Archive
December 2008
Vulnerabilities first published in this month (UTC), newest first.
528 results · Feed
-
Unscored —CVE-2008-4025 EPSS 33%
Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP…
-
Unscored —CVE-2008-4260 EPSS 19%
Microsoft Internet Explorer 7 sometimes attempts to access a deleted object, which allows remote attackers to execute a…
-
Unscored —CVE-2008-4031 EPSS 23%
Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 …
-
Unscored —CVE-2008-4256 EPSS 21%
The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8…
-
Unscored —CVE-2008-4024 EPSS 29%
Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code vi…
-
Unscored —CVE-2008-4259 EPSS 33%
Microsoft Internet Explorer 7 sometimes attempts to access uninitialized memory locations, which allows remote attacker…
-
Unscored —CVE-2008-4258 EPSS 18%
Microsoft Internet Explorer 5.01 SP4 and 6 SP1 does not properly validate parameters during calls to navigation methods…
-
Unscored —CVE-2008-4261 EPSS 30%
Stack-based buffer overflow in Microsoft Internet Explorer 5.01 SP4, 6 SP1 on Windows 2000, and 6 on Windows XP and Ser…
-
Unscored —CVE-2008-4254 EPSS 22%
Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 an…
-
Unscored —CVE-2008-4028 EPSS 38%
Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 …
-
Unscored —CVE-2008-4252 EPSS 21%
The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not prope…
-
Unscored —CVE-2008-4026 EPSS 23%
Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compat…
-
Unscored —CVE-2008-4269 EPSS 21%
The search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and Server 2008 uses untrust…
-
Unscored —CVE-2008-4253 EPSS 21%
The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage…
-
Unscored —
The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows …
-
Unscored —CVE-2008-4837 EPSS 37%
Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2…
-
Unscored —CVE-2008-4030 EPSS 23%
Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 …
-
Unscored —CVE-2008-3010 EPSS 15%
Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 i…
-
Critical 9.8CVE-2008-3465 EPSS 14%
Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vis…
-
Unscored —CVE-2008-3009 EPSS 16%
Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and…
-
Unscored —CVE-2008-2249 EPSS 31%
Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and…
-
Unscored —
Stack-based buffer overflow in SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center 5.2 SP5 and 6.…
-
Unscored —CVE-2008-5418 Public exploit
Directory traversal vulnerability in login.php in the PunPortal module before 2.0 for PunBB allows remote attackers to …
-
Unscored —
Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop…
-
Unscored —
HP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha platform uses world-writable permissions for the OSIT$NAMES lo…
-
Unscored —
The SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center before 6.1 does not properly authenticate…
-
Unscored —
The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rule…
-
Unscored —
Unspecified vulnerability in the Feature Pack for Web Services in the Web Services Security component in IBM WebSphere …
-
Unscored —
The PK11_SESSION cache in the OpenSSL PKCS#11 engine in Sun Solaris 10 does not maintain reference counts for operation…
-
Unscored —CVE-2008-5304 Public exploit
Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script o…
-
Unscored —
PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows at…
-
Unscored —
IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over "unsecured TCP," which makes it easier f…
-
Unscored —
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows has unknown impact and …
-
Unscored —CVE-2008-5305 Public exploit
Eval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary Perl code via the %SEAR…
-
Unscored —
Buffer overflow in the data management protocol in Symantec Backup Exec for Windows Servers 11.0 (aka 11d) builds 6235 …
-
Unscored —
Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullG…
-
Unscored —
Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to e…
-
Unscored —
Multiple unspecified vulnerabilities in the Backup Exec remote-agent logon process in Symantec Backup Exec for Windows …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the listonlineusers (aka "Who's online") component in mvnForum before 1.2.1…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to (1) cr…