Archive
August 2008
Vulnerabilities first published in this month (UTC), newest first.
373 results · Feed
-
Unscored —
Buffer overflow in the TruncateString function in src/gfx.cpp in OpenTTD before 0.6.2 allows remote attackers to cause …
-
Unscored —
Buffer overflow in src/openttd.cpp in OpenTTD before 0.6.2 allows local users to execute arbitrary code via a large fil…
-
Unscored —
Calacode @Mail 5.41 on Linux does not require administrative authentication for build-plesk-upgrade.php, which allows r…
-
Unscored —CVE-2008-3580 Public exploit
Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via (1…
-
Unscored —CVE-2008-3582 Public exploit
SQL injection vulnerability in login.php in Keld PHP-MySQL News Script 0.7.1 allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-3578 Public exploit
HydraIRC 0.3.164 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and applica…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Pligg 9.9.5 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2008-3575 Public exploit
PHP remote file inclusion vulnerability in modules/calendar/minicalendar.php in ezContents CMS allows remote attackers …
-
Unscored —
JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remo…
-
Unscored —CVE-2008-3566 Public exploit
Cross-site scripting (XSS) vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2008-3565 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Meeting Room Booking System (MRBS) 1.2.6 allow remote attackers …
-
Unscored —CVE-2008-3561 Public exploit
SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled, allows remote attacke…
-
Unscored —CVE-2008-3563 Public exploit
Multiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2008-3573 Public exploit
The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random …
-
Unscored —CVE-2008-3570 Public exploit
PHP remote file inclusion vulnerability in index.php in Africa Be Gone (ABG) 1.0a allows remote attackers to execute ar…
-
Unscored —CVE-2008-3569 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in XAMPP 1.6.7, when register_globals is enabled, allow remote atta…
-
Unscored —CVE-2008-3562 Public exploit
Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magic_quotes_gpc is disa…
-
Unscored —
Cross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5.541 allows remote attack…
-
Unscored —
The Xerox Phaser 8400 allows remote attackers to cause a denial of service (reboot) via an empty UDP packet to port 190…
-
Unscored —CVE-2008-3564 Public exploit
Multiple directory traversal vulnerabilities in index.php in Dayfox Blog 4 allow remote attackers to include and execut…
-
Unscored —CVE-2008-3568 Public exploit
Absolute path traversal vulnerability in fckeditor/editor/filemanager/browser/default/connectors/php/connector.php in U…
-
Unscored —CVE-2008-3574 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Pluck 4.5.2, when register_globals is enabled, allow remote atta…
-
Unscored —
Unspecified vulnerability in libc on HP HP-UX B.11.23 and B.11.31 allows remote attackers to cause a denial of service …
-
Unscored —
QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on …
-
Unscored —CVE-2008-3556 Public exploit
Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute a…
-
Unscored —
The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive informati…
-
Unscored —
The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attacker…
-
Unscored —
Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local us…
-
Unscored —CVE-2008-3557 Public exploit
Free Hosting Manager 1.2 and 2.0 allows remote attackers to bypass authentication and gain administrative access by set…
-
Unscored —CVE-2008-3559 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web sc…
-
Unscored —
PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers …
-
Unscored —
Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before…
-
Unscored —
Multiple unspecified vulnerabilities in Sun Java Platform Micro Edition (aka Java ME, J2ME, or mobile Java), as distrib…
-
Unscored —
Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition devices allow remote attackers to execute arbitrary…
-
Unscored —CVE-2008-3560 Public exploit
Cross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops allows remote attackers…
-
Unscored —
Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition FP1, and possibly later devices, allow remote attac…
-
Unscored —CVE-2008-3555 Public exploit
Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3)…
-
Unscored —
The shmem_delete_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows lo…
-
Unscored —CVE-2008-3554 Public exploit
SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
Use-after-free vulnerability in the _gnutls_handshake_hash_buffers_clear function in lib/gnutls_handshake.c in libgnutl…