CVEs published in September 2008
445 vulnerabilities, 87 critical, 1 exploited.
- source workshop reciprocal links managerSQL injection vulnerability in index.php in Reciprocal Links Manager 1.1 allows remote attackers...7.5 High
- stephenjungels plaitplaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack...4.4 Medium
- myiosoft easyclassifieldsSQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft...6.8 Medium
- brim-project brimCross-site scripting (XSS) vulnerability in the Bookmarks plugin in Brim 2.0 allows remote...3.5 Low
- brim-project brimSQL injection vulnerability in the Tasks plugin in Brim 2.0.0, when magic_quotes_gpc is disabled,...4.6 Medium
- stashadmin/login.php in Stash 1.0.3 allows remote attackers to bypass authentication and gain...7.5 High
- stashSQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows remote...6.8 Medium
- six apart movable typeCross-site scripting (XSS) vulnerability in Movable Type (MT) 4.x through 4.20, and 3.36 and...4.3 Medium
- ledgersmb, sql-ledger +1 moreSQL injection vulnerability in the AR/AP transaction report in (1) LedgerSMB (LSMB) before 1.2.15...6.5 Medium
- ledgersmb, sql-ledger +1 moreThe CGI scripts in (1) LedgerSMB (LSMB) before 1.2.15 and (2) SQL-Ledger 2.8.17 and earlier allow...7.8 High
- tor world interactive bbs, simple bbs, topics bbs +1 more +3 moreCross-site scripting (XSS) vulnerability in (1) Tor World Tor Board 1.3 and earlier, (2) Topics...4.3 Medium
- dino d-iscussion boardDirectory traversal vulnerability in index.php in D-iscussion Board 3.01 allows remote attackers...6.8 Medium
- zanfi solutions autodealers cms autonlineSQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote...7.5 High
- zanfi solutions autodealers cms autonlineSQL injection vulnerability in index.php in Zanfi Autodealers CMS AutOnline allows remote...7.5 High
- phsdev phsblogMultiple SQL injection vulnerabilities in index.php in phsBlog 0.2 allow remote attackers to...7.5 High
- adobe acrobatA certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet...5.0 Medium
- postfixPostfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux...2.1 Low
- xmlsoft libxml2, apple iphone os, mac os x +3 more +5 moreHeap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before...10.0 High
- redhat enterprise ipa, freeipa +1 moreThe default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap://...5.0 Medium
- redhat adminutilHeap-based buffer overflow in Red Hat adminutil 1.1.6 allows remote attackers to cause a denial...7.5 High
- objective development sharityUnspecified vulnerability in Objective Development Sharity 3 before 3.5 has unknown impact and...10.0 High
- matterdaddy marketCross-site scripting (XSS) vulnerability in admin/login.php in Matterdaddy Market 1.1 allows...4.3 Medium
- texmedia million pixel scriptSQL injection vulnerability in tops_top.php in Million Pixel Ad Script (Million Pixel Script)...7.5 High
- kolifa download scriptSQL injection vulnerability in indir.php in Kolifa.net Download Script 1.2 allows remote...7.5 High
- bluemoon popnupblogMultiple cross-site scripting (XSS) vulnerabilities in index.php in the Bluemoon PopnupBLOG...4.3 Medium
- hp openvmsStack-based buffer overflow in SMGSHR.EXE in OpenVMS for Integrity Servers 8.2-1, 8.3, and 8.3...7.2 High
- jandus technologies smart surveyCross-site scripting (XSS) vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote...4.3 Medium
- friendly technologies pppoe clientA certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE...9.3 High
- friendly technologies pppoe clientA certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE...6.8 Medium
- friendly technologies pppoe clientHeap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly...6.8 Medium
- novell forumUnspecified vulnerability in Novell Forum (formerly SiteScape Forum) 7.0, 7.1, 7.2, 7.3, and 8.0...7.5 High
- elitecmsSQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute...7.5 High
- \@mailMultiple cross-site scripting (XSS) vulnerabilities in @Mail 5.42 allow remote attackers to...4.3 Medium
- aj square hyipSQL injection vulnerability in article/readarticle.php in AJ Square aj-hyip (aka AJ HYIP Acme)...7.5 High
- aj square hyipMultiple SQL injection vulnerabilities in AJ Square AJ HYIP Acme allow remote attackers to...7.5 High
- softalk mail server mail serverThe IMAP server in Softalk Mail Server (formerly WorkgroupMail) 8.5.1.431 allows remote...4.0 Medium
- kyocera mita fs 118mfpDirectory traversal vulnerability in the Kyocera Command Center in Kyocera FS-118MFP allows...7.8 High
- spice classifieds classifiedsSQL injection vulnerability in index.php in Spice Classifieds allows remote attackers to execute...7.5 High
- netbsdNetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a...9.3 High
- horde, popoon +1 moreCross-site scripting (XSS) vulnerability in (1) Text_Filter/Filter/xss.php in Horde 3.1.x before...4.3 Medium
- hordeCross-site scripting (XSS) vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3...4.3 Medium
- apple itunesInteger overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP,...7.2 High
- apple quicktime, intel indeo +1 moreStack-based buffer overflow in QuickTimeInternetExtras.qtx in an unspecified third-party Indeo v3...9.3 High
- apple itunesApple iTunes before 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by...2.6 Low
- apple iphone, ipod touch, iphone os +2 moreUse-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0...9.3 High
- apple ipod touchApplication Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not...7.1 High
- apple bonjourmDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API...6.4 Medium
- apple quicktimeApple QuickTime before 7.5.5 allows remote attackers to cause a denial of service (application...4.3 Medium
- apple quicktimeApple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or...9.3 High
- apple quicktimeApple QuickTime before 7.5.5 does not properly handle (1) MDAT atoms in MP4 video files within...9.3 High
- Show moreLoading…