Archive
October 2008
Vulnerabilities first published in this month (UTC), newest first.
540 results · Feed
-
Unscored —CVE-2008-4573 Public exploit
SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-1446 EPSS 46%
Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (II…
-
Unscored —CVE-2008-4038 EPSS 39%
Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server…
-
High 8.4
Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, an…
-
Unscored —CVE-2008-4023 EPSS 39%
Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, w…
-
Unscored —CVE-2008-4019 EPSS 34%
Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; O…
-
Unscored —CVE-2008-4020 EPSS 24%
Cross-site scripting (XSS) vulnerability in Microsoft Office XP SP3 allows remote attackers to inject arbitrary web scr…
-
Unscored —
Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, whi…
-
Unscored —CVE-2008-3477 EPSS 36%
Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache w…
-
Unscored —CVE-2008-3476 EPSS 31%
Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle errors associated with access to uninitialized memo…
-
Unscored —CVE-2008-3473 EPSS 32%
Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, wh…
-
Unscored —CVE-2008-3472 EPSS 33%
Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, wh…
-
Unscored —CVE-2008-3479 EPSS 44%
Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 al…
-
Medium 6.5CVE-2008-3474 EPSS 28%
Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, wh…
-
Unscored —CVE-2008-3471 EPSS 52%
Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Exce…
-
Unscored —CVE-2008-3475 EPSS 40%
Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml obj…
-
Unscored —CVE-2008-3464 Public exploit
afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP…
-
Unscored —
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 …
-
Unscored —
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 …
-
Unscored —
Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista G…
-
Unscored —CVE-2008-4558 Public exploit
Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary…
-
Unscored —
Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 all…
-
Unscored —CVE-2008-4480 EPSS 11%
Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows r…
-
Unscored —CVE-2008-4479 EPSS 10%
Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows r…
-
Unscored —
Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow rem…
-
Unscored —
plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute…
-
Unscored —
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP…
-
Unscored —
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.1, when configuring multiple authoriz…
-
Unscored —
Unspecified vulnerability in the PeopleSoft Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards …
-
Unscored —
Unspecified vulnerability in the Oracle Application Express component in Oracle Database 11.1.0.6 allows remote authent…
-
Unscored —
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.4…
-
Unscored —
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.4…
-
Unscored —
Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.…
-
Unscored —
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.4…
-
Unscored —
Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise an…
-
Unscored —
Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 …
-
Unscored —
Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite WLW 8.1SP5 allows remote attackers to…
-
Unscored —
Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows …
-
Unscored —
Unspecified vulnerability in the Oracle Data Mining component in Oracle Database 10.2.0.3 allows remote authenticated u…
-
Unscored —CVE-2008-3996 Public exploit
Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allo…