CVEs published in September 2008
445 vulnerabilities, 87 critical, 1 exploited.
- mozilla firefox, seamonkey +1 moreThe XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 more +4 moreDirectory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2,...7.8 High
- debian linux, mozilla firefox, seamonkey +2 more +4 moreDirectory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2,...4.3 Medium
- mozilla firefoxMozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 more +4 moreMozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey...4.3 Medium
- mozilla firefoxMultiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers...10.0 High
- mozilla firefox, canonical ubuntu linux +1 moreMultiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 more +4 moreMultiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2,...10.0 High
- mozilla firefox, seamonkey, thunderbird +2 more +4 moreInteger overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2,...10.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey...7.5 High
- mozilla firefoxThe XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to "pollute...7.5 High
- mozilla firefox, seamonkey, thunderbird +2 more +4 moreThe XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird...7.5 High
- mozilla firefox, seamonkey, canonical ubuntu linux +1 more +3 moreMozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user...9.3 High
- mozilla firefoxfeedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with...7.5 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird...7.5 High
- mozilla firefox, seamonkey +1 moreStack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17...10.0 High
- osads alliance database alliance databaseUnspecified vulnerability in OSADS Alliance Database before 2.1 has unknown impact and attack...10.0 High
- attachmax dolphinAttachmax Dolphin 2.1.0 and earlier does not properly protect info.php in the main folder, which...5.0 Medium
- attachmax dolphinPHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier,...7.5 High
- attachmax dolphinSQL injection vulnerability in search.php Attachmax Dolphin 2.1.0 and earlier allows remote...7.5 High
- softacid hotel reservation systemSQL injection vulnerability in city.asp in SoftAcid Hotel Reservation System (HRS) allows remote...7.5 High
- czaries czarnewsSQL injection vulnerability in cn_users.php in CzarNews 1.20 and earlier allows remote attackers...7.5 High
- gonafish linkscaffeproSQL injection vulnerability in index.php in Gonafish LinksCaffePRO 4.5 allows remote attackers to...7.5 High
- squirrelmailSquirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session,...5.0 Medium
- fuzzylime cmsCross-site scripting (XSS) vulnerability in admin/usercheck.php in fuzzylime (cms) before 3.03...4.3 Medium
- audiocoding faad2Heap-based buffer overflow in the decodeMP4file function (frontend/main.c) in FAAD2 2.6.1 and...9.3 High
- pdnsdThe p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to...5.0 Medium
- alt-n securitygatewayStack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1...10.0 High
- emacspeak inc emacspeakextract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a...6.6 Medium
- openswanThe IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local...4.4 Medium
- mantisbtMantis 1.1.x through 1.1.2 and 1.2.x through 1.2.0a2 does not set the secure flag for the session...5.0 Medium
- typo3 secure directoryUnspecified vulnerability in the TYPO3 Secure Directory (kw_secdir) extension before 1.0.2 allows...10.0 High
- proactive cms cmsDirectory traversal vulnerability in index.php in ProActive CMS allows remote attackers to read...4.3 Medium
- webcms portal editionSQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to...7.5 High
- webcms portal editionSQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to...7.5 High
- webcms portal editionCross-site scripting (XSS) vulnerability in index.php in webCMS Portal Edition allows remote...4.3 Medium
- integramodIntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control...5.0 Medium
- horde turba contact manager h3Cross-site scripting (XSS) vulnerability in imp/test.php in Horde Turba Contact Manager H3 2.2.1...4.3 Medium
- netenberg fantastico de luxeDirectory traversal vulnerability in includes/xml.php in the Netenberg Fantastico De Luxe module...6.8 Medium
- noomsUnspecified vulnerability in db.php in NooMS 1.1 allows remote attackers to conduct brute force...5.0 Medium
- noomsMultiple cross-site scripting (XSS) vulnerabilities in NooMS 1.1 allow remote attackers to inject...4.3 Medium
- downline goldmine builder, new addon +1 moreSQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline...7.5 High
- preprojects pre real estate listingsSQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to...7.5 High
- asp indir fot video scriptiSQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to...7.5 High
- linkbidscriptMultiple SQL injection vulnerabilities in Link Bid Script 1.5 allow remote attackers to execute...6.5 Medium
- benjamin kuz dynamic mp3 listerMultiple cross-site scripting (XSS) vulnerabilities in index.php in Dynamic MP3 Lister 2.0.1...4.3 Medium
- drupalDrupal, probably 5.10 and 6.4, does not set the secure flag for the session cookie in an https...5.0 Medium
- redhat jboss enterprise application platformThe default configuration of the JBossAs component in Red Hat JBoss Enterprise Application...4.3 Medium
- proarcadescriptSQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary...7.5 High
- rfaah cars-vehicles scriptSQL injection vulnerability in page.php in Cars & Vehicle (aka Cars-Vehicle Script) allows remote...7.5 High
- Show moreLoading…