Archive
5 September 2008
Vulnerabilities first published on this day (UTC), newest first.
22 results · Feed
-
Unscored —
The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset …
-
Unscored —
The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset …
-
Unscored —
The kernel in FreeBSD 6.3 through 7.0 on amd64 platforms can make an extra swapgs call after a General Protection Fault…
-
Unscored —
SQL injection vulnerability in admin/users/self-2.php in XRMS allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-3664 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2008-3531 Public exploit
Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled…
-
Unscored —
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating sys…
-
Unscored —
DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line.
-
Unscored —
The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link correspon…
-
Unscored —
Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x befo…
-
Unscored —
The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not…
-
Unscored —
The web interface in Dreambox DM500C allows remote attackers to cause a denial of service (application hang) via a long…
-
Unscored —CVE-2008-3941 Public exploit
Cross-site scripting (XSS) vulnerability in BizDirectory 2.04 and earlier allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2008-3945 Public exploit
SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-3942 Public exploit
SQL injection vulnerability in landsee.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL co…
-
Medium 6.1CVE-2008-3937 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Open Media Collectors Database (OpenDb) 1.0.6 allow remote attac…
-
Medium 6.1
Cross-site scripting (XSS) vulnerability in DIC shop_v50 3.0 and earlier and shop_v52 2.0 and earlier allows remote att…
-
High 8.8
Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allo…
-
Unscored —
Format string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to gain privi…
-
Unscored —CVE-2008-3944 Public exploit
SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via…
-
High 7.5
Directory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers …
-
Unscored —CVE-2008-3943 Public exploit
SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitra…