Archive
5 January 2009
Vulnerabilities first published on this day (UTC), newest first.
12 results · Feed
-
Critical 9.8
The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to c…
-
Unscored —
Multiple untrusted search path vulnerabilities in pdfjam allow local users to gain privileges via a Trojan horse progra…
-
Unscored —CVE-2008-5847 Public exploit
Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent att…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Six Apart Movable Type (MT) before 4.23 allow remote attackers t…
-
Unscored —
PHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW functionality, and unintentionally disables magic_quote…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other ver…
-
Unscored —
Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission for posts to bypass in…
-
Unscored —
Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root files…
-
Unscored —CVE-2008-5839 Public exploit
Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attr…
-
Unscored —CVE-2008-5840 Public exploit
PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpical…
-
Unscored —CVE-2008-5838 Public exploit
SQL injection vulnerability in search_results.php in E-Php Scripts E-Shop (aka E-Php Shopping Cart) Shopping Cart Scrip…
-
Unscored —CVE-2008-5841 Public exploit
Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL comma…