Skip to content
OpenAdvisories

Archive

5 September 2008

Vulnerabilities first published on this day (UTC), newest first.

22 results · Feed

  • Unscored —

    The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset …

  • Unscored —

    The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset …

  • Unscored —

    The kernel in FreeBSD 6.3 through 7.0 on amd64 platforms can make an extra swapgs call after a General Protection Fault…

  • Unscored —

    SQL injection vulnerability in admin/users/self-2.php in XRMS allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-3664 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HT…

  • Unscored —
    CVE-2008-3531 Public exploit

    Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled…

  • Unscored —

    sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating sys…

  • Unscored —

    DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line.

  • Unscored —

    The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link correspon…

  • Unscored —

    Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x befo…

  • Unscored —

    The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not…

  • Unscored —

    The web interface in Dreambox DM500C allows remote attackers to cause a denial of service (application hang) via a long…

  • Unscored —
    CVE-2008-3941 Public exploit

    Cross-site scripting (XSS) vulnerability in BizDirectory 2.04 and earlier allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2008-3945 Public exploit

    SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-3942 Public exploit

    SQL injection vulnerability in landsee.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL co…

  • Medium 6.1
    CVE-2008-3937 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Open Media Collectors Database (OpenDb) 1.0.6 allow remote attac…

  • Medium 6.1

    Cross-site scripting (XSS) vulnerability in DIC shop_v50 3.0 and earlier and shop_v52 2.0 and earlier allows remote att…

  • High 8.8

    Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allo…

  • Unscored —

    Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privi…

  • Unscored —
    CVE-2008-3944 Public exploit

    SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via…

  • High 7.5

    Directory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers …

  • Unscored —
    CVE-2008-3943 Public exploit

    SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitra…