CVEs published in February 2008

524 vulnerabilities, 79 critical, 2 exploited.

• xine xine-lib, xine-plugin +1 more Buffer overflow in demuxers/demux_asf.c (aka the ASF demuxer) in the xineplug_dmx_asf.so plugin... CVE-2008-1110 Public exploit EPSS 10.4% 6.8 MediumFebruary 29, 2008
• freedesktop dbus, fedoraproject fedora, mandrakesoft mandrake linux +1 more +3 more dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes... CVE-2008-0595 Fix available 4.6 MediumFebruary 29, 2008
• urulu SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to... CVE-2008-0385 7.5 HighFebruary 29, 2008
• mozilla seamonkey, thunderbird +1 more Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8... CVE-2008-0304 7.5 HighFebruary 29, 2008
• symantec backup exec for windows server The PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in... CVE-2007-6017 5.1 MediumFebruary 29, 2008
• symantec backup exec for windows server Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in... CVE-2007-6016 Public exploit EPSS 50.4% 9.3 HighFebruary 29, 2008
• sun solaris, sunos +1 more Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and... CVE-2008-1095 6.8 MediumFebruary 29, 2008
• opera browser Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site... CVE-2008-1082 4.3 MediumFebruary 29, 2008
• opera browser Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images... CVE-2008-1081 6.8 MediumFebruary 29, 2008
• opera browser Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a... CVE-2008-1080 6.8 MediumFebruary 29, 2008
• gentoo linux expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows... CVE-2008-1078 7.2 HighFebruary 29, 2008
• canon imagepress, imagerunner, i-sensys +9 more +11 more The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow... CVE-2008-0303 6.4 MediumFebruary 29, 2008
• mamboportal.com simpleboard SQL injection vulnerability in index.php in the Simpleboard (com_simpleboard) 1.0.3 Stable... CVE-2008-1077 Public exploit 7.5 HighFebruary 29, 2008
• interspire shopping cart Cross-site scripting (XSS) vulnerability in search.php in Interspire Shopping Cart 1.x allows... CVE-2008-1076 4.3 MediumFebruary 29, 2008
• maianscriptworld maian cart Cross-site scripting (XSS) vulnerability in index.php in Maian Cart 1.1 allows remote attackers... CVE-2008-1075 4.3 MediumFebruary 29, 2008
• group e e PHP remote file inclusion vulnerability in lib/head_auth.php in GROUP-E 1.6.41 allows remote... CVE-2008-1074 Public exploit EPSS 36.9% 6.8 MediumFebruary 29, 2008
• internet security systems scanner Cross-site scripting (XSS) vulnerability in the report interface in Internet Security Systems ... CVE-2008-1073 4.3 MediumFebruary 29, 2008
• wireshark The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu... CVE-2008-1072 Fix available 4.7 MediumFebruary 28, 2008
• wireshark The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers... CVE-2008-1071 Fix available 4.3 MediumFebruary 28, 2008
• wireshark The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers... CVE-2008-1070 Fix available 5.0 MediumFebruary 28, 2008
• quantum game library game library Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote... CVE-2008-1069 Public exploit EPSS 28.9% 6.8 MediumFebruary 28, 2008
• portail web php web php Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow... CVE-2008-1068 Public exploit 6.8 MediumFebruary 28, 2008
• phpqladmin Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to... CVE-2008-1067 Public exploit EPSS 21.7% 6.8 MediumFebruary 28, 2008
• smarty The modifier.regex_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and... CVE-2008-1066 Fix available 7.5 HighFebruary 28, 2008
• xoops xm memberstats Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats (xmmemberstats) 2.0e... CVE-2008-1065 7.5 HighFebruary 28, 2008
• xoops rmsoft gallery system Cross-site scripting (XSS) vulnerability in images.php in the Red Mexico RMSOFT Gallery System ... CVE-2008-1064 4.3 MediumFebruary 28, 2008
