Archive
19 December 2008
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass au…
-
Unscored —
Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a …
-
Unscored —
Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers …
-
Unscored —
wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests…
-
Unscored —
PHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php in Sandbox 1.4.1 might allow remote a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Me…
-
Unscored —CVE-2008-1094 Public exploit
SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 al…
-
Unscored —
Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote…
-
Unscored —
Sun ScApp firmware 5.18.x, 5.19.x, and 5.20.0 through 5.20.10 on Sun Fire and Netra platforms allows remote attackers t…
-
Unscored —
MediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is enabled, sometimes provi…
-
Unscored —CVE-2008-5691 Public exploit
Heap-based buffer overflow in the Phoenician Casino FlashAX ActiveX control 1.0.0.7 allows remote attackers to execute …
-
Unscored —
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, wh…
-
Unscored —
Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to …
-
Unscored —
The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01 through snv_104, allo…
-
Unscored —CVE-2008-5689 Public exploit
tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (p…
-
Unscored —
Unspecified vulnerability in the X Inter Client Exchange library (aka libICE) in Sun Solaris 8 through 10 and OpenSolar…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x…
-
Unscored —
IBM Tivoli Provisioning Manager (TPM) before 5.1.1.1 IF0006, when its LDAP service is shared with other applications, d…
-
Unscored —
MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted …
-
Unscored —
Cross-site scripting (XSS) vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary…
-
Unscored —
Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c…
-
Unscored —
The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages th…
-
Unscored —
Unspecified vulnerability in Opera before 9.63 allows remote attackers to "reveal random data" via unknown vectors.
-
Unscored —
Cross-site scripting (XSS) vulnerability in Opera before 9.63 allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2008-5680 Public exploit
Multiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary code via a crafted…
-
Unscored —
Opera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which allows remote attackers to …