

← July 2008 2008 / August /27 September 2008 →

All Critical High Medium Low Exploited only Public exploit

35 results · Feed

Unscored —

CVE-2008-3850 Public exploit

Cross-site scripting (XSS) vulnerability in Accellion File Transfer FTA_7_0_135 allows remote attackers to inject arbit…

Aug 27, 2008
Unscored —

CVE-2008-3848 Public exploit

SQL injection vulnerability in single.php in Z-Breaknews 2.0 allows remote attackers to execute arbitrary SQL commands …

Aug 27, 2008
Unscored —

CVE-2008-3846

Cross-site scripting (XSS) vulnerability in mysql-lists 1.2 and earlier allows remote attackers to inject arbitrary web…

Aug 27, 2008
Unscored —

CVE-2008-3847

Multiple cross-site scripting (XSS) vulnerabilities in AN Guestbook (ANG) before 0.7.6 allow remote attackers to inject…

Aug 27, 2008
Unscored —

CVE-2008-3851 Public exploit

Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execut…

Aug 27, 2008
Unscored —

CVE-2008-3845 Public exploit

Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow remote attackers to e…

Aug 27, 2008
Unscored —

CVE-2008-3849

Cross-site scripting (XSS) vulnerability in the calendar controller in Civic Website Manager before 1.0.1 allows remote…

Aug 27, 2008
Unscored —

CVE-2008-3839

Unspecified vulnerability in the NFS module in the kernel in Sun Solaris 10 and OpenSolaris snv_59 through snv_87, when…

Aug 27, 2008
Critical 9.1

CVE-2008-3738

Session fixation vulnerability in SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to hijack web sessions v…

Aug 27, 2008
Unscored —

CVE-2008-3844

Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red H…

Aug 27, 2008
Unscored —

CVE-2008-3526

Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Proto…

Aug 27, 2008
Unscored —

CVE-2008-3737

Unspecified vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and…

Aug 27, 2008
Unscored —

CVE-2008-3840

Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a MySQL database, which allows conte…

Aug 27, 2008
Unscored —

CVE-2008-3790 Public exploit EPSS 15%

The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers …

Aug 27, 2008
Unscored —

CVE-2008-3842 EPSS 20%

Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework without the MS07-040 update…

Aug 27, 2008
Unscored —

CVE-2008-3841

Cross-site scripting (XSS) vulnerability in admin/search_links.php in Freeway eCommerce 1.4.1.171 allows remote attacke…

Aug 27, 2008
Unscored —

CVE-2008-3843 EPSS 22%

Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework with the MS07-040 update do…

Aug 27, 2008
Unscored —

CVE-2008-3736

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and…

Aug 27, 2008
Unscored —

CVE-2008-3789

Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows lo…

samba Debian

Aug 27, 2008
Unscored —

CVE-2008-3281

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allo…

libxml2 Debian

Aug 27, 2008
Unscored —

CVE-2008-3739

Cross-site scripting (XSS) vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag Laco…

Aug 27, 2008
Unscored —

CVE-2008-3838

Unspecified vulnerability in the NFS Remote Procedure Calls (RPC) zones implementation in Sun Solaris 10 and OpenSolari…

Aug 27, 2008
Unscored —

CVE-2008-2433 EPSS 11%

The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Serv…

Aug 27, 2008
Unscored —

CVE-2008-2327

Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in…

tiff Debian

Aug 27, 2008
Unscored —

CVE-2007-1682 Public exploit EPSS 30%

Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2…

Aug 27, 2008
Unscored —

CVE-2008-3796

Swfdec 0.6 before 0.6.8 allows remote attackers to cause a denial of service (application crash) via a 1x1 JPEG image.

Aug 27, 2008
Unscored —

CVE-2008-3741

The private filesystem in Drupal 5.x before 5.10 and 6.x before 6.4 trusts the MIME type sent by a web browser, which a…

Aug 27, 2008
Unscored —

CVE-2008-3740

Cross-site scripting (XSS) vulnerability in the output filter in Drupal 5.x before 5.10 and 6.x before 6.4 allows remot…

Aug 27, 2008
Unscored —

CVE-2008-3744

Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.10 and 6.x before 6.4 allow remote at…

Aug 27, 2008
Unscored —

CVE-2008-3746

neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service (NULL pointer dereference and crash) via …

neon27 Debian

Aug 27, 2008
Unscored —

CVE-2008-3795 Public exploit EPSS 15%

Buffer overflow in Ipswitch WS_FTP Home client allows remote FTP servers to have an unknown impact via a long "message …

Aug 27, 2008
Unscored —

CVE-2008-3745

The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes, delete files, and download …

Aug 27, 2008
Unscored —

CVE-2008-3742

Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote…

Aug 27, 2008
Unscored —

CVE-2008-3743

Multiple cross-site request forgery (CSRF) vulnerabilities in forms in Drupal 6.x before 6.4 allow remote attackers to …

Aug 27, 2008
Unscored —

CVE-2008-3747

The (1) get_edit_post_link and (2) get_edit_comment_link functions in wp-includes/link-template.php in WordPress before…

wordpress Debian

Aug 27, 2008