CVEs published in January 2008
499 vulnerabilities, 78 critical, 0 exploited.
- woltlab burning boardCross-site request forgery (CSRF) vulnerability in modcp.php in Woltlab Burning Board (wBB) 2.3.6...4.3 Medium
- phpbbCross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote...4.3 Medium
- comodo antivirus, microsoft activex +1 moreA certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary...9.3 High
- tiger php news system php news systemSQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows...7.5 High
- flinxSQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to...7.5 High
- linux kernelThe chrp_show_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when...7.8 High
- firebirdsql firebirdStack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow...10.0 High
- firebirdsql firebirdInteger overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2...7.8 High
- ge fanuc cimplicityHeap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0...10.0 High
- ge fanuc proficy real-time information portalUnrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and...7.5 High
- ge proficy real-time information portalGE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication,...9.8 Critical
firebird2.0Debianfirebird2.0 - remote denial of serviceNo score- webwiz web wiz forums, web wiz newspad, web wiz rich text editor +2 moreWeb Wiz RTE_file_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07,...5.0 Medium
- hfs http file serverHTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage...5.0 Medium
- hfs http file serverCross-site scripting (XSS) vulnerability in HTTP File Server (HFS) before 2.2c allows remote...4.3 Medium
- hfs http file serverHTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log...6.4 Medium
- hfs http file serverHTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during...5.0 Medium
- hfs http file serverHTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allows remote...5.0 Medium
- hfs http file serverMultiple directory traversal vulnerabilities in HTTP File Server (HFS) before 2.2c, when account...10.0 High
- icu-project international components for unicodeHeap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International...9.3 High
- icu-project international components for unicodelibicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process...6.8 Medium
- pulseaudioThe pa_drop_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return...7.2 High
- seagullproject.org seagullDirectory traversal vulnerability in optimizer.php in Seagull 0.6.3 allows remote attackers to...5.0 Medium
- absofort aconon mail enterprise sqlDirectory traversal vulnerability in archiv.cgi in absofort aconon Mail 2007 Enterprise SQL 11.7...5.0 Medium
- drupal workflowCross-site scripting (XSS) vulnerability in the Workflow 4.7.x before 4.7.x-1.2 and 5.x before 5...4.3 Medium
- drupal, drupal archive module +1 moreCross-site scripting (XSS) vulnerability in the Archive 5.x before 5.x-1.8 module for Drupal...4.3 Medium
- francisco burzi php-nukeSQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier,...6.8 Medium
- mediawiki, mediawiki botquery ext, microsoft internet explorer +2 moreCross-site scripting (XSS) vulnerability in api.php in (1) MediaWiki 1.11 through 1.11.0rc1, 1.10...4.3 Medium
- liquidsilvercmsDirectory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when...6.8 Medium
- slaed cmsDirectory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote...6.8 Medium
- apache http server, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreCRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and...2.6 Low
- apache http server, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreCross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server...4.3 Medium
- microsoft internet explorer, skype technologies skype +1 moreCross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and...9.3 High
- ibm aixBuffer overflow in the pioout program in printers.rte in IBM AIX 5.2, 5.3, and 6.1 allows local...7.2 High
- phpcurl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context...5.0 Medium
- easysitenetwork recipe website scriptSQL injection vulnerability in list.php in Easysitenetwork Recipe allows remote attackers to...6.8 Medium
- sitemanDirectory traversal vulnerability in articles.php in Siteman 1.1.9 allows remote attackers to...5.0 Medium
- pacercmsMultiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to...7.5 High
- blog cms cmsMultiple PHP remote file inclusion vulnerabilities in BLOG:CMS 4.2.1.c allow remote attackers to...7.5 High
- rocksalt international vp aspSQL injection vulnerability in paypalresult.asp in VP-ASP Shopping Cart 6.50 and earlier allows...7.5 High
- cybergl dev team phpsearchPHP remote file inclusion vulnerability in utils/class_HTTPRetriever.php in phpSearch allows...7.5 High
- foojan php weblogSQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to...7.5 High
- julian pawlowski lulieblogSQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute...7.5 High
- elogThe replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote...5.0 Medium
- elogCross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote...4.3 Medium
- lycos fileuploader.dllHeap-based buffer overflow in the FileUploader.FUploadCtl.1 ActiveX control in FileUploader.dll 2...10.0 High
- small axe solutions weblogPHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows...7.5 High
- ibm tivoli business service managerIBM Tivoli Business Service Manager (TBSM) 4.1.1 stores passwords in cleartext (1) after external...2.1 Low
- alstrasoft forum pay per post exchangeAlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier...5.0 Medium
- deluxebbCross-site scripting (XSS) vulnerability in templates/default/admincp/attachments_header.php in...4.3 Medium
- Show moreLoading…