Archive
September 2008
Vulnerabilities first published in this month (UTC), newest first.
450 results · Feed
-
Unscored —
pkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the card's label matches the…
-
Unscored —
Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9…
-
Unscored —CVE-2008-3007 EPSS 32%
Argument injection vulnerability in a URI handler in Microsoft Office XP SP3, 2003 SP2 and SP3, 2007 Office System Gold…
-
Unscored —CVE-2008-3012 EPSS 31%
gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold a…
-
Unscored —
moderation.php in MyBB (aka MyBulletinBoard) before 1.4.1 does not properly check for moderator privileges, which has u…
-
Unscored —CVE-2008-3015 EPSS 39%
Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office Syst…
-
Unscored —
SQL injection vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.4.1 allows remote attackers to execute a…
-
Unscored —
pam_mount 0.10 through 0.45, when luserconf is enabled, does not verify mountpoint and source ownership before mounting…
-
Unscored —
Unspecified vulnerability in HP OpenView Select Identity (HPSI) Connectors on Windows, as used in HPSI Active Directory…
-
Unscored —CVE-2008-2253 EPSS 30%
Unspecified vulnerability in Microsoft Windows Media Player 11 allows remote attackers to execute arbitrary code via a …
-
Unscored —
The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, al…
-
Unscored —
Buffer overflow in tftp in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to gain privileges via unsp…
-
Unscored —
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista G…
-
Unscored —
The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitra…
-
Unscored —
IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a deni…
-
Unscored —
libclamav in ClamAV before 0.94 allows attackers to cause a denial of service (NULL pointer dereference and application…
-
Unscored —
Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an …
-
Unscored —
Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descr…
-
Unscored —
Unspecified vulnerability in the JDBC Applet Server Service (aka db2jds) in IBM DB2 UDB 8 before Fixpak 17 allows remot…
-
Unscored —
IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (instance crash) via a crafted CONN…
-
Unscored —
Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (…
-
Unscored —
orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (applicat…
-
Unscored —CVE-2008-3952 Public exploit
SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-3951 Public exploit
SQL injection vulnerability in view_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote atta…
-
Unscored —CVE-2008-3955 Public exploit
SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute…
-
Unscored —CVE-2008-3954 Public exploit
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute a…
-
Unscored —CVE-2008-3953 Public exploit
SQL injection vulnerability in keyword_search_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to …
-
Unscored —
The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset …
-
Unscored —
The Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell 88W8361P-BEM1 chipset …
-
Unscored —
The kernel in FreeBSD 6.3 through 7.0 on amd64 platforms can make an extra swapgs call after a General Protection Fault…
-
Unscored —
SQL injection vulnerability in admin/users/self-2.php in XRMS allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-3664 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in XRMS allow remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2008-3531 Public exploit
Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled…
-
Unscored —
sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating sys…
-
Unscored —
DCL (aka the CLI) in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line.
-
Unscored —
The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link correspon…
-
Unscored —
Multiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell iPrint Client 4.x befo…
-
Unscored —
The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not…
-
Unscored —
The web interface in Dreambox DM500C allows remote attackers to cause a denial of service (application hang) via a long…
-
Unscored —CVE-2008-3941 Public exploit
Cross-site scripting (XSS) vulnerability in BizDirectory 2.04 and earlier allows remote attackers to inject arbitrary w…