Archive
December 2008
Vulnerabilities first published in this month (UTC), newest first.
528 results · Feed
-
Unscored —
Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass au…
-
Unscored —
Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a …
-
Unscored —
Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers …
-
Unscored —
wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests…
-
Unscored —
PHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php in Sandbox 1.4.1 might allow remote a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Me…
-
Unscored —CVE-2008-1094 Public exploit
SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 al…
-
Unscored —
Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote…
-
Unscored —
Sun ScApp firmware 5.18.x, 5.19.x, and 5.20.0 through 5.20.10 on Sun Fire and Netra platforms allows remote attackers t…
-
Unscored —
MediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is enabled, sometimes provi…
-
Unscored —CVE-2008-5691 Public exploit
Heap-based buffer overflow in the Phoenician Casino FlashAX ActiveX control 1.0.0.7 allows remote attackers to execute …
-
Unscored —
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1.13.x before 1.13.3, wh…
-
Unscored —
Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to …
-
Unscored —
The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01 through snv_104, allo…
-
Unscored —CVE-2008-5689 Public exploit
tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (p…
-
Unscored —
Unspecified vulnerability in the X Inter Client Exchange library (aka libICE) in Sun Solaris 8 through 10 and OpenSolar…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0 through 1.6.10, 1.12.x…
-
Unscored —
IBM Tivoli Provisioning Manager (TPM) before 5.1.1.1 IF0006, when its LDAP service is shared with other applications, d…
-
Unscored —
MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted …
-
Unscored —
Cross-site scripting (XSS) vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary…
-
Unscored —
Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c…
-
Unscored —
The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages th…
-
Unscored —
Unspecified vulnerability in Opera before 9.63 allows remote attackers to "reveal random data" via unknown vectors.
-
Unscored —
Cross-site scripting (XSS) vulnerability in Opera before 9.63 allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2008-5680 Public exploit
Multiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary code via a crafted…
-
Unscored —
Opera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which allows remote attackers to …
-
Unscored —CVE-2008-5677 Public exploit
Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is located in the web root,…
-
Unscored —CVE-2008-5678 Public exploit
Fretwell-Downing Informatics (FDI) OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive informat…
-
Unscored —
Multiple unspecified vulnerabilities in the ModSecurity (aka mod_security) module 2.5.0 through 2.5.5 for the Apache HT…
-
Unscored —
Unspecified vulnerability in IBM WebSphere Portal 6.0 before 6.0.1.5 has unknown impact and attack vectors related to "…
-
Unscored —
WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of s…
-
Unscored —CVE-2008-5665 Public exploit
SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQ…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Textpattern (aka Txp CMS) 4.0.5 allow remote attackers to inject…
-
Unscored —CVE-2008-5663 Public exploit
Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execu…
-
Unscored —
Textpattern (aka Txp CMS) 4.0.5 does not ask for the old password during a password reset, which makes it easier for re…
-
Unscored —
PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown…
-
Unscored —CVE-2008-5674 Public exploit
Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and…
-
Unscored —
Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allow…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in PHParanoid before 0.4 allow remote attackers to hijack th…
-
Unscored —CVE-2008-5667 Public exploit
The scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to cause a denial of serv…