24 September 2008

31 results · Feed

• Unscored —
  CVE-2008-0016 Public exploit EPSS 44%

  Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1…

  Sep 24, 2008
• Unscored —
  CVE-2008-4064

  Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of se…

  Sep 24, 2008
• Unscored —
  CVE-2008-4065

  Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow re…

  Sep 24, 2008
• Unscored —
  CVE-2008-4062

  Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.…

  Sep 24, 2008
• Unscored —
  CVE-2008-4058

  The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMo…

  Sep 24, 2008
• Unscored —
  CVE-2008-4066

  Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (X…

  Sep 24, 2008
• Unscored —
  CVE-2008-4068

  Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17,…

  Sep 24, 2008
• Unscored —
  CVE-2008-4063

  Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of se…

  Sep 24, 2008
• Unscored —
  CVE-2008-4067

  Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17,…

  Sep 24, 2008
• Unscored —
  CVE-2008-4069

  The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitia…

  Sep 24, 2008
• Unscored —
  CVE-2008-4061

  Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.…

  Sep 24, 2008
• Unscored —
  CVE-2008-4059

  The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to "pollute XPCNativeWrappers" and e…

  firefox Wolfi
  Sep 24, 2008
• Unscored —
  CVE-2008-4060

  Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow re…

  Sep 24, 2008
• Unscored —
  CVE-2008-3836

  feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with chrome privileges via vec…

  Sep 24, 2008
• Unscored —
  CVE-2008-3837

  Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers…

  Sep 24, 2008
• Unscored —
  CVE-2008-3835

  The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaM…

  Sep 24, 2008
• Unscored —
  CVE-2008-4208

  Unspecified vulnerability in OSADS Alliance Database before 2.1 has unknown impact and attack vectors, possibly related…

  Sep 24, 2008
• Unscored —
  CVE-2008-4205 Public exploit

  SQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote attackers to execute arbitr…

  Sep 24, 2008
• Unscored —
  CVE-2008-4207 Public exploit

  Attachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which allows remote attacker…

  Sep 24, 2008
• Unscored —
  CVE-2008-4202 Public exploit

  SQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to execute arbitrary SQL…

  Sep 24, 2008
• Unscored —
  CVE-2008-4203 Public exploit

  SQL injection vulnerability in cn_users.php in CzarNews 1.20 and earlier allows remote attackers to execute arbitrary S…

  Sep 24, 2008
• Unscored —
  CVE-2008-4204 Public exploit

  SQL injection vulnerability in city.asp in SoftAcid Hotel Reservation System (HRS) allows remote attackers to execute a…

  Sep 24, 2008
• Unscored —
  CVE-2008-4206 Public exploit

  PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is …

  Sep 24, 2008
• Unscored —
  CVE-2008-3098 Public exploit

  Cross-site scripting (XSS) vulnerability in admin/usercheck.php in fuzzylime (cms) before 3.03 allows remote attackers …

  Sep 24, 2008
• Unscored —
  CVE-2008-3663

  Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which can cause the cookie…

  Sep 24, 2008
• Unscored —
  CVE-2008-4191

  extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the ext…

  emacspeak Debian
  Sep 24, 2008
• Unscored —
  CVE-2008-4193 Public exploit EPSS 75%

  Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers …

  Sep 24, 2008
• Unscored —
  CVE-2008-4190 Public exploit

  The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbit…

  Sep 24, 2008
• Unscored —
  CVE-2008-4194 Public exploit

  The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of ser…

  Sep 24, 2008
• Unscored —
  CVE-2008-4201

  Heap-based buffer overflow in the decodeMP4file function (frontend/main.c) in FAAD2 2.6.1 and earlier allows remote att…

  faad2 Debian
  Sep 24, 2008
• Unscored —
  CVE-2008-3102

  Mantis 1.1.x through 1.1.2 and 1.2.x through 1.2.0a2 does not set the secure flag for the session cookie in an https se…

  Sep 24, 2008