Archive
August 2008
Vulnerabilities first published in this month (UTC), newest first.
373 results · Feed
-
Unscored —
Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o …
-
Unscored —
Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o o…
-
Unscored —
The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kern…
-
Unscored —
Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow l…
-
Unscored —
Unspecified vulnerability in the pthread_mutex_reltimedlock_np API in Sun Solaris 10 and OpenSolaris before snv_90 allo…
-
Unscored —
Unspecified vulnerability in the Sun Netra T5220 Server with firmware 7.1.3 allows local users to cause a denial of ser…
-
Unscored —CVE-2008-3513 Public exploit
SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-3509 Public exploit
LoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php, and (3) themes.php i…
-
Unscored —CVE-2008-3511 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery) allow remote attackers to …
-
Unscored —CVE-2008-3507 Public exploit
SQL injection vulnerability in index.php in LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attacker…
-
Unscored —CVE-2008-3510 Public exploit
Cross-site scripting (XSS) vulnerability in livehelp_js.php in Crafty Syntax Live Help (CSLH) 2.14.6 allows remote atta…
-
Unscored —CVE-2008-3512 Public exploit
SQL injection vulnerability in the Kleinanzeigen module for PHP-Nuke allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-3508 Public exploit
LiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attackers to bypass authentication and gain administ…
-
Unscored —
Unspecified vulnerability in Best Practical Solutions RT 3.0.0 through 3.6.6 allows remote authenticated users to cause…
-
Unscored —CVE-2008-3494 Public exploit
8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via an extra HTTP Host head…
-
Unscored —
Buffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media/video/uvc/uvc_driver.c i…
-
Unscored —CVE-2008-3495 Public exploit
SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-3505 Public exploit
Cross-site scripting (XSS) vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to inject arbitrary w…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the WebAccess simple interface in Novell Groupwise 7.0.x allows remote atta…
-
Unscored —CVE-2008-3497 Public exploit
SQL injection vulnerability in pages.php in MyPHP CMS 0.3.1 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Unspecified vulnerability in "a page in the workarea folder" in Ektron CMS400.NET 7.00 through 7.04 and 7.50 through 7.…
-
Unscored —
Unspecified vulnerability in mask PHP File Manager (mPFM) before 2.3 has unknown impact and remote attack vectors relat…
-
Unscored —CVE-2008-3498 Public exploit
SQL injection vulnerability in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows remote attackers to ex…
-
Unscored —CVE-2008-3493 Public exploit
vncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a denial of service (application cra…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Suggested Terms module 5.x before 5.x-1.2 for Drupal allows remote auth…
-
Unscored —
America's Army (aka AA or Army Game Project) 2.8.3.1 and earlier allows remote attackers to cause a denial of service (…
-
Unscored —
RSSFromParent in Plain Black WebGUI before 7.5.13 does not restrict view access to Collaboration System (CS) RSS feeds,…
-
Unscored —CVE-2008-3506 Public exploit
SQL injection vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2008-2939 EPSS 39%
Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0.63 and earlier, and m…
-
Unscored —
Unspecified vulnerability in Novell iManager before 2.7 SP1 (2.7.1) allows remote attackers to delete Plug-in Studio cr…
-
Unscored —CVE-2008-3490 Public exploit
SQL injection vulnerability in members/mail.php in E-topbiz Online Dating 3 1.0 allows remote authenticated users to ex…
-
Unscored —CVE-2008-3491 Public exploit
SQL injection vulnerability in go.php in Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-3486 Public exploit
Directory traversal vulnerability in the user_get_profile function in include/functions.inc.php in Coppermine Photo Gal…
-
Unscored —CVE-2008-3489 Public exploit
SQL injection vulnerability in checkCookie function in includes/functions.inc.php in PHPX 3.5.16 allows remote attacker…
-
Unscored —
Untrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to gain privileges via a…
-
Unscored —CVE-2008-3487 Public exploit
SQL injection vulnerability in profile.php in PHPAuction GPL Enhanced 2.51 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-3484 Public exploit
SQL injection vulnerability in eStoreAff 0.1 allows remote attackers to execute arbitrary SQL commands via the cid para…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM…
-
Unscored —CVE-2008-3483 Public exploit
Cross-site scripting (XSS) vulnerability in ScrewTurn Wiki 2.0.29 and 2.0.30 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2008-3481 Public exploit
themes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote attackers to obtain sensitiv…