25 November 2008

25 results · Feed

• Unscored —
  CVE-2008-1586

  ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause…

  Nov 25, 2008
• Unscored —
  CVE-2008-4227

  Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN c…

  Nov 25, 2008
• Unscored —
  CVE-2008-4225

  Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial …

  libxml2 Debian
  Nov 25, 2008
• Unscored —
  CVE-2008-4233

  Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not isolate the call-approv…

  Nov 25, 2008
• Unscored —
  CVE-2008-4232

  Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's co…

  Nov 25, 2008
• Unscored —
  CVE-2008-4226

  Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denia…

  libxml2 Debian
  Nov 25, 2008
• Unscored —
  CVE-2008-4229

  Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through…

  Nov 25, 2008
• Unscored —
  CVE-2008-4829

  Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via (1)…

  streamripper Debian
  Nov 25, 2008
• Unscored —
  CVE-2008-4230

  The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 displays SMS …

  Nov 25, 2008
• Unscored —
  CVE-2008-4231

  Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TA…

  Nov 25, 2008
• Unscored —
  CVE-2008-4228

  The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows physic…

  Nov 25, 2008
• Unscored —
  CVE-2008-5109

  The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) …

  Nov 25, 2008
• Unscored —
  CVE-2008-5227

  Unspecified vulnerability in PHPCow allows remote attackers to execute arbitrary code via unknown vectors, related to a…

  Nov 25, 2008
• Unscored —
  CVE-2008-5229 Public exploit

  Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allo…

  Nov 25, 2008
• Unscored —
  CVE-2008-5228

  Cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8, when a Page…

  Nov 25, 2008
• Unscored —
  CVE-2008-5230

  The Temporal Key Integrity Protocol (TKIP) implementation in unspecified Cisco products and other vendors' products, as…

  Nov 25, 2008
• Unscored —
  CVE-2008-5224

  Cross-site scripting (XSS) vulnerability in Kent Web Mart 1.61 and earlier allows remote attackers to inject arbitrary …

  Nov 25, 2008
• Unscored —
  CVE-2008-5222 Public exploit

  SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via t…

  Nov 25, 2008
• Unscored —
  CVE-2008-5225 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject a…

  Nov 25, 2008
• Unscored —
  CVE-2008-5226 Public exploit

  SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote att…

  Nov 25, 2008
• Unscored —
  CVE-2008-5223 Public exploit

  SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL comman…

  Nov 25, 2008
• Unscored —
  CVE-2008-5219 Public exploit

  The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authen…

  Nov 25, 2008
• Unscored —
  CVE-2008-5221 Public exploit

  The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does no…

  Nov 25, 2008
• Unscored —
  CVE-2008-5218 Public exploit

  ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote …

  Nov 25, 2008
• Unscored —
  CVE-2008-5220 Public exploit EPSS 14%

  Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier allows remote attackers t…

  Nov 25, 2008