31 October 2008

28 results · Feed

• Unscored —
  CVE-2008-4874 Public exploit

  The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "servic…

  Oct 31, 2008
• Unscored —
  CVE-2008-4878 Public exploit

  Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows remote authenticated adm…

  Oct 31, 2008
• Unscored —
  CVE-2008-4876 Public exploit

  Cross-site scripting (XSS) vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with fir…

  Oct 31, 2008
• Unscored —
  CVE-2008-4875 Public exploit

  Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 an…

  Oct 31, 2008
• Unscored —
  CVE-2008-4877 Public exploit

  SQL injection vulnerability in admin.php in WebCards 1.3, when magic_quotes_gpc is disabled, allows remote attackers to…

  Oct 31, 2008
• Unscored —
  CVE-2008-4865

  Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Tro…

  valgrind Debian
  Oct 31, 2008
• Unscored —
  CVE-2008-4871

  Cross-site scripting (XSS) vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbi…

  Oct 31, 2008
• Unscored —
  CVE-2008-4868

  Unspecified vulnerability in the avcodec_close function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by…

  mplayer Debian
  Oct 31, 2008
• Unscored —
  CVE-2008-4873 Public exploit

  board.cgi in Sepal SPBOARD 4.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the fi…

  Oct 31, 2008
• Unscored —
  CVE-2008-4864 Public exploit EPSS 21%

  Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent att…

  python-py Azure Linux
  Oct 31, 2008
• Unscored —
  CVE-2008-4872

  Cross-site scripting (XSS) vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbi…

  Oct 31, 2008
• Unscored —
  CVE-2008-4866

  Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-depen…

  ffmpeg mplayer Debian
  Oct 31, 2008
• Unscored —
  CVE-2008-4863

  Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows local users to execute arbitrary code via a…

  blender Debian
  Oct 31, 2008
• Unscored —
  CVE-2008-4867

  Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows context-dependent attacke…

  ffmpeg mplayer Debian
  Oct 31, 2008
• Unscored —
  CVE-2008-4870

  dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable permissions for dovecot.co…

  dovecot Debian
  Oct 31, 2008
• Unscored —
  CVE-2008-4869

  FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers to cause a denial of service (memory consumption) …

  Oct 31, 2008
• High 7.5
  CVE-2008-4309

  Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3…

  net-snmp Debian
  Oct 31, 2008
• Unscored —
  CVE-2008-4806

  Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to execute arbi…

  Oct 31, 2008
• Unscored —
  CVE-2008-4809

  Multiple unspecified vulnerabilities in the Profiles search pages in IBM Lotus Connections 2.x before 2.0.1 have unknow…

  Oct 31, 2008
• Unscored —
  CVE-2008-4808

  IBM Lotus Connections 2.x before 2.0.1 allows attackers to discover passwords via unspecified vectors. NOTE: the proven…

  Oct 31, 2008
• Unscored —
  CVE-2008-4805

  Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to…

  Oct 31, 2008
• Unscored —
  CVE-2008-4811

  The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 r2797 and earlier allows remote att…

  Oct 31, 2008
• Unscored —
  CVE-2008-4807

  IBM Lotus Connections 2.x before 2.0.1 stores the password for the administrative user in the trace.log file, which all…

  Oct 31, 2008
• Unscored —
  CVE-2008-4810

  The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 before r2797 allows remote attacker…

  Oct 31, 2008
• Unscored —
  CVE-2007-6432

  Stack-based buffer overflow in AldFs32.dll in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to …

  Oct 31, 2008
• Unscored —
  CVE-2008-4804

  SQL injection vulnerability in the Gallery module 1.3 for PHP-Nuke allows remote attackers to execute arbitrary SQL com…

  Oct 31, 2008
• Unscored —
  CVE-2008-4802

  Cross-site scripting (XSS) vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows remote attackers to inje…

  Oct 31, 2008
• Unscored —
  CVE-2008-4803 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in Simple PHP Scripts gallery 0.1, 0.3, and 0.4 allows remote att…

  Oct 31, 2008