Archive
3 October 2008
Vulnerabilities first published on this day (UTC), newest first.
35 results · Feed
-
Unscored —CVE-2008-4428 Public exploit
Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier…
-
Unscored —CVE-2008-4437 Public exploit
Directory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5, when --attach_path i…
-
Unscored —
Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, O…
-
Unscored —
The to-upgrade plugin in feta 1.4.16 allows local users to overwrite arbitrary files via a symlink on the (1) /tmp/feta…
-
Unscored —CVE-2008-4423 Public exploit
SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2008-4424 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Domain Group Network GooCMS 1.02 allows remote attackers to in…
-
Unscored —CVE-2008-4438 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbit…
-
Unscored —CVE-2008-4426 Public exploit
Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows re…
-
Unscored —
SQL injection vulnerability in index.php in IceBB 1.0-rc9.3 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-4435 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the RMSOFT Downloads Plus (rmdp) module 1.5 and 1.7 for Xoops al…
-
Unscored —CVE-2008-4425 Public exploit
Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote at…
-
Unscored —CVE-2008-4432 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attack…
-
Unscored —CVE-2008-4436 Public exploit
SQL injection vulnerability in bblog_plugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-4427 Public exploit
changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative a…
-
Unscored —
SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to e…
-
Unscored —CVE-2008-4439 Public exploit
PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote…
-
Unscored —
Unspecified vulnerability in SOURCENEXT Virus Security ZERO 9.5.0173 and earlier and Virus Security 9.5.0173 and earlie…
-
Unscored —
Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlie…
-
Unscored —
The vmi_write_ldt_entry function in arch/x86/kernel/vmi_32.c in the Virtual Machine Interface (VMI) in the Linux kernel…
-
Unscored —
XRunSabre in sabre (aka xsabre) 0.2.4b relies on the ability to create /tmp/sabre.log, which allows local users to caus…
-
Unscored —
lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings bef…
-
Unscored —CVE-2008-4405 Public exploit
xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not prope…
-
Unscored —CVE-2008-4409 Public exploit
libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-de…
-
Unscored —
mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-se…
-
Unscored —
A certain Debian patch to the run scripts for sabre (aka xsabre) 0.2.4b allows local users to delete or overwrite arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MediaWiki 1.13.1, 1.12.0, and possibly other versions before 1.13.2 allows …
-
Unscored —
The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid …
-
Unscored —CVE-2008-3832 Public exploit
A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5…
-
Unscored —
The CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 Patch 1 before build 3087…
-
Unscored —
The IPv6 Neighbor Discovery Protocol (NDP) implementation on IBM zSeries servers does not validate the origin of Neighb…
-
Unscored —
Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1 …
-
Unscored —
pam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option is enabled, uses inco…
-
Unscored —
Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote attackers to inject arbit…
-
Unscored —
The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) …