Archive
October 2008
Vulnerabilities first published in this month (UTC), newest first.
540 results · Feed
-
Unscored —CVE-2008-4599 Public exploit
SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-4602 Public exploit
Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and …
-
Unscored —CVE-2008-4601 Public exploit
Cross-site scripting (XSS) vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arb…
-
Unscored —CVE-2008-4600 Public exploit
configure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass authentication and gain…
-
Unscored —CVE-2008-4604 Public exploit
SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-4606 Public exploit
Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL comman…
-
Unscored —
Multiple unspecified vulnerabilities in Slaytanic Scripts Content Plus 2.1.1 have unknown impact and remote attack vect…
-
Unscored —
Shindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access, which allows remote atta…
-
Unscored —
Unspecified vulnerability in Shindig-Integrator 5.x, a module for Drupal, has unspecified impact and remote attack vect…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Shindig-Integrator 5.x, a module for Drupal, allows remote authenticated us…
-
Unscored —
Unspecified vulnerability in the SNMPv3 component in Linksys WAP4400N firmware 1.2.14 on the Marvell Semiconductor 88W8…
-
Unscored —
Apple iPhone 2.1 with firmware 5F136, when Require Passcode is enabled and Show SMS Preview is disabled, allows physica…
-
Unscored —
Unspecified vulnerability in HP Systems Insight Manager (SIM) before 5.2 Update 2 (C.05.02.02.00) allows remote attacke…
-
Unscored —
ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with (1) the …
-
Unscored —
Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attacker…
-
Unscored —CVE-2008-4591 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin/include/isadmin.inc.php in PhpWebGallery 1.3.4 allow remot…
-
Unscored —CVE-2008-4592 Public exploit
Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and e…
-
Unscored —CVE-2008-4590 Public exploit
Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via (1) …
-
Unscored —
Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100…
-
Unscored —
Belong Software Site Builder 0.1 beta allows remote attackers to bypass intended access restrictions and perform admini…
-
Unscored —
Heap-based buffer overflow in the tvtumin.sys kernel driver in Lenovo Rescue and Recovery 4.20, including 4.20.0511 and…
-
Unscored —CVE-2008-4588 Public exploit
Stack-based buffer overflow in the FTP server in Etype Eserv 3.x, possibly 3.26, allows remote attackers to cause a den…
-
Unscored —CVE-2008-4583 Public exploit
Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll) allows remote attackers to ove…
-
Unscored —CVE-2008-4586 Public exploit
Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Mac…
-
Unscored —CVE-2008-4584 Public exploit
Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrit…
-
Unscored —
The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running …
-
Unscored —
fence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink…
-
Unscored —
The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated user…
-
Unscored —
The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allow…
-
Unscored —
Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Wind…
-
Unscored —
The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right t…
-
Unscored —
qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink…
-
Unscored —
The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have…
-
Unscored —
sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that …
-
Unscored —
Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denia…
-
Unscored —CVE-2008-4574 Public exploit
SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possi…
-
Unscored —CVE-2008-4569 Public exploit
SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers t…
-
Unscored —CVE-2008-4570 Public exploit
SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL co…
-
Medium —
Plone Cross-site Scripting vulnerability in the LiveSearch module
Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG ta…