Skip to content
OpenAdvisories

Archive

16 September 2008

Vulnerabilities first published on this day (UTC), newest first.

25 results · Feed

  • Unscored —
    CVE-2008-4115 Public exploit

    TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, wh…

  • Unscored —
    CVE-2008-4114 Public exploit EPSS 49%

    srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP…

  • Unscored —
    CVE-2008-4113 Public exploit

    The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) impleme…

  • Unscored —

    Unspecified vulnerability in Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.…

  • Unscored —

    Login Window in Apple Mac OS X 10.4.11 does not clear the current password when a user makes a password-change attempt …

  • Unscored —

    VideoConference in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2008-3950 Public exploit

    Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple i…

  • Unscored —

    ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of servi…

  • Unscored —

    The kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials during recycling (aka purgi…

  • Unscored —

    Race condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-password account is enabled, allows …

  • Unscored —

    Remote Management and Screen Sharing in Apple Mac OS X 10.5 through 10.5.4, when used to set a password for a VNC viewe…

  • Unscored —

    Time Machine in Apple Mac OS X 10.5 through 10.5.4 uses weak permissions for Time Machine Backup log files, which allow…

  • Unscored —

    Finder in Apple Mac OS X 10.5.2 through 10.5.4 allows remote attackers to cause a denial of service (NULL pointer deref…

  • Unscored —

    The File Sharing pane in the Sharing preference pane in Apple Mac OS X 10.5 through 10.5.4 does not inform users that t…

  • Unscored —

    Multiple integer overflows in the SearchKit API in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allow context-depende…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5 through 10.5.4 allows remote attackers t…

  • Unscored —

    slapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users to select a readable output f…

  • Unscored —

    Finder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get Info window after a lo…

  • Unscored —

    ImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to cause a denial of servi…

  • Unscored —

    Network Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world-readable file, which allows …

  • Unscored —

    Directory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows attackers to enumerate …

  • Unscored —

    Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote…

  • Unscored —
    CVE-2008-4110 EPSS 18%

    Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in Microsoft SQL Server 2000…

  • Unscored —

    Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds, Offic…

  • Unscored —

    Multiple unspecified vulnerabilities in the Importer in Flip4Mac WMV before 2.2.1 have unknown impact and attack vector…