CVEs published in September 2008
445 vulnerabilities, 87 critical, 1 exploited.
- apple quicktimeApple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and...6.8 Medium
- suspend2 software suspend 2Software suspend 2 2-2.2.1, when used with the Linux kernel 2.6.16, stores pre-boot...2.1 Low
- intel biosIntel firmware PE94510M.86A.0050.2007.0710.1559 stores pre-boot authentication passwords in the...2.1 Low
- truecrypt foundation truecryptTrueCrypt 5.0 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not...2.1 Low
- secustar drivecrypt plus packSecu Star DriveCrypt Plus Pack 3.9 stores pre-boot authentication passwords in the BIOS Keyboard...2.1 Low
- freed0m disckcryptorDiskCryptor 0.2.6 on Windows stores pre-boot authentication passwords in the BIOS Keyboard buffer...2.1 Low
- gnu grub legacyGrub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer...2.1 Low
- liloLILO 22.6.1 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and...2.1 Low
- ibm lenovo 7cetb5wwIBM Lenovo firmware 7CETB5WW 2.05 stores pre-boot authentication passwords in the BIOS Keyboard...2.1 Low
- microsoft windows vistaMicrosoft Bitlocker in Windows Vista before SP1 stores pre-boot authentication passwords in the...1.9 Low
- vmware ace, player, server +1 more +3 moreBuffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5...10.0 High
- google appsThe SAML Single Sign-On (SSO) Service for Google Apps allows remote service providers to...7.5 High
- linux kernelnet/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux...7.1 High
- lxde lightweight x11 desktop environmentsrc/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows local users...4.6 Medium
- vmware ace, player, server +1 more +3 moreUnspecified vulnerability in the OpenProcess function in VMware Workstation 5.5.x before 5.5.8...7.2 High
- vmware serverAn unspecified ISAPI extension in VMware Server before 1.0.7 build 108231 allows remote attackers...5.0 Medium
- vmware ace, player, server +1 more +3 moreUnspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8...10.0 High
- vmware ace, player, server +1 more +3 moreUnspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8...10.0 High
- vmware ace, player, server +1 more +3 moreUnspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8...10.0 High
- vmware ace, player, server +1 more +3 moreUnspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8...10.0 High
- vmware ace, player, server +1 more +3 moreUnspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8...10.0 High
- vmware ace, player, server +1 more +3 moreUnspecified vulnerability in a certain ActiveX control in VMware Workstation 5.5.x before 5.5.8...10.0 High
- hp openview network node managerUnspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51,...7.8 High
- hp openview network node managerUnspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51,...7.8 High
- linux kernelThe sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26...7.2 High
- vtiger crmMultiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to...4.3 Medium
- vmware esxThe VMware Consolidated Backup (VCB) command-line utilities in VMware ESX 3.0.1 through 3.0.3 and...2.1 Low
- aspindir mini nuke freehostSQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to...7.5 High
- dotprojectMultiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow (1) remote...6.0 Medium
- dotprojectMultiple cross-site scripting (XSS) vulnerabilities in index.php in dotProject 2.1.2 allow remote...4.3 Medium
- blognCross-site request forgery (CSRF) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows...6.8 Medium
- blognCross-site scripting (XSS) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows remote...4.3 Medium
- caudiumconfigvar in Caudium 1.4.12 allows local users to overwrite arbitrary files via a symlink attack...7.2 High
- zoneminderUnspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote...10.0 High
- zoneminderMultiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote...4.3 Medium
- zoneminderSQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1.23.3 and earlier allows...7.5 High
- ultrashareware ultra office controlThe Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra...9.3 High
- ultrashareware ultra office controlStack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008...9.3 High
- acoustica mixcraftStack-based buffer overflow in Acoustica Mixcraft 4.1 Build 96 and 4.2 Build 98 allows user...9.3 High
- apple iphoneApple iPhone 2.0.2, in some configurations, allows physically proximate attackers to bypass...1.9 Low
- sun opensolaris, solaris +1 moreThe kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass...7.2 High
- hp enterprise discoveryUnspecified vulnerability in HP Enterprise Discovery 2.0 through 2.52 on Windows allows remote...9.0 High
- wiresharkMultiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1...10.0 High
- newsbeuterThe open-in-browser command in newsbeuter before 1.1 allows remote attackers to execute arbitrary...6.8 Medium
- princeton university wordnetMultiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent attackers to...10.0 High