Archive
August 2008
Vulnerabilities first published in this month (UTC), newest first.
373 results · Feed
-
Unscored —CVE-2008-2433 EPSS 11%
The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business Security 5.0, and Client/Serv…
-
Unscored —
Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in…
-
Unscored —
Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2…
-
Unscored —
Swfdec 0.6 before 0.6.8 allows remote attackers to cause a denial of service (application crash) via a 1x1 JPEG image.
-
Unscored —
The private filesystem in Drupal 5.x before 5.10 and 6.x before 6.4 trusts the MIME type sent by a web browser, which a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the output filter in Drupal 5.x before 5.10 and 6.x before 6.4 allows remot…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.10 and 6.x before 6.4 allow remote at…
-
Unscored —
neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service (NULL pointer dereference and crash) via …
-
Unscored —
Buffer overflow in Ipswitch WS_FTP Home client allows remote FTP servers to have an unknown impact via a long "message …
-
Unscored —
The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes, delete files, and download …
-
Unscored —
Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in forms in Drupal 6.x before 6.4 allow remote attackers to …
-
Unscored —
The (1) get_edit_post_link and (2) get_edit_comment_link functions in wp-includes/link-template.php in WordPress before…
-
Unscored —
Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC Media Player 0.8.6i al…
-
Unscored —CVE-2008-3788 Public exploit
Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magic_quotes_gpc is disabled, allow remote a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow remote authenticated admi…
-
Unscored —CVE-2008-3779 Public exploit
Cross-site scripting (XSS) vulnerability in search/index.php in Five Star Review Script allows remote attackers to inje…
-
Unscored —CVE-2008-3786 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PICTURESPRO Photo Cart 3.9 allows remote attackers to inject a…
-
Unscored —CVE-2008-3780 Public exploit
SQL injection vulnerability in recommend.php in Five Star Review Script allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-3785 Public exploit
Multiple SQL injection vulnerabilities in the com_content component in MiaCMS 4.6.5 allow remote attackers to execute a…
-
Unscored —CVE-2008-3787 Public exploit
SQL injection vulnerability in listing_view.php in Web Directory Script 2.0 and earlier allows remote attackers to exec…
-
Unscored —CVE-2008-3783 Public exploit
Multiple SQL injection vulnerabilities in index.php in Matterdaddy Market 1.1, when magic_quotes_gpc is disabled, allow…
-
Unscored —
Cross-site scripting (XSS) vulnerability in GMOD GBrowse before 1.69 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2008-3784 Public exploit
SQL injection vulnerability in scrape.php in BtiTracker 1.4.7 and earlier and xBtiTracker 2.0.542 and earlier allows re…
-
Unscored —
The SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication Manager (CM) 5.0 on th…
-
Unscored —
The remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Commu…
-
Unscored —CVE-2008-3776 Public exploit
Directory traversal vulnerability in Fujitsu Web-Based Admin View 2.1.2 allows remote attackers to read arbitrary files…
-
Unscored —
Realtime Internet Band Rehearsal Low-Latency (Internet) Connection tool (llcon) before 2.1.2 allows remote attackers to…
-
Unscored —CVE-2008-3771 Public exploit
Cross-site scripting (XSS) vulnerability in members.php in Pars4u Videosharing 1 allows remote attackers to inject arbi…
-
Unscored —CVE-2008-3767 Public exploit
SQL injection vulnerability in classified.php in phpBazar 2.0.2 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
PHP remote file inclusion vulnerability in admin/create_order_new.php in Freeway 1.4.1.171, when register_globals is en…
-
Unscored —CVE-2008-3770 Public exploit
Multiple directory traversal vulnerabilities in Freeway 1.4.1.171, when register_globals is enabled, allow remote attac…
-
Unscored —CVE-2008-3773 Public exploit
Cross-site scripting (XSS) vulnerability in vBulletin 3.7.2 PL1 and 3.6.10 PL3, when "Show New Private Message Notifica…
-
Unscored —CVE-2008-3772 Public exploit
SQL injection vulnerability in categories_portal.php in Pars4u Videosharing 1 allows remote attackers to execute arbitr…
-
Medium 4.4
Folder Lock 5.9.5 and earlier uses weak encryption (ROT-25) for the password, which allows local administrators to obta…
-
Unscored —CVE-2008-3768 Public exploit
Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow …
-
Unscored —CVE-2008-3774 Public exploit
SQL injection vulnerability in index.php in Simasy CMS allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in ajax/UpdateCheck.php in Vanilla 1.1.4 and earlier has unknown impact…
-
Unscored —CVE-2008-3763 Public exploit
Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when register_globals i…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier allows remote attacke…