CVEs published in February 2008
524 vulnerabilities, 79 critical, 2 exploited.
- linux web shop php user basePHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop ...7.5 High
- linux web shop php download managerDirectory traversal vulnerability in include/body.inc.php in Linux Web Shop (LWS) php Download...6.8 Medium
- matts whois whoisCross-site scripting (XSS) vulnerability in mwhois.php in Matt Wilson Matt's Whois (MWhois)...4.3 Medium
- fujitsu interstage application server enterprise, interstage application server standard j, interstage apworks enterprise +3 more +5 moreBuffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0...10.0 High
- porar webboardSQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute...7.5 High
- drbenhur.com dbhcmsPHP remote file inclusion vulnerability in mod/mod.extmanager.php in DBHcms 1.1.4 and earlier...6.8 Medium
- packeteer packetshaper, policycenter +1 moreCross-site scripting (XSS) vulnerability in the file listing function in the web management...4.3 Medium
- ghostscriptStack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and...6.8 Medium
- miro player, videolan vlc media player +1 moreThe MP4 demuxer (mp4.c) for VLC media player 0.8.6d and earlier, as used in Miro Player 1.1 and...9.3 High
- lighttpdlighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly calculate the size...5.0 Medium
- vmware ace, player, workstation +2 moreDirectory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2,...6.9 Medium
- easy software products cupsUse-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote...5.0 Medium
- easy software products cupsMemory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause...5.0 Medium
- spyceSpyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to obtain sensitive information...5.8 Medium
- spyceOpen redirect vulnerability in spyce/examples/redirect.spy in Spyce - Python Server Pages (PSP) 2...6.4 Medium
- spyceMultiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3...4.3 Medium
- double-take software double-take, hp storageworks double-take +1 moreStack consumption vulnerability in Double-Take 5.0.0.2865 and earlier, distributed under the HP...5.0 Medium
- double-take software double-takeDouble-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name...5.0 Medium
- double-take software double-takeDouble-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name...5.0 Medium
- double-take software double-take, hp storageworks double-take +1 moreDouble-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name...5.0 Medium
- double-take software double-takeDouble-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name...5.0 Medium
- double-take software double-take, hp storageworks double-take +1 moreDouble-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name...5.0 Medium
- double-take software double-takeBuffer overflow in Double-Take (aka HP StorageWorks Storage Mirroring) 4.5.0.1629, and other 4.5...7.5 High
- ipswitch imserver, instant messaging +1 moreDirectory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant...4.9 Medium
- ipswitch imserver, instant messaging +1 moreFormat string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in...3.5 Low
- ipswitch instant messagingIpswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of...5.0 Medium
- aeries student information systemMultiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2...7.5 High
- aeries student information systemSQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface ...7.5 High
- aeries student information systemCross-site scripting (XSS) vulnerability in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8...4.3 Medium
- webguiCross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.4.24 allows remote...4.3 Medium
- wordpress photo album pluginMultiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin...7.5 High
- sun solarisUnspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows...4.7 Medium
- tinyevent, xoops tiny event module +1 moreSQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 module for XOOPS...6.8 Medium
- xoops prayer list moduleSQL injection vulnerability in index.php in the Prayer List (prayerlist) 1.04 module for XOOPS...7.5 High
- novell iprint, iprint client +1 moreStack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell...10.0 High
- nukec, php-nuke nukec module +1 moreSQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote...7.5 High
- sun solarisMultiple race conditions in the CPU Performance Counters (cpc) subsystem in the kernel in Sun...4.7 Medium
- the sword project sword, diatheke front end +1 morediatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute...7.5 High
- php-nuke manualesSQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to...7.5 High
- becontentSQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute...7.5 High
- open source security information management os-simSQL injection vulnerability in port/modifyportform.php in Open Source Security Information...6.5 Medium
- open source security information management os-simCross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information...4.3 Medium
- astats astatspro, joomla com astatspro +1 moreSQL injection vulnerability in includes/count_dl_or_link.inc.php in the astatsPRO (com_astatspro)...7.5 High
- tor world com vote, i-navigator, interactive bbs +7 more +9 moreCross-site scripting (XSS) vulnerability in Tor World Tor Search 1.1 and earlier, I-Navigator 4.0...4.3 Medium
- highwood design hwdvideoshareSQL injection vulnerability in the Highwood Design hwdVideoShare (com_hwdvideoshare) 1.1.3 Alpha...7.5 High
- ipdivaThe Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 stores...6.4 Medium
- ipdivaMultiple cross-site scripting (XSS) vulnerabilities in the Mediation server in IPdiva SSL VPN...4.3 Medium
- invision power services power boardCross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 allows...4.3 Medium
- sybase mobilink, sql anywhere +1 moreMultiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier,...10.0 High
- iscripts multicartSQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote...6.5 Medium
- Show moreLoading…