CVEs published in January 2008

499 vulnerabilities, 78 critical, 0 exploited.

• linux kernel cp, when running with an option to preserve symlinks on multiple OSes, allows local, user... CVE-2007-4998 Fix available 6.9 MediumJanuary 31, 2008
• lumension security patchlink update, novell zenworks patch management update agent +1 more PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for... CVE-2008-0525 4.6 MediumJanuary 31, 2008
• yamaha rt107e, rt52pro, rt56v +15 more +17 more Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT... CVE-2008-0524 7.5 HighJanuary 31, 2008
• softcart Multiple cross-site scripting (XSS) vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow... CVE-2008-0523 4.3 MediumJanuary 31, 2008
• hal networks perl cgi cart, php cart, shop hal v1 +2 more Cross-site scripting (XSS) vulnerability in multiple Hal Networks shopping-cart products allows... CVE-2008-0522 4.3 MediumJanuary 31, 2008
• bubbling library library Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to... CVE-2008-0521 Public exploit 5.0 MediumJanuary 31, 2008
• wordpress wassup plugin Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for... CVE-2008-0520 Public exploit 7.5 HighJanuary 31, 2008
• joomla com jokes SQL injection vulnerability in index.php in the Atapin Jokes (com_jokes) 1.0 component for Mambo... CVE-2008-0519 Public exploit 7.5 HighJanuary 31, 2008
• joomla com recipes SQL injection vulnerability in index.php in the Recipes (com_recipes) 1.00 component for Mambo... CVE-2008-0518 Public exploit 7.5 HighJanuary 31, 2008
• darko selesi estateagent, joomla, mambo +2 more SQL injection vulnerability in index.php in the Darko Selesi EstateAgent (com_estateagent) 0.1... CVE-2008-0517 Public exploit 7.5 HighJanuary 31, 2008
• sqlite manager manager PHP remote file inclusion vulnerability in spaw/dialogs/confirm.php in SQLiteManager 1.2.0 allows... CVE-2008-0516 9.3 HighJanuary 31, 2008
• joomla musepoes component SQL injection vulnerability in index.php in the musepoes (com_musepoes) component for Mambo and... CVE-2008-0515 Public exploit 7.5 HighJanuary 31, 2008
• joomla glossary SQL injection vulnerability in index.php in the Glossary (com_glossary) 2.0 component for Mambo... CVE-2008-0514 Public exploit 7.5 HighJanuary 31, 2008
• phpcms Directory traversal vulnerability in parser/include/class.cache_phpcms.php in phpCMS 1.2.2 allows... CVE-2008-0513 Public exploit 7.8 HighJanuary 31, 2008
• joomla com fq SQL injection vulnerability in index.php in the fq (com_fq) component for Mambo and Joomla!... CVE-2008-0512 Public exploit 7.5 HighJanuary 31, 2008
• joomla com mamml SQL injection vulnerability in index.php in the MaMML (com_mamml) component for Mambo and Joomla!... CVE-2008-0511 Public exploit 7.5 HighJanuary 31, 2008
• mambo, joomla com newsletter +1 more SQL injection vulnerability in index.php in the Newsletter (com_newsletter) component for Mambo 4... CVE-2008-0510 Public exploit 7.5 HighJanuary 31, 2008
• ibm aix Multiple buffer overflows in IBM AIX 4.3 allow remote attackers to cause a denial of service ... CVE-2008-0509 4.4 MediumJanuary 31, 2008
• wordpress permalinks migration plugin Cross-site request forgery (CSRF) vulnerability in deans_permalinks_migration.php in the Dean's... CVE-2008-0508 6.8 MediumJanuary 31, 2008
• wordpress adserve SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote... CVE-2008-0507 Public exploit 7.5 HighJanuary 31, 2008
• coppermine photo gallery include/imageObjectIM.class.php in Coppermine Photo Gallery (CPG) before 1.4.15, when the... CVE-2008-0506 Public exploit EPSS 58.9% 6.8 MediumJanuary 31, 2008
• coppermine photo gallery Multiple cross-site scripting (XSS) vulnerabilities in docs/showdoc.php in Coppermine Photo... CVE-2008-0505 4.3 MediumJanuary 31, 2008
• coppermine-gallery coppermine photo gallery Multiple SQL injection vulnerabilities in Coppermine Photo Gallery (CPG) before 1.4.15 allow... CVE-2008-0504 Public exploit 6.5 MediumJanuary 31, 2008
• netwerk smart publisher Eval injection vulnerability in admin/op/disp.php in Netwerk Smart Publisher 1.0.1 allows remote... CVE-2008-0503 Public exploit EPSS 23.2% 6.8 MediumJanuary 31, 2008
• connectix boards PHP remote file inclusion vulnerability in templates/Official/part_userprofile.php in Connectix... CVE-2008-0502 Public exploit 7.5 HighJanuary 31, 2008
• pierreegougelet gfl sdk, nconvert, xnview +2 more Stack-based buffer overflow in Pierre-emmanuel Gougelet (1) XnView 1.91 and 1.92, (2) NConvert 4... CVE-2008-0064 9.3 HighJanuary 31, 2008
• sourceforge phpmyclub Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to include and... CVE-2008-0501 Public exploit 5.8 MediumJanuary 30, 2008
• mamboxchange laithai Multiple unspecified vulnerabilities in Mambo LaiThai 4.5.5 have unknown impact and attack... CVE-2008-0500 10.0 HighJanuary 30, 2008
• mamboxchange laithai SQL injection vulnerability in Mambo LaiThai 4.5.5 allows remote attackers to execute arbitrary... CVE-2008-0499 7.5 HighJanuary 30, 2008
• bigware shop SQL injection vulnerability in main_bigware_53.tpl.php in Bigware Shop 2.0 allows remote... CVE-2008-0498 Public exploit 7.5 HighJanuary 30, 2008
• nucleus cms cms Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote... CVE-2008-0497 Public exploit 4.3 MediumJanuary 30, 2008
• ampjuke Cross-site scripting (XSS) vulnerability in index.php in AmpJuke 0.7.0 allows remote attackers to... CVE-2008-0496 Public exploit 4.3 MediumJanuary 30, 2008
• ibm hardware management console Unspecified vulnerability in the Pegasus CIM Server in IBM Hardware Management Console (HMC) 7 R3... CVE-2008-0495 7.8 HighJanuary 30, 2008
• endian firewall Cross-site scripting (XSS) vulnerability in vpnum/userslist.php in Endian Firewall 2.1.2 allows... CVE-2008-0494 4.3 MediumJanuary 30, 2008
• irfanview fpx.dll 3.9.8.0 in the FlashPix plugin for IrfanView 4.10 allows remote attackers to execute... CVE-2008-0493 Public exploit 9.3 HighJanuary 30, 2008
• persits xupload Stack-based buffer overflow in the Persits.XUpload.2 ActiveX control in XUpload.ocx 3.0.0.4 and... CVE-2008-0492 Public exploit EPSS 29.5% 6.8 MediumJanuary 30, 2008
• fgallery project fgallery SQL injection vulnerability in fim_rss.php in the fGallery 2.4.1 plugin for WordPress allows... CVE-2008-0491 Public exploit 7.5 HighJanuary 30, 2008
• wordpress wp cal plugin SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress... CVE-2008-0490 Public exploit 7.5 HighJanuary 30, 2008
• clansphere Directory traversal vulnerability in install.php in Clansphere 2007.4.4 allows remote attackers... CVE-2008-0489 Public exploit 5.0 MediumJanuary 30, 2008
• vb marketing marketing Directory traversal vulnerability in tseekdir.cgi in VB Marketing allows remote attackers to... CVE-2008-0488 Public exploit 7.5 HighJanuary 30, 2008
• the net guys aspired2protect Multiple SQL injection vulnerabilities in login.asp in ASPired2Protect allow remote attackers to... CVE-2008-0487 Public exploit 7.5 HighJanuary 30, 2008
• web wiz rich text editor Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz Rich Text Editor 4.0 allows... CVE-2008-0481 Public exploit 5.0 MediumJanuary 29, 2008
• web wiz forums Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote... CVE-2008-0480 Public exploit 5.0 MediumJanuary 29, 2008
• web wiz newspad Directory traversal vulnerability in RTE_file_browser.asp in Web Wiz NewsPad 1.02 allows remote... CVE-2008-0479 Public exploit 5.0 MediumJanuary 29, 2008
• setcms Directory traversal vulnerability in index.php in SetCMS 3.6.5 allows remote attackers to include... CVE-2008-0478 Public exploit 6.8 MediumJanuary 29, 2008
• move networks inc media player Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1... CVE-2008-0477 Public exploit EPSS 14.8% 10.0 HighJanuary 29, 2008
• manageengine applications manager ManageEngine Applications Manager 8.1 build 8100 does not check authentication for monitorType.do... CVE-2008-0476 6.4 MediumJanuary 29, 2008
• manageengine applications manager ManageEngine Applications Manager 8.1 build 8100 allows remote attackers to obtain sensitive... CVE-2008-0475 5.0 MediumJanuary 29, 2008
• manageengine applications manager Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 8.1... CVE-2008-0474 Public exploit 4.3 MediumJanuary 29, 2008
• web wiz rich text editor RTE_popup_save_file.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload (1) ... CVE-2008-0473 Public exploit 6.4 MediumJanuary 29, 2008
• Show olderLoading…