Archive
October 2008
Vulnerabilities first published in this month (UTC), newest first.
540 results · Feed
-
Unscored —CVE-2008-4874 Public exploit
The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "servic…
-
Unscored —CVE-2008-4878 Public exploit
Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated adm…
-
Unscored —CVE-2008-4876 Public exploit
Cross-site scripting (XSS) vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with fir…
-
Unscored —CVE-2008-4875 Public exploit
Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 an…
-
Unscored —CVE-2008-4877 Public exploit
SQL injection vulnerability in admin.php in WebCards 1.3, when magic_quotes_gpc is disabled, allows remote attackers to…
-
Unscored —
Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Tro…
-
Unscored —
Cross-site scripting (XSS) vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbi…
-
Unscored —
Unspecified vulnerability in the avcodec_close function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by…
-
Unscored —CVE-2008-4873 Public exploit
board.cgi in Sepal SPBOARD 4.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the fi…
-
Unscored —
Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent att…
-
Unscored —
Cross-site scripting (XSS) vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbi…
-
Unscored —
Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-depen…
-
Unscored —
Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows local users to execute arbitrary code via a…
-
Unscored —
Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-dependent attacke…
-
Unscored —
dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.co…
-
Unscored —
FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers to cause a denial of service (memory consumption) …
-
High 7.5
Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3…
-
Unscored —
Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to execute arbi…
-
Unscored —
Multiple unspecified vulnerabilities in the Profiles search pages in IBM Lotus Connections 2.x before 2.0.1 have unknow…
-
Unscored —
IBM Lotus Connections 2.x before 2.0.1 allows attackers to discover passwords via unspecified vectors. NOTE: the proven…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to…
-
Unscored —
The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 r2797 and earlier allows remote att…
-
Unscored —
IBM Lotus Connections 2.x before 2.0.1 stores the password for the administrative user in the trace.log file, which all…
-
Unscored —
The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 before r2797 allows remote attacker…
-
Unscored —
Stack-based buffer overflow in AldFs32.dll in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to …
-
Unscored —
SQL injection vulnerability in the Gallery module 1.3 for PHP-Nuke allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Cross-site scripting (XSS) vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows remote attackers to inje…
-
Unscored —CVE-2008-4803 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Simple PHP Scripts gallery 0.1, 0.3, and 0.4 allows remote att…
-
Unscored —
The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attac…
-
Unscored —
pamperspective in Netpbm before 10.35.48 does not properly calculate a window height, which allows context-dependent at…
-
Unscored —CVE-2008-4801 EPSS 11%
Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (C…
-
Unscored —CVE-2008-4795 Public exploit
The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a frame, which …
-
Unscored —
The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 (stable) allows remote attackers to execute arbi…
-
Unscored —
The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-sn…
-
Unscored —
Directory traversal vulnerability in Arihiro Kurata Kantan WEB Server 1.8 and earlier allows remote attackers to read a…
-
Unscored —
Opera before 9.62 allows remote attackers to execute arbitrary commands via the History Search results page, a differen…
-
Unscored —
Heap-based buffer overflow in OpenOffice.org (OOo) 2.x before 2.4.2 allows remote attackers to execute arbitrary code v…
-
Unscored —
Multiple integer overflows in OpenOffice.org (OOo) 2.x before 2.4.2 allow remote attackers to execute arbitrary code vi…
-
Unscored —
Heap-based buffer overflow in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrar…
-
Unscored —
Stack-based buffer overflow in AldFs32.dll in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to …