CVEs published in January 2008
499 vulnerabilities, 78 critical, 0 exploited.
- wordpressMultiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote...4.3 Medium
- wordpressWordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid...5.0 Medium
- awesometemplateengineMultiple cross-site scripting (XSS) vulnerabilities in templates/example_template.php in...4.3 Medium
- mcafee e-business serverThe administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote...8.8 High
- peters software random anti-spam imageCross-site scripting (XSS) vulnerability in Peter's Random Anti-Spam Image 0.2.4 and earlier...4.3 Medium
- xfceDouble free vulnerability in the Widget Library (libxfcegui4) in Xfce before 4.4.2 might allow...10.0 High
- xfceStack-based buffer overflow in the Panel (xfce4-panel) component in Xfce before 4.4.2 might allow...5.0 Medium
- aol aolmediaplaybackcontrol, microsoft ampx +1 moreStack-based buffer overflow in AOL AOLMediaPlaybackControl (AOLMediaPlaybackControl.exe), as used...9.3 High
- sun jreSun JRE 5.0 before update 14 allows remote attackers to cause a denial of service (Internet...4.3 Medium
- spacial audio solutions samphpwebSQL injection vulnerability in songinfo.php in SAM Broadcaster samPHPweb, possibly 4.2.2 and...7.5 High
- phprisk netriskCross-site scripting (XSS) vulnerability in index.php in NetRisk 1.9.7 and possibly earlier...4.3 Medium
- netriskSQL injection vulnerability in index.php in NetRisk 1.9.7 and possibly earlier versions allows...7.5 High
- prenotazioni on line syshotel on line systemAbsolute path traversal vulnerability in index.php in Sys-Hotel on Line System allows remote...6.4 Medium
- novell netware clientNICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute...7.2 High
- postgresql, debian linux, fedoraproject fedora +2 moreThe DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4...7.2 High
- postgresqlPostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3...6.5 Medium
- postgresql, tcl tk tk +1 moreAlgorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as...6.8 Medium
- ssh tectia client, tectia server +1 moressh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on Unix and...7.2 High
- layton technology helpboxLayton HelpBox 3.7.1 generates different responses depending on whether or not a username is...5.0 Medium
- layton technology helpboxMultiple cross-site scripting (XSS) vulnerabilities in Layton HelpBox 3.7.1 allow remote...3.5 Low
- layton technology helpboxMultiple SQL injection vulnerabilities in Layton HelpBox 3.7.1 allow (1) remote attackers to...6.5 Medium
- layton technology helpboxUnrestricted file upload vulnerability in uploadrequest.asp in Layton HelpBox 3.7.1 allows remote...6.5 Medium
- postgresql, canonical ubuntu linux, debian linux +1 more +3 moreThe regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1...4.0 Medium
- postgresql, tcl tk tk +1 moreThe regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1...6.8 Medium
- eggblogSQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to...6.8 Medium
- shop-scriptDirectory traversal vulnerability in index.php in Shop-Script 2.0 and possibly other versions...5.0 Medium
- flexbbSQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute...7.5 High
- million dollar script dollar scriptAbsolute path traversal vulnerability in index.php in Million Dollar Script 2.0.14 allows remote...5.0 Medium
- evilboardCross-site scripting (XSS) vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote...4.3 Medium
- evilboardSQL injection vulnerability in index.php in EvilBoard 0.1a (Alpha) allows remote attackers to...7.5 High
- pragma systems telnetservertelnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service...5.0 Medium
- seattle lab software slnet rf telnet serverSLnet.exe in SeattleLab SLNet RF Telnet Server 4.1.1.3758 and earlier allows user-assisted remote...4.3 Medium
- foxitsoftware wac serverHeap-based buffer overflow in Foxit WAC Server 2.1.0.910, 2.0 Build 3503, and earlier allows...10.0 High
- aruba networks mobility controllersUnspecified vulnerability in the LDAP authentication feature in Aruba Mobility Controller 2.3.6...6.8 Medium
- tutosTUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin...5.0 Medium
- tutosTUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute...10.0 High
- smallnukeSQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magic_quotes_gpc is...6.8 Medium
- motorola netoctopusThe NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the...7.2 High
- novell zenworks endpoint security managementSTEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management (ESM) 3.5, and other ESM...7.2 High
- openpegasus management serverStack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM...10.0 High
- openpegasus management server, vmware esx +1 moreBuffer overflow in OpenPegasus Management server, when compiled to use PAM and with...7.5 High
- microsoft windows 2000, windows 2003 server, windows xp +2 moreUnspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft...7.2 High
- microsoft windows xp, windows 2003 server, windows vista +2 moreUnspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista...9.3 High
- microsoft windows 2000, home server, small business server +3 more +5 moreThe kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery...7.1 High
- hughes technologies w3-msqlCross-site scripting (XSS) vulnerability in the error page in W3-mSQL allows remote attackers to...4.3 Medium
- phpUnspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown...7.5 High
- phprisk netriskPHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote...7.5 High
- spacial audio solutions sam broadcaster, samphpweb +1 morePHP remote file inclusion vulnerability in common/db.php in samPHPweb, possibly 4.2.2 and others,...7.5 High
- webportal cmsMultiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to...6.8 Medium
- webportal cms project cmsactions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of...7.5 High
- Show moreLoading…