27 September 2008

16 results · Feed

• Unscored —
  CVE-2008-4196

  Cross-site scripting (XSS) vulnerability in Opera before 9.52 allows remote attackers to inject arbitrary web script or…

  Sep 27, 2008
• Unscored —
  CVE-2008-4200

  Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows …

  Sep 27, 2008
• Unscored —
  CVE-2008-4298

  Memory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause …

  lighttpd Debian
  Sep 27, 2008
• Unscored —
  CVE-2008-4119

  Multiple cross-site scripting (XSS) vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote att…

  Sep 27, 2008
• Unscored —
  CVE-2008-4195

  Opera before 9.52 does not properly restrict the ability of a framed web page to change the address associated with a d…

  Sep 27, 2008
• Unscored —
  CVE-2008-4070

  Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers t…

  Sep 27, 2008
• Unscored —
  CVE-2008-4292

  Opera before 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown i…

  Sep 27, 2008
• Unscored —
  CVE-2008-4294

  IBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 preserves cached user privileges after logout, which allows physically pro…

  Sep 27, 2008
• Unscored —
  CVE-2008-4293

  Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remote attacke…

  Sep 27, 2008
• Unscored —
  CVE-2008-4295 Public exploit EPSS 30%

  Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to est…

  Sep 27, 2008
• Unscored —
  CVE-2008-4296

  The Cisco Linksys WRT350N with firmware 1.0.3.7 has "admin" as its default password for the "admin" account, which make…

  Sep 27, 2008
• Unscored —
  CVE-2008-4297

  Mercurial before 1.0.2 does not enforce the allowpull permission setting for a pull operation from hgweb, which allows …

  mercurial Debian
  Sep 27, 2008
• Unscored —
  CVE-2008-4199

  Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allo…

  Sep 27, 2008
• Unscored —
  CVE-2008-4198

  Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and …

  Sep 27, 2008
• Unscored —
  CVE-2008-4197

  Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produ…

  Sep 27, 2008
• Unscored —
  CVE-2008-3528

  The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux …

  Sep 27, 2008