Archive
August 2008
Vulnerabilities first published in this month (UTC), newest first.
373 results · Feed
-
Medium —
Apache Tomcat Directory Traversal vulnerability
Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the …
-
Unscored —CVE-2008-2246 EPSS 32%
Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Serv…
-
Unscored —CVE-2008-3018 EPSS 30%
Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of…
-
Unscored —CVE-2008-3020 EPSS 30%
Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file…
-
Unscored —CVE-2008-3006 EPSS 36%
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 Gold and S…
-
Unscored —CVE-2008-3019 EPSS 30%
Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of…
-
Unscored —CVE-2008-3005 EPSS 32%
Array index vulnerability in Microsoft Office Excel 2000 SP3 and 2002 SP3, and Office 2004 and 2008 for Mac allows remo…
-
Unscored —CVE-2008-3021 EPSS 36%
Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of…
-
Unscored —
The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before …
-
Unscored —CVE-2008-3648 EPSS 22%
nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrat…
-
Unscored —
Microsoft Office Excel 2007 Gold and SP1 does not properly delete the PWD (password) string from connections.xml when a…
-
Unscored —CVE-2008-3460 EPSS 32%
WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly p…
-
Unscored —CVE-2008-3004 EPSS 32%
Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3; Office Excel Viewer 2003; and Office 2004 and 2008 for…
-
Unscored —
Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA…
-
Unscored —
The kmxfw.sys driver in CA Host-Based Intrusion Prevention System (HIPS) r8, as used in CA Internet Security Suite and …
-
Unscored —CVE-2008-3599 Public exploit
SQL injection vulnerability in image.php in OpenImpro 1.1 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Unspecified vulnerability in McAfee Encrypted USB Manager 3.1.0.0, when the Re-use Threshold for passwords is nonzero, …
-
Unscored —CVE-2008-3598 Public exploit
Multiple SQL injection vulnerabilities in psipuss 1.0 allow remote attackers to execute arbitrary SQL commands via (1) …
-
Unscored —CVE-2008-3602 Public exploit
admin/wr_admin.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9.1 allows remote attackers to bypass authentic…
-
Unscored —CVE-2008-3601 Public exploit
SQL injection vulnerability in index.php in Quicksilver Forums 1.4.1 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-3604 Public exploit
SQL injection vulnerability in bannerclick.php in ZeeBuddy 2.1 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-3607 Public exploit
The IMAP server in NoticeWare Email Server NG 4.6.3 and earlier allows remote attackers to cause a denial of service (d…
-
Unscored —CVE-2008-3603 Public exploit
SQL injection vulnerability in index.php in Vacation Rental Script 3.0 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-3606 Public exploit
Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users…
-
Unscored —
Directory traversal vulnerability in contrib/phpBB2/modules.php in Gallery 1.5.7 and 1.6-alpha3, when register_globals …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Harmoni before 1.4.7 allows remote attackers to inject arbitrary web script…
-
Unscored —CVE-2008-3595 Public exploit
PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers…
-
Unscored —
Skulltag before 0.97d2-RC6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon cr…
-
Unscored —CVE-2008-3588 Public exploit
Multiple SQL injection vulnerabilities in phsBlog 0.1.1 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2008-3586 Public exploit
SQL injection vulnerability in the EZ Store (com_ezstore) component for Joomla! allows remote attackers to execute arbi…
-
Unscored —CVE-2008-3594 Public exploit
SQL injection vulnerability in viewdetails.php in MagicScripts E-Store Kit-1, E-Store Kit-2, E-Store Kit-1 Pro PayPal E…
-
Unscored —CVE-2008-3587 Public exploit
Cross-site scripting (XSS) vulnerability in result.php in Chris Bunting Homes 4 Sale allows remote attackers to inject …
-
Unscored —CVE-2008-3585 Public exploit
Multiple SQL injection vulnerabilities in PozScripts GreenCart PHP Shopping Cart allow remote attackers to execute arbi…
-
Unscored —CVE-2008-3590 Public exploit
Multiple SQL injection vulnerabilities in admin/login.asp in E. Z. Poll 2 allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-3591 Public exploit
SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attac…
-
Unscored —CVE-2008-3592 Public exploit
Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and …
-
Unscored —CVE-2008-3593 Public exploit
Directory traversal vulnerability in index.php in SyzygyCMS 0.3 allows remote attackers to include and execute arbitrar…
-
Unscored —CVE-2008-3589 Public exploit
Directory traversal vulnerability in download.php in moziloCMS 1.10.1, when magic_quotes_gpc is disabled, allows remote…
-
Unscored —CVE-2008-3583 Public exploit
Buffer overflow in the HTML parser in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a long U…
-
Unscored —CVE-2008-3581 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Qsoft K-Links allows remote attackers to inject arbitrary web …