CVEs published in August 2008
368 vulnerabilities, 61 critical, 1 exploited.
- ypninc php realtySQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute...6.8 Medium
- joomla com usercomponents/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate...7.5 High
- flagship industries ventriloThe decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers...5.0 Medium
- idevspot phplinkexchangeMultiple cross-site scripting (XSS) vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01...4.3 Medium
- damian hickey freewayCross-site scripting (XSS) vulnerability in admin/search_links.php in Freeway before 1.4.2.197...4.3 Medium
- openfreeway freewayDirectory traversal vulnerability in includes/events_application_top.php in Freeway before 1.4.2...6.8 Medium
- hmailserverUnspecified vulnerability in the IMAP server in hMailServer 4.4.1 allows remote authenticated...4.3 Medium
- gelatocmsDirectory traversal vulnerability in classes/imgsize.php in Gelato 0.95 allows remote attackers...5.0 Medium
- postfixPostfix before 2.3.15, 2.4 before 2.4.8, 2.5 before 2.5.4, and 2.6 before 2.6-20080814, when the...6.2 Medium
- tibco hawk, iprocess engine, mainframe service tracker +1 more +3 moreMultiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA ...10.0 High
- pozscripts tubeguru video sharing scriptSQL injection vulnerability in ugroups.php in PozScripts TubeGuru Video Sharing Script allows...7.5 High
- pozscripts classified adsSQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote...7.5 High
- pozscripts classified adsSQL injection vulnerability in showcategory.php in PozScripts Classified Ads allows remote...7.5 High
- acronis true image echo serverAcronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an...5.0 Medium
- articlefriendly article friendlySQL injection vulnerability in authordetail.php in Article Friendly Pro allows remote attackers...6.8 Medium
- zeescripts zeereviewsSQL injection vulnerability in comments.php in ZeeScripts Reviews Opinions Rating Posting Engine...7.5 High
- marcello brandao yogurt social network moduleMultiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1...4.3 Medium
- maxthon browserStack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute...6.8 Medium
- hp hp-uxftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in...10.0 High
- sun opensolaris, solaris, sunos +2 moreUnspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv_96 allows (1) context...7.1 High
- vmware virtualcenterVMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled...5.0 Medium
- microsoft internet explorerMicrosoft Internet Explorer 6 and 7 does not perform proper "argument validation" during print...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions,...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions,...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 5.01, 6, and 7 does not properly handle objects that have been...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory, which allows remote...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 and 7 accesses uninitialized memory, which allows remote attackers...9.3 High
- microsoft windows 2000, windows-nt, windows 2003 server +2 more +4 moreThe Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista...9.0 High
- microsoft windows 2000, windows-nt, windows 2003 server +2 more +4 moreArray index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3,...9.0 High
- ruby-lang rubyThe dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1...7.5 High
- ruby-lang rubyAlgorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in...7.8 High
- ruby-lang rubyRuby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423...7.5 High
- tiki tikiwiki cms\/groupwareUnspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows attackers to obtain "path...5.0 Medium
- tiki tikiwiki cms\/groupwareMultiple unspecified vulnerabilities in TikiWiki CMS/Groupware before 2.0 have unknown impact and...10.0 High
- ipsec-toolssrc/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle...7.8 High
- linux ipsec tools racoon daemonMemory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote...4.0 Medium
- horde groupware webmail editionMultiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have...9.0 High
- articlefriendly article friendlySQL injection vulnerability in categorydetail.php in Article Friendly Standard allows remote...6.8 Medium
- gnome, gnome yelp +1 moreFormat string vulnerability in the window_error function in yelp-window.c in yelp in Gnome after...10.0 High
- adobe presenterMultiple cross-site scripting (XSS) vulnerabilities in files generated by Adobe Presenter 6 and 7...4.3 Medium
- adobe presenterMultiple cross-site scripting (XSS) vulnerabilities in files generated by Adobe Presenter 6 and 7...4.3 Medium
- apache tomcatApache Tomcat Directory Traversal vulnerability4.3 Medium
- microsoft windows vista, windows-nt +1 moreMicrosoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec...7.8 High
- microsoft windows 2000, windows 2003 server, windows xp +2 moreHeap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft...9.3 High
- microsoft office, compatibility pack word excel powerpoint, office powerpoint viewer +2 moreA "memory calculation error" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and...6.8 Medium
- microsoft outlook express, windows mail +1 moreThe MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1,...7.1 High
- microsoft office powerpoint viewerA "memory calculation error" in Microsoft PowerPoint Viewer 2003 allows remote attackers to...9.3 High
- microsoft office powerpoint viewerInteger overflow in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary...9.3 High
- microsoft windows messengerAn ActiveX control (Messenger.UIAutomation.1) in Windows Messenger 4.7 and 5.1 is marked as safe...10.0 High
- microsoft windows xpnslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute...9.3 High
- Show moreLoading…