Archive
December 2008
Vulnerabilities first published in this month (UTC), newest first.
229 results · Clear filters · Feed
-
Unscored —CVE-2008-5755 Public exploit
Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP …
-
Unscored —CVE-2008-5756 Public exploit
Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service a…
-
Unscored —CVE-2008-5754 Public exploit
Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .b…
-
Unscored —
Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to e…
-
Unscored —
Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, inclu…
-
Unscored —
Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to re…
-
Unscored —CVE-2008-5749 Public exploit
Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbit…
-
Unscored —CVE-2008-5498 Public exploit
Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the c…
-
Unscored —CVE-2008-5742 Public exploit
Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbi…
-
Unscored —CVE-2008-5737 Public exploit
SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbi…
-
Unscored —CVE-2008-5738 Public exploit
Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by …
-
Unscored —CVE-2008-5736 Public exploit
Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-…
-
Unscored —CVE-2008-5739 Public exploit
SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-5735 Public exploit
Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2008-5727 Public exploit
SQL injection vulnerability in modules/auth/password_recovery.php in AIST NetCat 3.12 and earlier, when magic_quotes_gp…
-
Unscored —
Unrestricted file upload vulnerability in lib/image_upload.php in KafooeyBlog 1.55b allows remote attackers to execute …
-
Unscored —CVE-2008-5733 Public exploit
SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to…
-
Unscored —
Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash…
-
Unscored —CVE-2008-5730 Public exploit
Multiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to have an unknown impac…
-
Unscored —CVE-2008-5728 Public exploit
Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and reg…
-
Unscored —CVE-2008-5726 Public exploit
SQL injection vulnerability in thread.php in stormBoards 1.0.1 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2008-5724 Public exploit
The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows loc…
-
Unscored —CVE-2008-5729 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to inject ar…
-
Unscored —CVE-2008-5731 Public exploit
The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows …
-
Unscored —CVE-2008-5725 Public exploit
The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows loca…
-
Unscored —CVE-2008-2382 Public exploit
The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlie…
-
Unscored —CVE-2008-5708 Public exploit
redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative u…
-
Unscored —
Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers t…
-
Unscored —CVE-2008-5712 Public exploit
The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1)…
-
Unscored —CVE-2008-5713 Public exploit
The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local user…
-
Unscored —CVE-2008-5715 Public exploit
Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via Jav…
-
Unscored —CVE-2008-5707 Public exploit
SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2008-5698 Public exploit
HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service …
-
Unscored —CVE-2008-5706 Public exploit
The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earli…
-
Unscored —CVE-2008-5697 Public exploit
The skype_tool.copy_num method in the Skype extension BETA 2.2.0.95 for Firefox allows remote attackers to write arbitr…
-
Unscored —CVE-2008-5705 Public exploit
The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earli…
-
Unscored —
Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass au…
-
Unscored —
wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests…
-
Unscored —CVE-2008-1094 Public exploit
SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 al…
-
Unscored —CVE-2008-5691 Public exploit
Heap-based buffer overflow in the Phoenician Casino FlashAX ActiveX control 1.0.0.7 allows remote attackers to execute …