Archive
November 2008
Vulnerabilities first published in this month (UTC), newest first.
163 results · Clear filters · Feed
-
Unscored —
Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to exe…
-
Unscored —CVE-2008-5010 Public exploit
in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote attacker…
-
Unscored —CVE-2008-5004 Public exploit
SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arb…
-
Unscored —CVE-2008-5000 Public exploit
SQL injection vulnerability in admin/includes/news.inc.php in PHPX 3.5.16, when magic_quotes_gpc is disabled, allows re…
-
Unscored —CVE-2008-5003 Public exploit
SQL injection vulnerability in ndetail.php in Shahrood allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —
Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilk…
-
Unscored —CVE-2008-4999 Public exploit
Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping p…
-
Unscored —CVE-2008-4932 Public exploit
webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files …
-
Unscored —CVE-2008-4931 Public exploit
Cross-site scripting (XSS) vulnerability in the account module in firmCHANNEL Digital Signage 3.24, and possibly earlie…
-
Unscored —CVE-2008-4919 Public exploit
Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows rem…
-
Unscored —CVE-2008-4924 Public exploit
Multiple insecure method vulnerabilities in MW6 Technologies 1D Barcode ActiveX control (BARCODELib.MW6Barcode, Barcode…
-
Unscored —CVE-2008-4925 Public exploit
Multiple insecure method vulnerabilities in MW6 Technologies DataMatrix ActiveX control (DATAMATRIXLib.MW6DataMatrix, D…
-
Unscored —CVE-2008-4918 Public exploit
Cross-site scripting (XSS) vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 an…
-
Unscored —CVE-2008-4923 Public exploit
Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control (AZTECLib.MW6Aztec, Aztec.dll) 3.0.0…
-
Unscored —CVE-2008-4926 Public exploit
Multiple insecure method vulnerabilities in MW6 Technologies PDF417 ActiveX control (MW6PDF417Lib.PDF417, MW6PDF417.dll…
-
Unscored —
Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attacker…
-
High 7.8
Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary …
KEV Mar 3, 2022 -
Unscored —CVE-2008-4913 Public exploit
Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to delete arbitrary…
-
Unscored —
The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a …
-
Unscored —CVE-2008-4911 Public exploit
PHP remote file inclusion vulnerability in read.php in Chattaitaliano Istant-Replay allows remote attackers to execute …
-
Unscored —CVE-2008-4912 Public exploit
SQL injection vulnerability in popup_img.php in the fotogalerie module in RS MAXSOFT allows remote attackers to execute…
-
Unscored —CVE-2008-4900 Public exploit
SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute ar…
-
Unscored —CVE-2008-4896 Public exploit
Cross-site scripting (XSS) vulnerability in fichiers/add_url.php in Logz CMS 1.3.1 allows remote attackers to inject ar…
-
Unscored —CVE-2008-4895 Public exploit
SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-4906 Public exploit
SQL injection vulnerability in lyrics_song.php in the Lyrics (lyrics_menu) plugin 0.42 for e107 allows remote attackers…
-
Unscored —CVE-2008-4894 Public exploit
Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.1…
-
Unscored —CVE-2008-4907 Public exploit
The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allow…
-
Unscored —CVE-2008-4893 Public exploit
Cross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CM…
-
Unscored —CVE-2008-4901 Public exploit
SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-4902 Public exploit
SQL injection vulnerability in contact_author.php in Article Publisher Pro 1.5 allows remote attackers to execute arbit…
-
Unscored —CVE-2008-4897 Public exploit
SQL injection vulnerability in fichiers/add_url.php in Logz podcast CMS 1.3.1, when magic_quotes_gpc is disabled, allow…
-
Unscored —CVE-2008-4886 Public exploit
SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbit…
-
Unscored —CVE-2008-4881 Public exploit
SQL injection vulnerability in tr.php in YourFreeWorld Reminder Service Script allows remote attackers to execute arbit…
-
Unscored —CVE-2008-4890 Public exploit
SQL injection vulnerability in products.php in 1st News 4 Professional (PR 1) allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-4888 Public exploit
Cross-site scripting (XSS) vulnerability in error.php in NetRisk 2.0 and earlier allows remote attackers to inject arbi…
-
Unscored —CVE-2008-4884 Public exploit
SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute ar…
-
Unscored —CVE-2008-4880 Public exploit
SQL injection vulnerability in prodshow.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-4889 Public exploit
SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to ex…
-
Unscored —CVE-2008-4879 Public exploit
SQL injection vulnerability in prod.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2008-4883 Public exploit
SQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote attackers to execute arbitrary…