• xoops xm-memberstats Cross-site scripting (XSS) vulnerability index.php in the XM-Memberstats (xmmemberstats) module... CVE-2008-1063 4.3 MediumFebruary 28, 2008
• symantec scan engine, antivirus filtering domino mpe, antivirus network attached storage +7 more +9 more Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus... CVE-2008-0309 6.8 MediumFebruary 28, 2008
• symantec scan engine, antivirus clearswift, antivirus filtering domino mpe +7 more +9 more Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan... CVE-2008-0308 7.1 HighFebruary 28, 2008
• s9y serendipity Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3-beta1 allows remote... CVE-2008-0124 4.3 MediumFebruary 28, 2008
• activepdf server Heap-based buffer overflow in the activePDF Server service (aka APServer.exe) in activePDF Server... CVE-2007-5397 7.5 HighFebruary 28, 2008
• intervideo windvd media center InterVideo IMC Server (aka IMCSvr.exe) and InterVideo Home Theater (aka IHT.exe) in InterVideo... CVE-2008-1062 5.0 MediumFebruary 28, 2008
• wordpress sniplets plugin Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for... CVE-2008-1061 Public exploit 4.3 MediumFebruary 28, 2008
• wordpress sniplets plugin Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for... CVE-2008-1060 Public exploit EPSS 44.2% 7.5 HighFebruary 28, 2008
• wordpress sniplets plugin PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the Sniplets 1.1.2 and... CVE-2008-1059 Public exploit EPSS 48.3% 7.5 HighFebruary 28, 2008
• openbsd The tcp_respond function in netinet/tcp_subr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a... CVE-2008-1058 7.8 HighFebruary 28, 2008
• openbsd The ip6_check_rh0hdr function in netinet6/ip6_input.c in OpenBSD 4.2 allows attackers to cause a... CVE-2008-1057 7.8 HighFebruary 28, 2008
• symark powerbroker Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users... CVE-2008-1056 6.9 MediumFebruary 28, 2008
• netwin surgemail, webmail +1 more Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and... CVE-2008-1055 Public exploit 7.5 HighFebruary 27, 2008
• netwin surgemail Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2)... CVE-2008-1054 Public exploit 6.4 MediumFebruary 27, 2008
• phpnuke kose yazilari module Multiple SQL injection vulnerabilities in the Kose_Yazilari module for PHP-Nuke allow remote... CVE-2008-1053 Public exploit 7.5 HighFebruary 27, 2008
• netwin surgeftp The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to... CVE-2008-1052 Public exploit 6.4 MediumFebruary 27, 2008
• No product listed PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA... CVE-2008-1051 Public exploit EPSS 21.4% 6.8 MediumFebruary 27, 2008
• softbizscripts jokes and funny pictures script SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote... CVE-2008-1050 Public exploit 7.5 HighFebruary 27, 2008
• positive software h-sphere, sitestudio +1 more Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in... CVE-2008-1049 10.0 HighFebruary 27, 2008
• plume-cms plume cms Cross-site scripting (XSS) vulnerability in manager/xmedia.php in Plume CMS 1.2.2 allows remote... CVE-2008-1048 4.3 MediumFebruary 27, 2008
• tiki tikiwiki cms\/groupware Cross-site scripting (XSS) vulnerability in tiki-edit_article.php in TikiWiki before 1.9.10.1... CVE-2008-1047 4.3 MediumFebruary 27, 2008
• quinsonnas mail checker PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows... CVE-2008-1046 Public exploit EPSS 21.4% 6.8 MediumFebruary 27, 2008
• alkacon opencms Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp CVE-2008-1045 Public exploitFix available 4.3 MediumFebruary 27, 2008
• move networks inc media player, qunatum streaming player +1 more Stack-based buffer overflow in the Quantum Streaming Player (Quantum Streaming IE Player) ActiveX... CVE-2008-1044 Public exploit 7.5 HighFebruary 27, 2008
• Show olderLoading…