Archive
January 2009
Vulnerabilities first published in this month (UTC), newest first.
466 results · Feed
-
Unscored —
Unspecified vulnerability in the nfs4rename_persistent_fh function in the NFS 4 (aka NFSv4) client in the kernel in Sun…
-
Unscored —
Interaction error in xdg-open allows remote attackers to execute arbitrary code by sending a file with a dangerous MIME…
-
Unscored —
Multiple unspecified vulnerabilities in Intel system software for Trusted Execution Technology (TXT) allow attackers to…
-
Unscored —
Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Lin…
-
Unscored —
Sun GridEngine 5.3 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, whic…
-
Unscored —
ZXID 0.29 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remot…
-
Unscored —
Gale 0.99 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows …
-
Unscored —
Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows rem…
-
Unscored —
Belgian eID middleware (eidlib) 2.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyF…
-
Unscored —
OpenEvidence 1.0.6 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, whic…
-
Unscored —
OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows rem…
-
Unscored —
NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_Verif…
-
Unscored —
BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify funct…
-
Unscored —CVE-2008-5856 Public exploit
Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrar…
-
Unscored —CVE-2008-5860 Public exploit
Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when register_globals i…
-
Unscored —CVE-2008-5854 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attacke…
-
Unscored —CVE-2008-5855 Public exploit
myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which …
-
Unscored —CVE-2008-5852 Public exploit
Emefa Guestbook 3.0 stores sensitive information under the web root with insufficient access control, which allows remo…
-
Unscored —CVE-2008-5862 Public exploit
Directory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 build 2132 allows remote attackers to read arbitr…
-
Unscored —CVE-2008-5864 Public exploit
SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arb…
-
Unscored —CVE-2008-5851 Public exploit
SQL injection vulnerability in index.php in My PHP Baseball Stats (MyPBS) allows remote attackers to execute arbitrary …
-
Unscored —CVE-2008-5853 Public exploit
Chilek Content Management System (aka ChiCoMaS) 2.0.4 and earlier stores sensitive information under the web root with …
-
Unscored —CVE-2008-5859 Public exploit
SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when register_globals is enabled and mag…
-
Unscored —CVE-2008-5863 Public exploit
SQL injection vulnerability in locator.php in the Userlocator module 3.0 for Woltlab Burning Board (wBB) allows remote …
-
Unscored —
The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privil…
-
Unscored —
The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obta…
-
Unscored —CVE-2008-5865 Public exploit
SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 …
-
Unscored —CVE-2008-5861 Public exploit
Directory traversal vulnerability in source.php in FreeLyrics 1.0 allows remote attackers to read arbitrary files via d…
-
Unscored —
Check Point VPN-1 R55, R65, and other versions, when Port Address Translation (PAT) is used, allows remote attackers to…
-
Critical 9.8
The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to c…
-
Unscored —
Multiple untrusted search path vulnerabilities in pdfjam allow local users to gain privileges via a Trojan horse progra…
-
Unscored —CVE-2008-5847 Public exploit
Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent att…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Six Apart Movable Type (MT) before 4.23 allow remote attackers t…
-
Unscored —
PHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW functionality, and unintentionally disables magic_quote…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other ver…
-
Unscored —
Six Apart Movable Type (MT) before 4.23 allows remote authenticated users with create permission for posts to bypass in…
-
Unscored —
Samba 3.2.0 through 3.2.6, when registry shares are enabled, allows remote authenticated users to access the root files…
-
Unscored —CVE-2008-5839 Public exploit
Buffer overflow in Foxmail 6.5 allows remote attackers to execute arbitrary code via a long mailto URI in the HREF attr…
-
Unscored —CVE-2008-5840 Public exploit
PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpical…