CVEs published in January 2008
499 vulnerabilities, 78 critical, 0 exploited.
- bitweaverDirectory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to...5.0 Medium
- bitweaver r2 cmsUnrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote...7.5 High
- matpo bilder galerie bilder galeriePHP remote file inclusion vulnerability in includes/tumbnail.php in MatPo Bilder Galerie 1.1...7.5 High
- sanybee gallery galleryDirectory traversal vulnerability in index.php in SanyBee Gallery 0.1.0 and 0.1.1 allows remote...5.0 Medium
- w-agoraSQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to...7.5 High
- openafs, debian linux +1 moreRace condition in fileserver in OpenAFS 1.3.50 through 1.4.5 and 1.5.0 through 1.5.27 allows...4.3 Medium
- dovecotDovecot before 1.0.10, with certain configuration options including use of %variables, does not...6.8 Medium
- phpwebsiteCross-site scripting (XSS) vulnerability in index.php in the search module in Appalachian State...4.3 Medium
- agency4net webftpDirectory traversal vulnerability in download2.php in AGENCY4NET WEBFTP 1 allows remote attackers...6.4 Medium
- divx player, microsoft internet explorer +1 moreA certain ActiveX control in npUpload.dll in DivX Player 6.6.0 allows remote attackers to cause a...5.0 Medium
- clip-share clipshareSQL injection vulnerability in uprofile.php in ClipShare allows remote attackers to execute...7.5 High
- integry systems livecartMultiple cross-site scripting (XSS) vulnerabilities in LiveCart 1.0.1, and possibly other...4.3 Medium
- joomlaUnspecified vulnerability in Joomla! before 1.5 RC4 allows remote authenticated users to gain...7.5 High
- joomlaJoomla! before 1.5 RC4 allows remote authenticated administrators to promote arbitrary users to...6.5 Medium
- joomlaCross-site scripting (XSS) vulnerability in the com_poll component in Joomla! before 1.5 RC4...4.3 Medium
- joomlaMultiple cross-site request forgery (CSRF) vulnerabilities in Joomla! before 1.5 RC4 allow remote...6.8 Medium
- milliscriptsCross-site scripting (XSS) vulnerability in dir.php in milliscripts Redirection allows remote...4.3 Medium
- sourceforge creammonkey, greasekit +1 moreCreammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to...6.4 Medium
- iptbb team iptbbSQL injection vulnerability in index.php in IPTBB 0.5.4 and earlier allows remote attackers to...7.5 High
- march networks 3204 dvrMarch Networks DVR 3204 stores sensitive information under the web root with insufficient access...10.0 High
- adobe flash playerMultiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player allow remote attackers...4.3 Medium
- bitfluUnspecified vulnerability in the StorageFarabDb module in Bitflu before 0.42 allows user-assisted...5.8 Medium
- netbizcity faqmasterflexplusFAQMasterFlexPlus, possibly 1.5 or 1.52, stores the admin password in cleartext in a database,...6.4 Medium
- netbizcity faqmasterflexplusMultiple SQL injection vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52, allow remote...6.8 Medium
- netbizcity faqmasterflexplusMultiple cross-site scripting (XSS) vulnerabilities in FAQMasterFlexPlus, possibly 1.5 or 1.52,...4.3 Medium
- xml2owlshowCode.php in xml2owl 0.1.1 allows remote attackers to execute arbitrary commands via shell...6.8 Medium
- lscube libnemesiMultiple buffer overflows in LScube libnemesi 0.6.4-rc1 and earlier allow remote attackers to...7.5 High
- fengThe Url_init function in utils/url.c in Netembryo 0.0.4, when used by LScube Feng, allows remote...5.0 Medium
- fengInterpretation conflict in LScube Feng 0.1.15 and earlier allows remote attackers to cause a...5.0 Medium
- fengLScube Feng 0.1.15 and earlier allows remote attackers to cause a denial of service (NULL...5.0 Medium
- fengInteger overflow in the RTSP_remove_msg function in RTSP_lowlevel.c in LScube Feng 0.1.15 and...7.5 High
- fengMultiple buffer overflows in the RTSP_valid_response_msg function in RTSP_state_machine.c in...7.5 High
- novell identity managerThe Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity...5.0 Medium
- pnphpbbDirectory traversal vulnerability in printview.php in PNphpBB2 1.2i and earlier allows remote...6.8 Medium
- zeuscmsAbsolute path traversal vulnerability in ZeusCMS 0.3 and earlier might allow remote attackers to...5.0 Medium
- zeuscmsSQL injection vulnerability in security.php in ZeusCMS 0.3 and earlier allows remote attackers to...7.5 High
- jooviliDirectory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows...6.4 Medium
- jooviliDirectory traversal vulnerability in include/images.inc.php in Joovili 2.x allows remote...6.4 Medium
- atlassian jiraThe Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict...7.5 High
- atlassian jiraJIRA Enterprise Edition before 3.12.1 allows remote attackers to delete another user's shared...5.0 Medium
- atlassian jiraCross-site scripting (XSS) vulnerability in 500page.jsp in JIRA Enterprise Edition before 3.12.1...4.3 Medium
- simpleforumCross-site scripting (XSS) vulnerability in simpleforum.cgi in SimpleForum 4.6.2 and earlier...4.3 Medium
- agares media phpautovideoDirectory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows...6.8 Medium
- agares media phpautovideoPHP remote file inclusion vulnerability in admin/frontpage_right.php in Agares Media phpAutoVideo...6.8 Medium
- gnu libcdioStack-based buffer overflow in the print_iso9660_recurse function in iso-info (src/iso-info.c) in...5.0 Medium
- mongrelMongrel vulnerable to directory traversal via double-encoded sequences6.4 Medium
- mantisCross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote...4.3 Medium
- debian unpunp 1.0.12, and other versions before 1.0.14, does not properly escape file names, which might...10.0 High
- maradnsMaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers...5.0 Medium