Skip to content
OpenAdvisories

Archive

9 December 2008

Vulnerabilities first published on this day (UTC), newest first.

← November 2008 2008 / December /9 January 2009 →
  1. 120
  2. 26
  3. 317
  4. 4 
  5. 541
  6. 6 
  7. 7 
  8. 820
  9. 930
  10. 1041
  11. 1118
  12. 1249
  13. 131
  14. 14 
  15. 1526
  16. 1624
  17. 1772
  18. 1817
  19. 1926
  20. 20 
  21. 21 
  22. 2211
  23. 238
  24. 2410
  25. 25 
  26. 2627
  27. 27 
  28. 28 
  29. 297
  30. 3031
  31. 3126
All Critical High Medium Low Exploited only Public exploit

30 results · Feed

  • Unscored —
    CVE-2008-5408

    Buffer overflow in the data management protocol in Symantec Backup Exec for Windows Servers 11.0 (aka 11d) builds 6235 …

  • Unscored —
    CVE-2008-5409 Public exploit EPSS 11%

    Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullG…

  • Unscored —
    CVE-2008-5403

    Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to e…

  • Unscored —
    CVE-2008-5407

    Multiple unspecified vulnerabilities in the Backup Exec remote-agent logon process in Symantec Backup Exec for Windows …

  • Unscored —
    CVE-2008-5399

    Cross-site scripting (XSS) vulnerability in the listonlineusers (aka "Who's online") component in mvnForum before 1.2.1…

  • Unscored —
    CVE-2008-5400

    Multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to (1) cr…

  • Unscored —
    CVE-2008-5404

    Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Com…

  • Unscored —
    CVE-2008-5401

    Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to …

  • Unscored —
    CVE-2008-5406 Public exploit

    Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a deni…

  • Unscored —
    CVE-2008-5402

    Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2008-5405 Public exploit EPSS 47%

    Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier…

  • Unscored —
    CVE-2008-4390

    The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to …

  • Unscored —
    CVE-2008-4917

    Unspecified vulnerability in VMware Workstation 5.5.8 and earlier, and 6.0.5 and earlier 6.x versions; VMware Player 1.…

  • Unscored —
    CVE-2008-4391

    Stack-based buffer overflow in the SetSource method in the NetCamPlayerWeb11gv2 ActiveX control in NetCamPlayerWeb11gv2…

  • High —
    CVE-2008-4310 Public exploit EPSS 14%

    WEBrick Denial of Service Vulnerability

    httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request. NOTE: this issue exists because of an incomplete fix for CVE-2008-…

    webrick RubyGems
  • Unscored —
    CVE-2008-5384

    crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to …

  • Unscored —
    CVE-2008-5393

    UPR-Kernel in Ubuntu Privacy Remix (UPR) before 8.04_r1 includes kernel support for mounting RAID arrays, which might a…

  • Unscored —
    CVE-2008-5387

    Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2, when Role-Based Access Control is enabled, allows local us…

  • Unscored —
    CVE-2008-5385

    enq in bos.rte.printers in IBM AIX 6.1.0 through 6.1.2, when a print queue is defined in /etc/qconfig, allows local use…

  • Unscored —
    CVE-2008-5397

    Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local…

    tor Debian
  • Unscored —
    CVE-2008-5079 Public exploit

    net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of ser…

  • Unscored —
    CVE-2008-5398

    Tor before 0.2.0.32 does not properly process the ClientDNSRejectInternalAddresses configuration option in situations w…

    tor Debian
  • Unscored —
    CVE-2008-5394 Public exploit

    /bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the ut…

    shadow Debian
  • Unscored —
    CVE-2008-5396

    Array index error in the (1) torisa.c and (2) dahdi/tor2.c drivers in Zaptel (aka DAHDI) 1.4.11 and earlier allows loca…

  • Unscored —
    CVE-2008-5383 Public exploit

    Stack-based buffer overflow in National Instruments Electronics Workbench allows user-assisted attackers to cause a den…

  • Unscored —
    CVE-2008-5382

    Cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware …

  • Unscored —
    CVE-2008-5386

    Buffer overflow in ndp in IBM AIX 6.1.0 through 6.1.2, when the netcd daemon is running, allows local users to gain pri…

  • Unscored —
    CVE-2008-5277

    PowerDNS before 2.9.21.2 allows remote attackers to cause a denial of service (daemon crash) via a CH HINFO query.

    pdns Debian
  • Unscored —
    CVE-2008-5381

    Buffer overflow in the URL processing in ffdshow (aka ffdshow-tryout) before SVN revision 2347 allows remote attackers …

  • Unscored —
    CVE-2008-5395

    The parisc_show_stack function in arch/parisc/kernel/traps.c in the Linux kernel before 2.6.28-rc7 on PA-RISC allows lo…