Skip to content
OpenAdvisories

Archive

2 September 2008

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —
    CVE-2008-3877 Public exploit

    Stack-based buffer overflow in Acoustica Mixcraft 4.1 Build 96 and 4.2 Build 98 allows user-assisted attackers to execu…

  • Unscored —
    CVE-2008-3888 Public exploit

    SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL c…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in dotProject 2.1.2 allow remote attackers to inject a…

  • Unscored —

    configvar in Caudium 1.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/roken#####.p…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows remote attackers to hijack…

  • Unscored —

    SQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1.23.3 and earlier allows remote attackers to execu…

  • Unscored —

    Multiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow (1) remote authenticated users to execute…

  • Unscored —

    Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbit…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2008-3879 Public exploit

    The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Cont…

  • Unscored —
    CVE-2008-3878 Public exploit EPSS 36%

    Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Sharewar…

  • Unscored —

    Apple iPhone 2.0.2, in some configurations, allows physically proximate attackers to bypass intended access restriction…

  • Unscored —

    Unspecified vulnerability in HP Enterprise Discovery 2.0 through 2.52 on Windows allows remote authenticated users to e…

  • Unscored —

    Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to…

  • Unscored —

    The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and th…

  • Unscored —

    libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-depend…