CVEs published in March 2008
507 vulnerabilities, 79 critical, 0 exploited.
- peelMultiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers...7.5 High
- peelUnrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and...6.5 Medium
- easy-clanpageSQL injection vulnerability in inc/module/online.php in Easy-Clanpage 2.2 allows remote attackers...7.5 High
- cuteflow-bin cuteflow binDirectory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to...7.5 High
- coronamatrix phpaddressbookMultiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote...7.5 High
- asus remote consoleStack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka...10.0 High
- piczo imageuploader4, aurigma image uploader activex control +1 moreBuffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with...9.3 High
- microsoft wordBuffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote...9.3 High
- videolan vlcInteger overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote...6.8 Medium
- zyxel zywall 1050 firmwareZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not...9.8 Critical
- pecl-php alternative php cacheStack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows...6.8 Medium
- linphaMultiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers...4.3 Medium
- phorumSQL injection vulnerability in Phorum before 5.2.6, when mysql_use_ft is disabled, allows remote...6.8 Medium
- punbbCross-site scripting (XSS) vulnerability in PunBB 1.2.16 and earlier allows remote attackers to...4.3 Medium
- punbbThe password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on...3.5 Low
- openbsd opensshOpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections...6.9 Medium
- freewebshopUnspecified vulnerability in customer.php in FreeWebshop.org 2.2.5, 2.2.6 and 2.2.7WIP1/2 allows...10.0 High
- xine xine-libMultiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap...6.8 Medium
- webspellCross-site scripting (XSS) vulnerability in index.php in webSPELL 4.1.2 allows remote attackers...4.3 Medium
- sun solaris, sunos +1 morerpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash)...4.3 Medium
- cyberfrogs cfnetgsCross-site scripting (XSS) vulnerability in index.php in cyberfrogs.net cfnetgs 0.24 allows...4.3 Medium
- ari pikivirta home ftp serverHome FTP Server 1.4.5.89 allows remote attackers to cause a denial of service (crash) by opening...5.0 Medium
- jcorporate eforumMultiple cross-site scripting (XSS) vulnerabilities in busca.php in eForum 0.4 allow remote...4.3 Medium
- roundup-tracker roundupRoundup xml-rpc server improper check of property permissions6.4 Medium
- roundup-tracker roundupRoundup vulnerability related to Cross-site scripting (XSS)4.3 Medium
- symantec altiris deployment solutionThe Altiris Client Service (AClient.exe) in Symantec Altiris Deployment Solution 6.8.x before 6.9...7.2 High
- computer associates desktop management suite, brightstor arcserve backup laptops desktops, unicenter dsm r11 list control atx +4 more +6 moreStack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple...9.3 High
- panda internet security, antivirus and firewall +1 moreThe cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local...7.2 High
- rsa webidIncomplete blacklist vulnerability in IISWebAgentIF.dll in the WebID RSA Authentication Agent 5.3...4.3 Medium
- microsoft windows vistaMicrosoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which...9.3 High
- phpstatsCross-site scripting (XSS) vulnerability in phpstats.php in Michael Wagner phpstats 0.1 alpha...4.3 Medium
- xine xine-libArray index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1...6.8 Medium
- gallarificGallarific Free Edition 1.1 does not require authentication for (1) photos.php, (2) comments.php,...6.4 Medium
- namazuCross-site scripting (XSS) vulnerability in namazu.cgi in Namazu before 2.0.18 allows remote...4.3 Medium
- centerim** DISPUTED ** CenterIM 4.22.3 and earlier allows user-assisted remote attackers to execute...6.8 Medium
- w-agoraMultiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to...7.5 High
- detodas com restauranteSQL injection vulnerability in the Detodas Restaurante (com_restaurante) 1.0 component for Mambo...9.3 High
- gallarificMultiple SQL injection vulnerabilities in Gallarific Free Edition 1.1 allow remote attackers to...7.5 High
- imperva securesphere, securesphere mx management server +1 moreCross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX...4.3 Medium
- runcmsSQL injection vulnerability in the sections (Section) module in RunCMS allows remote attackers to...6.8 Medium
- xnviewBuffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code...7.6 High
- joomlapixel com joovideoSQL injection vulnerability in the Joovideo (com_joovideo) 1.0 and 1.2.2 component for Mambo and...7.5 High
- joomlaitalia com alberghiSQL injection vulnerability in the Alberghi (com_alberghi) 2.1.3 and earlier component for Mambo...7.5 High
- cs-cartCross-site scripting (XSS) vulnerability in index.php in CS-Cart 1.3.2 allows remote attackers to...4.3 Medium
- asterisk, asterisk appliance developer kit, business edition +2 more +4 moreThe AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6...9.3 High
- viewvcViewVC before 1.0.5 provides revision metadata without properly checking whether access was...4.3 Medium
- viewvcViewVC before 1.0.5 stores sensitive information under the web root with insufficient access...4.3 Medium
- viewvcViewVC before 1.0.5 includes "all-forbidden" files within search results that list CVS or...4.3 Medium
- asterisk appliance developer kit, business edition, asterisknow +2 more +4 moreMultiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open...7.5 High
- adobe flashMultiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash...6.8 Medium
- Show moreLoading…