10 November 2008

33 results · Feed

• Unscored —
  CVE-2008-5036 Public exploit EPSS 41%

  Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to exec…

  vlc Debian
  Nov 10, 2008
• Unscored —
  CVE-2008-4387 EPSS 16%

  Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to …

  Nov 10, 2008
• Unscored —
  CVE-2008-5032 Public exploit EPSS 11%

  Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to exe…

  vlc Debian
  Nov 10, 2008
• Unscored —
  CVE-2008-5035

  The Resource Monitoring and Control (RMC) daemon in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 and 3.3.0…

  Nov 10, 2008
• Unscored —
  CVE-2008-5029

  The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive…

  Nov 10, 2008
• Unscored —
  CVE-2008-5034

  master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp…

  Nov 10, 2008
• Unscored —
  CVE-2008-5033

  The chip_command function in drivers/media/video/tvaudio.c in the Linux kernel 2.6.25.x before 2.6.25.19, 2.6.26.x befo…

  Nov 10, 2008
• Unscored —
  CVE-2008-5030

  Heap-based buffer overflow in the cddb_read_disc_data function in cddb.c in libcdaudio 0.99.12p2 allows remote CDDB ser…

  libcdaudio Debian
  Nov 10, 2008
• Unscored —
  CVE-2008-5031

  Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown…

  Nov 10, 2008
• Unscored —
  CVE-2008-5026

  Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual use…

  Nov 10, 2008
• Unscored —
  CVE-2008-5011

  Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino al…

  Nov 10, 2008
• Unscored —
  CVE-2008-5010 Public exploit

  in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote attacker…

  Nov 10, 2008
• Unscored —
  CVE-2008-5009

  Race condition in the s_xout kernel module in Sun Solstice X.25 9.2, when running on a multiple CPU machine, allows loc…

  Nov 10, 2008
• Unscored —
  CVE-2008-5028

  Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows …

  Nov 10, 2008
• Unscored —
  CVE-2008-5027

  The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to byp…

  Nov 10, 2008
• Unscored —
  CVE-2008-4818

  Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject …

  Nov 10, 2008
• Unscored —
  CVE-2008-4820

  Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows al…

  Nov 10, 2008
• Unscored —
  CVE-2008-4823

  Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject …

  Nov 10, 2008
• Unscored —
  CVE-2008-4821

  Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which …

  Nov 10, 2008
• Unscored —
  CVE-2008-4819

  Unspecified vulnerability in Adobe Flash Player 9.0.124.0 and earlier makes it easier for remote attackers to conduct D…

  Nov 10, 2008
• Unscored —
  CVE-2008-4831

  Unspecified vulnerability in Adobe ColdFusion 8 and 8.0.1 and ColdFusion MX 7.0.2 allows local users to bypass sandbox …

  Nov 10, 2008
• Unscored —
  CVE-2008-4915

  The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 an…

  Nov 10, 2008
• Unscored —
  CVE-2008-4281

  Directory traversal vulnerability in VMWare ESXi 3.5 before ESXe350-200810401-O-UG and ESX 3.5 before ESX350-200810201-…

  Nov 10, 2008
• Unscored —
  CVE-2008-4822

  Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to byp…

  Nov 10, 2008
• Unscored —
  CVE-2008-5004 Public exploit

  SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arb…

  Nov 10, 2008
• Unscored —
  CVE-2008-5008

  Buffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4, when "extreme low conv…

  libsamplerate Debian
  Nov 10, 2008
• Unscored —
  CVE-2008-5007

  create_lazarus_export_tgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink …

  lazarus Debian
  Nov 10, 2008
• Unscored —
  CVE-2008-5001

  Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0…

  Nov 10, 2008
• Unscored —
  CVE-2008-5000 Public exploit

  SQL injection vulnerability in admin/includes/news.inc.php in PHPX 3.5.16, when magic_quotes_gpc is disabled, allows re…

  Nov 10, 2008
• Unscored —
  CVE-2008-5003 Public exploit

  SQL injection vulnerability in ndetail.php in Shahrood allows remote attackers to execute arbitrary SQL commands via th…

  Nov 10, 2008
• Unscored —
  CVE-2008-5002 Public exploit EPSS 41%

  Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilk…

  Nov 10, 2008
• Unscored —
  CVE-2008-5005

  Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University o…

  uw-imap Debian
  Nov 10, 2008
• Unscored —
  CVE-2008-5006

  smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a den…

  uw-imap Debian
  Nov 10, 2008