CVEs published in March 2008
507 vulnerabilities, 79 critical, 0 exploited.
- adobe acrobat readeracroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a...3.7 Low
- phpbb 123 flash chat module** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module...6.8 Medium
- kcwikiMultiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow remote attackers to...6.8 Medium
- simm-comm sci photo chatDirectory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and...7.8 High
- sarg squid analysis report generatorCross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows...4.3 Medium
- sarg squid analysis report generatorStack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report...10.0 High
- flysprayFlyspray 0.9.9.4 generates different error messages depending on whether the username is valid or...5.0 Medium
- flysprayMultiple cross-site scripting (XSS) vulnerabilities in Flyspray 0.9.9 through 0.9.9.4 allow...4.3 Medium
- phpcomasySQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute...7.5 High
- phparcadescriptSQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote...7.5 High
- php web scripts dynamic photo gallerySQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows...7.5 High
- f5 firepass 4100Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass 4100 SSL VPN 5.4.1 through 5.5...2.6 Low
- moinmoinMoinMoin Improper Access Control5.0 Medium
- moinmoinMoinMoin Multiple cross-site scripting (XSS) vulnerabilities4.3 Medium
- imagemagick graphicsmagick, imagemagick +1 moreHeap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1)...6.8 Medium
- imagemagick graphicsmagick, imagemagick +1 moreThe load_tile function in the XCF coder in coders/xcf.c in (1) ImageMagick 6.2.8-0 and (2)...6.8 Medium
- gnome evolutionFormat string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in...6.8 Medium
- phpmyadminphpMyAdmin before 2.11.5 accesses $_REQUEST to obtain some parameters instead of $_GET and $_POST...5.1 Medium
- cosmicperl directory pro, darwin, navision financials server +2 moreA certain pseudo-random number generator (PRNG) algorithm that uses ADD with 0 random hops (aka ...6.8 Medium
- cosmicperl directory pro, darwin, navision financials server +2 moreA certain pseudo-random number generator (PRNG) algorithm that uses XOR and 2-bit random hops ...6.8 Medium
- cosmicperl directory pro, darwin, navision financials server +2 moreA certain pseudo-random number generator (PRNG) algorithm that uses XOR and 3-bit random hops ...6.8 Medium
- ruby-lang webrick, fedoraproject fedora +1 moreDirectory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1...5.0 Medium
- lighttpdmod_cgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a...5.0 Medium
- deslockMemory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a...4.9 Medium
- deslockDLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a...7.2 High
- deslockDESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present,...7.2 High
- deslockDLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of...4.9 Medium
- joomla com garyscookbookSQL injection vulnerability in the Garys Cookbook (com_garyscookbook) 1.1.1 and earlier component...7.5 High
- synceThe Utils::runScripts function in src/utils.cpp in vdccm 0.92 through 0.10.0 in SynCE (SynCE-dccm...9.3 High
- omegasoft interneserviceslosungenOMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 generates different responses depending...5.0 Medium
- omegasoft interneserviceslosungenOMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) 7 supports authentication with a cookie...6.4 Medium
- synce vdccmUnspecified vulnerability in vdccm before 0.10.1 in SynCE (SynCE-dccm) might allow attackers to...10.0 High
- goahead software fs4104-aw device, webserver +1 moregoform/QuickStart_c0 on the GoAhead Web Server on the FS4104-AW (aka rooter) VDSL device contains...5.0 Medium
- drupalThe Drupal.checkPlain function in Drupal 6.0 only escapes the first instance of a character in...4.3 Medium
- beehive software sendfile.netThe outboxWriteUnsent function in FTPThread.class in SendFile.jar for Beehive Software SendFile...7.5 High
- net activity viewer activity viewerUntrusted search path vulnerability in src/mainwindow.c in Net Activity Viewer 0.2.1 allows local...4.7 Medium
- drupalCross-site scripting (XSS) vulnerability in Drupal 6.0 allows remote authenticated users to...3.5 Low
- ibm websphere mqUnspecified vulnerability in IBM WebSphere MQ 6.0.x before 6.0.2.2 and 5.3 before Fix Pack 14...6.6 Medium
- xrms crm xrmsCross-site scripting (XSS) vulnerability in admin/users/self.php in XRMS CRM allows remote...4.3 Medium
- xwinew_export.c in XWine 1.0.1 on Debian GNU/Linux sets insecure permissions (0666) for /etc/wine...6.3 Medium
- freshmeat xwinew_editeur.c in XWine 1.0.1 for Debian GNU/Linux allows local users to overwrite or print...7.2 High
- phpmytourneyPHP remote file inclusion vulnerability in tourney/index.php in phpMyTourney 2 allows remote...6.8 Medium
- crytek crysisFormat string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote...6.0 Medium
- barryvan compo managerPHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote...6.8 Medium
- podcast generator generatorMultiple directory traversal vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow...5.0 Medium
- podcast generator generatorMultiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier...6.8 Medium
- sitebuilder eliteMultiple PHP remote file inclusion vulnerabilities in SiteBuilder Elite 1.2 allow remote...6.8 Medium
- dream4 koobi proSQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to...7.5 High
- eazyportalSQL injection vulnerability in index.php in eazyPortal 1.0 and earlier allows remote attackers to...7.5 High
- icq mirabilis icqFormat string vulnerability in the embedded Internet Explorer component for Mirabilis ICQ 6 build...9.3 High
- Show moreLoading…