Archive
December 2008
Vulnerabilities first published in this month (UTC), newest first.
528 results · Feed
-
Unscored —
Prevx Prevx1 2, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTM…
-
Unscored —
DrWeb Anti-virus 4.44.0.09170, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of ma…
-
Unscored —
Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows re…
-
Unscored —CVE-2008-5491 Public exploit
SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-5497 Public exploit
BandSite CMS 1.1.4 allows remote attackers to bypass authentication and gain administrative access by setting the login…
-
Unscored —CVE-2008-5493 Public exploit
SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbi…
-
Unscored —CVE-2008-5489 Public exploit
SQL injection vulnerability in channel_detail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to…
-
Unscored —CVE-2008-5490 Public exploit
SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OC…
-
Unscored —CVE-2008-5494 Public exploit
SQL injection vulnerability in the Contact Information Module (com_contactinfo) component 1.0 for Joomla! allows remote…
-
Unscored —CVE-2008-5487 Public exploit
Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject…
-
Unscored —
SQL injection vulnerability in admin.php in E-topbiz Domain Shop 2 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-5486 Public exploit
SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2008-5496 Public exploit
SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to exec…
-
Unscored —
Unspecified vulnerability in the GungHo LoadPrgAx ActiveX control 1.0.0.6 and earlier allows remote attackers to execut…
-
Unscored —
Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet…
-
Unscored —
Unspecified vulnerability in DCE in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of…
-
Unscored —
Incredimail build 5853710 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibl…
-
Unscored —
Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discove…
-
Unscored —
The SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of serv…
-
Unscored —
ESet NOD32 2.70.0039.0000 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibl…
-
Unscored —
Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a con…
-
Unscored —
Opera 9.51 on Windows XP does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly…
-
Unscored —
Kaspersky Internet Security Suite 2009 does not properly handle (1) multipart/mixed e-mail messages with many MIME part…
-
Unscored —
Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbi…
-
Unscored —CVE-2008-5424 EPSS 12%
The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9…
-
Unscored —
Cross-site scripting (XSS) vulnerability in login.php in PunBB 1.3 and 1.3.1 allows remote attackers to inject arbitrar…
-
Unscored —
Norton Antivirus in Norton Internet Security 15.5.0.23 does not properly handle (1) multipart/mixed e-mail messages wit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in moderate.php in PunBB before 1.3.1 allows remote attackers to inject arbitr…
-
Unscored —CVE-2008-5431 Public exploit
Teamtek Universal FTP Server 1.0.44 allows remote attackers to cause a denial of service via (1) a certain CWD command,…
-
Unscored —
The LDBserver service in the server in CA ARCserve Backup 11.1 through 12.0 on Windows allows remote attackers to execu…
-
Unscored —CVE-2006-7235 Public exploit
Teamtek Universal FTP Server 1.0.50 allows remote attackers to cause a denial of service (daemon crash or hang) via (1)…
-
Unscored —CVE-2008-4266 EPSS 28%
Array index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3; Excel Viewer 2003 Gold and SP3; O…
-
Unscored —
Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) …
-
Unscored —CVE-2008-4268 EPSS 21%
The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory duri…
-
Unscored —CVE-2008-4264 EPSS 26%
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003 Gold and SP3; Excel Viewe…
-
Unscored —CVE-2008-4265 EPSS 25%
Microsoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet that …
-
Unscored —CVE-2008-4032 EPSS 48%
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentic…
-
Unscored —CVE-2008-4027 EPSS 34%
Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Go…