Archive
December 2008
Vulnerabilities first published in this month (UTC), newest first.
528 results · Feed
-
Unscored —
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allo…
-
Unscored —
Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash…
-
Unscored —CVE-2008-5730 Public exploit
Multiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to have an unknown impac…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Hitachi JP1/Integrated Management - Service Support 08-10 through 08-10-05,…
-
Unscored —CVE-2008-5728 Public exploit
Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and reg…
-
Unscored —CVE-2008-5726 Public exploit
SQL injection vulnerability in thread.php in stormBoards 1.0.1 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Directory traversal vulnerability in CGI RESCUE KanniBBS2000 (aka KanniBBS2000i, MiniBBS2000, and MiniBBS2000i) before …
-
Unscored —CVE-2008-5724 Public exploit
The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows loc…
-
Unscored —CVE-2008-5729 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to inject ar…
-
Unscored —CVE-2008-5731 Public exploit
The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows …
-
Unscored —CVE-2008-5725 Public exploit
The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows loca…
-
Unscored —CVE-2008-2382 Public exploit
The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlie…
-
Unscored —
Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1…
-
Unscored —CVE-2008-5708 Public exploit
redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative u…
-
Unscored —
Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1.x, 4.0.3, …
-
Unscored —
Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers t…
-
Unscored —CVE-2008-5712 Public exploit
The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1)…
-
Unscored —
xend in Xen 3.3.0 does not properly restrict a guest VM's write access within the /local/domain xenstore directory tree…
-
Unscored —CVE-2008-5713 Public exploit
The __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local user…
-
Unscored —CVE-2008-5715 Public exploit
Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via Jav…
-
Unscored —
Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which …
-
Unscored —CVE-2008-5707 Public exploit
SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQ…
-
Unscored —
general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell meta…
-
Unscored —
Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and earlier allows remote authentica…
-
Unscored —
Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote attackers to execute arbitra…
-
Unscored —
The Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll allows remote attackers t…
-
Unscored —
Use-after-free vulnerability in the Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_Activ…
-
Unscored —
Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 th…
-
Unscored —
Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c…
-
Unscored —
SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres databa…
-
Unscored —CVE-2008-5698 Public exploit
HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service …
-
Unscored —
Array index error in arch/mips/kernel/scall64-o32.S in the Linux kernel before 2.6.28-rc8 on 64-bit MIPS platforms allo…
-
Unscored —
gpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on the (…
-
Unscored —CVE-2008-5706 Public exploit
The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earli…
-
Unscored —
The name service cache daemon (nscd) in Sun Solaris 10 and OpenSolaris snv_50 through snv_104 does not properly check p…
-
Unscored —
Buffer underflow in the ibwdt_ioctl function in drivers/watchdog/ib700wdt.c in the Linux kernel before 2.6.28-rc1 might…
-
Unscored —
src/unit_test.c in gpsdrive (aka gpsdrive-scripts) 2.10~pre4 might allow local users to overwrite arbitrary files via a…
-
Unscored —
libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users t…
-
Unscored —CVE-2008-5697 Public exploit
The skype_tool.copy_num method in the Skype extension BETA 2.2.0.95 for Firefox allows remote attackers to write arbitr…
-
Unscored —CVE-2008-5705 Public exploit
The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earli…