Archive
November 2008
Vulnerabilities first published in this month (UTC), newest first.
432 results · Feed
-
Unscored —
xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknow…
-
Unscored —
xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle (a) negative and (b) zero values durin…
-
Unscored —
The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, …
-
Unscored —
The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an…
-
Unscored —
Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.…
-
Unscored —
Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to ex…
-
Unscored —
xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in circumstances including (1) …
-
Unscored —
ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause…
-
Unscored —
Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN c…
-
Unscored —
Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial …
-
Unscored —
Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not isolate the call-approv…
-
Unscored —
Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's co…
-
Unscored —
Integer overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent attackers to cause a denia…
-
Unscored —
Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through…
-
Unscored —
Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via (1)…
-
Unscored —
The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 displays SMS …
-
Unscored —
Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TA…
-
Unscored —
The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows physic…
-
Unscored —
The default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification for (1) RTMPE and (2) …
-
Unscored —
Unspecified vulnerability in PHPCow allows remote attackers to execute arbitrary code via unknown vectors, related to a…
-
Unscored —CVE-2008-5229 Public exploit
Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8, when a Page…
-
Unscored —
The Temporal Key Integrity Protocol (TKIP) implementation in unspecified Cisco products and other vendors' products, as…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Kent Web Mart 1.61 and earlier allows remote attackers to inject arbitrary …
-
Unscored —CVE-2008-5222 Public exploit
SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2008-5225 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject a…
-
Unscored —CVE-2008-5226 Public exploit
SQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for Mambo allows remote att…
-
Unscored —CVE-2008-5223 Public exploit
SQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-5219 Public exploit
The password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for administrative authen…
-
Unscored —CVE-2008-5221 Public exploit
The account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require authentication and does no…
-
Unscored —CVE-2008-5218 Public exploit
ScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control, which allows remote …
-
Unscored —
Unrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier allows remote attackers t…
-
Unscored —CVE-2008-5212 Public exploit
SQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote attackers to execute arb…
-
Unscored —CVE-2008-5210 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5 allow remote attackers to execute arbitrary PHP cod…
-
Unscored —CVE-2008-5209 Public exploit
Directory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote attackers to read arb…
-
Unscored —CVE-2008-5214 Public exploit
Cross-site scripting (XSS) vulnerability in service/calendrier.php in ClanLite 2.2006.05.20 allows remote attackers to …
-
Unscored —CVE-2008-5216 Public exploit
SQL injection vulnerability in category_list.php in AJ Square ZeusCart 2.0 and earlier allows remote attackers to execu…
-
Unscored —CVE-2008-5208 Public exploit
SQL injection vulnerability in sub_votepic.php in the Datsogallery (com_datsogallery) module 1.6 for Joomla! allows rem…
-
Unscored —CVE-2008-5217 Public exploit
Directory traversal vulnerability in index.php in txtCMS 0.3, when register_globals is enabled and magic_quotes_gpc is …
-
Unscored —CVE-2008-5213 Public exploit
SQL injection vulnerability in featured_article.php in AJ Article 1.0 allows remote attackers to execute arbitrary SQL …