Archive
22 October 2008
Vulnerabilities first published on this day (UTC), newest first.
34 results · Feed
-
Unscored —CVE-2008-4700 Public exploit
SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magic_quotes_gpc is disabled, allows remo…
-
Unscored —CVE-2008-4701 Public exploit
SQL injection vulnerability in admin.php in Libera CMS 1.12, when magic_quotes_gpc is disabled, allows remote attackers…
-
Unscored —CVE-2008-4702 Public exploit
Multiple directory traversal vulnerabilities in PhpWebGallery 1.3.4 allow remote attackers to include and execute arbit…
-
Unscored —
Insecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004 allows remote attacker…
-
Unscored —
The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.…
-
Unscored —
Unspecified vulnerability in the SQLNLS_UNPADDEDCHARLEN function in the New Compiler (aka Starburst derived compiler) c…
-
Unscored —CVE-2008-4688 EPSS 12%
core/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with iss…
-
Unscored —
Unspecified vulnerability in the Bluetooth RFCOMM dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers t…
-
Unscored —
The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace…
-
Unscored —
packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which all…
-
Unscored —
lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote atta…
-
Unscored —
Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hija…
-
Unscored —
Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark…
-
Unscored —
autoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions,…
-
Unscored —
The HTTP_Request_Parser method in the HTTP Transport component in IBM WebSphere Application Server (WAS) 6.0.2 before 6…
-
Unscored —
The dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allow…
-
Unscored —
manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort para…
-
Unscored —
The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5 before FP2, when a def…
-
Unscored —
packet-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2008-4686 Public exploit
Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably…
-
Unscored —CVE-2008-4682 Public exploit
wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a…
-
Unscored —CVE-2008-4675 Public exploit
SQL injection vulnerability in index.php in PHPcounter 1.3.2 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-4666 Public exploit
SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL …
-
Unscored —
Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for Joomla! allows remote att…
-
Unscored —CVE-2008-4671 Public exploit
Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attac…
-
Unscored —CVE-2008-4670 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Ed Pudol Clickbank Portal allows remote attackers to inject a…
-
Unscored —CVE-2008-4669 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Dan Fletcher Recipe Script allows remote attackers to inject …
-
Unscored —
Unspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation …
-
Unscored —CVE-2008-4667 Public exploit
Directory traversal vulnerability in rss.php in ArabCMS 2.0 beta 1 allows remote attackers to include and execute arbit…
-
Unscored —CVE-2008-4674 Public exploit
SQL injection vulnerability in realestate-index.php in Conkurent Real Estate Manager 1.01 allows remote attackers to ex…
-
Unscored —CVE-2008-4665 Public exploit
SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id para…
-
Unscored —CVE-2008-4672 Public exploit
Cross-site scripting (XSS) vulnerability in search_results.php in buymyscripts Lyrics Script allows remote attackers to…
-
Unscored —CVE-2008-4673 Public exploit
PHP remote file inclusion vulnerability in panel/common/theme/default/header_setup.php in WebBiscuits Software Events C…
-
Unscored —CVE-2008-4664 Public exploit
Heap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control (QvodInsert.dll) in QVOD Player before 2.1.5 build …