CVEs published in February 2008
524 vulnerabilities, 79 critical, 2 exploited.
- microsoft internet explorerUse-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote...8.8 High
- microsoft ie, internet explorer +1 moreUnspecified vulnerability in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote...9.3 High
- microsoft office, works +1 morewkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2, Works 8.0, and...9.3 High
- microsoft office, visual basic +1 moreHeap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows...10.0 High
- apache geronimoThe init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown...2.1 Low
- novell apparmorThe Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 does not properly handle failure of an...7.5 High
- sun solarisThe (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input...4.6 Medium
- apple mobile safariMobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of...7.1 High
- microsoft windows 2000, windows 2003 server, windows xp +2 moreUnspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003,...6.8 Medium
- microsoft windows vistaUnspecified vulnerability in the TCP/IP support in Microsoft Windows Vista allows remote DHCP...7.8 High
- microsoft internet information serverUnspecified vulnerability in Microsoft Internet Information Services (IIS) 5.1 through 6.0 allows...10.0 High
- microsoft internet information services, internet information server +1 moreUnspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows...7.2 High
- linux kernelThe copy_from_user_mmap_sem function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24...2.1 Low
- linux kernelThe vmsplice_to_user function in fs/splice.c in the Linux kernel 2.6.22 through 2.6.24 does not...2.1 Low
- clamavThe unmew11 function in libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact...10.0 High
- adobe acrobat, acrobat reader +1 moreInteger overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute...9.3 High
- level platforms managed workplace service centerLevel Platforms, Inc. (LPI) Managed Workplace Service Center 4.x, 5.x and 6.x allows remote...5.0 Medium
- clam anti-virus clamavInteger overflow in the cli_scanpe function in libclamav in ClamAV before 0.92.1, as used in...10.0 High
- apple mac os xArgument injection vulnerability in Terminal.app in Terminal in Apple Mac OS X 10.4.11 and 10.5...6.8 Medium
- apple mac os xParental Controls in Apple Mac OS X 10.5 through 10.5.1 contacts www.apple.com "when a website is...5.0 Medium
- apple mac os xUnspecified vulnerability in NFS in Apple Mac OS X 10.5 through 10.5.1 allows remote attackers to...10.0 High
- apple mailUnspecified vulnerability in Mail in Apple Mac OS X 10.4.11 allows remote attackers to execute...6.8 Medium
- apple mac os xLaunch Services in Apple Mac OS X 10.5 through 10.5.1 allows an uninstalled application to be...1.9 Low
- apple mac os xX11 in Apple Mac OS X 10.5 through 10.5.1 does not properly handle when the "Allow connections...4.3 Medium
- adobe acrobat, acrobat reader +1 moreUntrusted search path vulnerability in Adobe Reader and Acrobat 8.1.1 and earlier allows local...6.2 Medium
- adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via...9.3 High
- adobe acrobat, acrobat and reader, acrobat reader +2 moreMultiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to...7.8 High
- titan ftp serverMultiple heap-based buffer overflows in the (1) FTP service and (2) administration service in...10.0 High
- the everything development company everything development engineThe Everything Development Engine in The Everything Development System Pre-1.0 and earlier stores...5.0 Medium
- planetluc mynewsCross-site scripting (XSS) vulnerability in mynews.inc.php in MyNews 1.6.4, and other earlier 1.6...4.3 Medium
- pagetoolCross-site scripting (XSS) vulnerability in index.php in Pagetool 1.0.7 allows remote attackers...4.3 Medium
- mambo com sermonSQL injection vulnerability in index.php in the Sermon (com_sermon) 0.2 component for Mambo...7.5 High
- webmin usermin, webmin +1 moreCross-site scripting (XSS) vulnerability in Webmin 1.370 and 1.390 and Usermin 1.300 and 1.320...4.3 Medium
- oscommerce customer testimonials, oscommerce +1 moreSQL injection vulnerability in customer_testimonials.php in the Customer Testimonials 3 and 3.1...7.5 High
- sun solarisUnspecified vulnerability in the USB Mouse STREAMS module (usbms) in Sun Solaris 9 and 10, when...4.7 Medium
- ibm websphere edge serverCross-site scripting (XSS) vulnerability in Caching Proxy (CP) 5.1 through 6.1 in IBM WebSphere...4.3 Medium
- symantec altiris notification serverThe agent in Symantec Altiris Notification Server before 6.0 SP3 R7 allows local users to gain...6.8 Medium
- acdsee photo managerBuffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers...9.3 High
- mihalism multi hostSQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to...6.8 Medium
- hp storage essentials srm enterprise, storage essentials srm standard +1 moreMultiple unspecified vulnerabilities in HP Storage Essentials Storage Resource Management (SRM)...10.0 High
- sflogMultiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read...5.0 Medium
- south river technologies titan ftp serverMultiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote...9.3 High
- magnolia ceActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing,...5.0 Medium
- crux software cruxcmsCross-site scripting (XSS) vulnerability in search.php in Crux Software CruxCMS 3.0 allows remote...4.3 Medium
- ibm db2Unspecified vulnerability in the ADMIN_SP_C procedure (SYSPROC.ADMIN_SP_C) in IBM DB2 UDB before...9.0 High
- ibm db2Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors,...7.8 High
- ibm db2Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain...7.2 High
- ibm db2IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE...7.5 High
- bookmarkx scriptSQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to...7.5 High
- ibm os 400Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0...4.3 Medium
- Show moreLoading…