Archive
20 October 2008
Vulnerabilities first published on this day (UTC), newest first.
13 results · Feed
-
Unscored —
The Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly hand…
-
Unscored —
The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted re…
-
Unscored —CVE-2008-4617 Public exploit
SQL injection vulnerability in the actualite module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Unspecified vulnerability in i_utils.asp in PortalApp before 4.01a has unknown impact and attack vectors.
-
Unscored —CVE-2008-4612 Public exploit
Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —CVE-2008-4613 Public exploit
SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-4616 Public exploit
The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-s…
-
Unscored —CVE-2008-4614 Public exploit
PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to …
-
Unscored —CVE-2008-4611 Public exploit
SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbi…
-
Unscored —CVE-2008-4610 Public exploit
MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demon…
-
Unscored —
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and pr…
-
Unscored —
The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux and (2) sys/dev/pci/d…
-
Unscored —
MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and application crash) via (1) …