CVEs published in January 2008
499 vulnerabilities, 78 critical, 0 exploited.
- apple iphone, iphone os +1 moreUnspecified vulnerability in Passcode Lock in Apple iPhone 1.0 through 1.1.2 allows users with...4.6 Medium
- apple quicktimeUnspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial...5.8 Medium
- article dashboard dashboardSQL injection vulnerability in admin/login.php in Article Dashboard allows remote attackers to...7.5 High
- ngircdngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a...5.0 Medium
- simple machines smfCross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows...4.3 Medium
- domphpPHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows...6.8 Medium
- domphpSQL injection vulnerability in welcome/inscription.php in DomPHP 0.81 and earlier allows remote...7.5 High
- id-commerceSQL injection vulnerability in liste.php in ID-Commerce 2.0 and earlier allows remote attackers...7.5 High
- mtcmsSQL injection vulnerability in index.php in MTCMS 2.0 and possibly earlier versions allows remote...7.5 High
- xforumSQL injection vulnerability in liretopic.php in Xforum 1.4 and possibly others allows remote...7.5 High
- x7 group chatSQL injection vulnerability in index.php in X7 Chat 2.0.5 and possibly earlier allows remote...6.0 Medium
- drupal fileshare moduleUnspecified vulnerability in the Fileshare module for Drupal allows remote authenticated users...8.5 High
- drupalCross-site scripting (XSS) vulnerability in the Devel module before 5.x-0.1 for Drupal allows...4.3 Medium
- drupal atom moduleThe Atom 4.7 before 4.7.x-1.0 and 5.x before 5.x-1.0 module for Drupal does not properly manage...5.0 Medium
- drupalCross-site scripting (XSS) vulnerability in Drupal 4.7.x and 5.x, when certain .htaccess...2.6 Low
- drupalInterpretation conflict in Drupal 4.7.x before 4.7.11 and 5.x before 5.6, when Internet Explorer...4.3 Medium
- drupalCross-site request forgery (CSRF) vulnerability in the aggregator module in Drupal 4.7.x before 4...4.3 Medium
- drupal bueditorThe editor deletion form in BUEditor 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.1, a module for...4.3 Medium
- taskfreakSQL injection vulnerability in index.php in TaskFreak! 0.6.1 and earlier allows remote...6.0 Medium
- sun sunosUnspecified vulnerability in the dotoprocs function in Sun Solaris 10 allows local users to cause...4.9 Medium
- eticketCross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers...4.3 Medium
- eticketMultiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to...7.5 High
- eticketCross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote...2.6 Low
- f5 tmosMultiple cross-site scripting (XSS) vulnerabilities in the Search function in the web management...4.3 Medium
- drupal meta tags moduleUnspecified vulnerability in the Meta Tags (aka Nodewords) 5.x-1.6 module for Drupal, when images...6.8 Medium
- ingate firewall, siparator +1 moreThe SIP module in Ingate Firewall before 4.6.1 and SIParator before 4.6.1 does not reuse SIP...5.0 Medium
- agares media phpautovideoSQL injection vulnerability in includes/articleblock.php in Agares PhpAutoVideo 2.21 allows...7.5 High
- mambo open sourceUnspecified vulnerability in the search component and module in Mambo 4.5.x and 4.6.x allows...5.0 Medium
- minimal design galleryminimal Gallery 0.8 allows remote attackers to obtain configuration information via a direct...5.0 Medium
- minimal design galleryMultiple directory traversal vulnerabilities in _mg/php/mg_thumbs.php in minimal Gallery 0.8...6.4 Medium
- php running management phprunmanCross-site scripting (XSS) vulnerability in index.php in PHP Running Management (phpRunMan)...4.3 Medium
- dansie search engineCross-site scripting (XSS) vulnerability in search.pl in Dansie Search Engine 2.7 allows remote...4.3 Medium
- matteo binda asp photo galleryMultiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote...7.5 High
- igamingcms igaming cmsSQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote...7.5 High
- wavelink media tutorialcmsSQL injection vulnerability in activate.php in TutorialCMS (aka Photoshop Tutorials) 1.02, when...6.8 Medium
- binn sbuilderSQL injection vulnerability in full_text.php in Binn SBuilder allows remote attackers to execute...7.5 High
- linux kernelVFS in the Linux kernel before 2.6.22.16, and 2.6.23.x before 2.6.23.14, performs tests of access...3.6 Low
- gforgeSQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute...7.5 High
- cherrypyCherryPy Malicious cookies allow access to files outside the session directory7.5 High
- photopost vbgalleryUnrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote...10.0 High
- microsoft visual interdevBuffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute...9.3 High
- phpwebquestPHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to...5.0 Medium
- streamaudio chaincast proxymanager activex controlBuffer overflow in an ActiveX control in ccpm_0237.dll for StreamAudio ChainCast ProxyManager...9.3 High
- ibm tivoli storage manager expressHeap-based buffer overflow in the Express Backup Server service (dsmsvc.exe) in IBM Tivoli...10.0 High
- uploadscript, uploadscript uploadimage +1 moreadmin.php in UploadScript 1.0 does not check for the original password before making a change to...10.0 High
- uploadscript uploadimage, uploadscript +1 moreadmin.php in UploadImage 1.0 does not check for the original password before making a change to a...7.5 High
- sap maxdbSAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via ...10.0 High
- ibm lotus dominoUnspecified vulnerability in Lotus Domino 7.0.2 before Fix Pack 3 allows attackers to cause a...7.8 High
- sun solarisUnspecified vulnerability in libdevinfo in Sun Solaris 10 allows local users to access files and...7.2 High
- debian linux, mandrakesoft mandrake linux, mandrake linux corporate server +1 more +3 moreThe xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause...5.0 Medium
- Show moreLoading…