CVEs published in September 2008
445 vulnerabilities, 87 critical, 1 exploited.
- microsoft internet information services** DISPUTED ** A certain ActiveX control in iisext.dll in Microsoft Internet Information...10.0 High
- microsoft internet information servicesA certain ActiveX control in adsiis.dll in Microsoft Internet Information Services (IIS) allows...5.0 Medium
- microsoft internet authentication service helper com componentA certain ActiveX control in the Microsoft Internet Authentication Service (IAS) Helper COM...5.0 Medium
- linux kernelfs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when...4.6 Medium
- redhat cmanThe pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local...6.9 Medium
- flatpressMultiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to...4.3 Medium
- redhat fedora, initscripts +1 morerc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local...4.7 Medium
- abb pcu400Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4...10.0 High
- lighttpdMemory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows...5.0 Medium
- mercurialMercurial before 1.0.2 does not enforce the allowpull permission setting for a pull operation...5.0 Medium
- cisco linksys wrt350nThe Cisco Linksys WRT350N with firmware 1.0.3.7 has "admin" as its default password for the ...10.0 High
- microsoft windows mobileMicrosoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle...5.4 Medium
- ibm tivoli netcool webtopIBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 preserves cached user privileges after logout, which...7.2 High
- operaUnspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler,...10.0 High
- opera browserOpera before 9.52 does not check the CRL override upon encountering a certificate that lacks a...10.0 High
- opera browserOpera before 9.52 does not ensure that the address field of a news feed represents the feed's...6.4 Medium
- opera browserOpera before 9.52 does not prevent use of links from web pages to feed source files on the local...5.0 Medium
- opera browserOpera before 9.52, when rendering an http page that has loaded an https page into a frame,...5.0 Medium
- opera browserOpera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and...8.8 High
- opera browserCross-site scripting (XSS) vulnerability in Opera before 9.52 allows remote attackers to inject...4.3 Medium
- opera browserOpera before 9.52 does not properly restrict the ability of a framed web page to change the...5.0 Medium
- broadcom service desk, ca cmdb +1 moreMultiple cross-site scripting (XSS) vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through...4.3 Medium
- mozilla seamonkey, thunderbird +1 moreHeap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12...10.0 High
- linux kernelThe error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs...2.1 Low
- cisco iosUnspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is...7.8 High
- cisco iosCisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet...7.1 High
- cisco iosCisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is...7.8 High
- cisco iosCisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is...7.8 High
- cisco iosCisco IOS 12.0 through 12.4 on Gigabit Switch Router (GSR) devices (aka 12000 Series routers)...7.1 High
- cisco iosUnspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a...7.8 High
- cisco iosCisco IOS 12.2 and 12.3 on Cisco uBR10012 series devices, when linecard redundancy is configured,...9.3 High
- cisco iosCisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external...8.5 High
- cisco iosCisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external...8.5 High
- cisco iosUnspecified vulnerability in the Multi Protocol Label Switching (MPLS) Forwarding Infrastructure ...7.1 High
- cisco iosA "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching (MPLS) VPN...5.1 Medium
- cisco iosUnspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12...7.1 High
- cisco ios, unified communications manager, unified callmanager +2 moreUnspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12...7.1 High
- cisco ios, unified communications manager, unified callmanager +2 moreUnspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12...7.1 High
- cisco iosMemory leak in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12...7.8 High
- cisco iosCisco IOS 12.4 allows remote attackers to cause a denial of service (device crash) via a normal,...7.8 High
- apple mac os x, mac os x server +1 moreJava on Apple Mac OS X 10.5.4 and 10.5.5 does not prevent applets from accessing file:// URLs,...9.3 High
- apple mac os x, mac os x server +1 moreThe Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10...8.8 High
- cisco iosThe SERVICE.DNS signature engine in the Intrusion Prevention System (IPS) in Cisco IOS 12.3 and...7.8 High
- freebsd, netbsd, openbsd +2 moreftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems...7.5 High
- denora irc stats irc statsUnspecified vulnerability in Denora IRC Stats Server before 1.4.1 allows remote IRC servers to...5.0 Medium
- rianxosencabos cms cmsThe Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges,...6.5 Medium
- rianxosencabos cms cmsRianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain administrative...7.5 High
- epic games unreal tournament 3Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for...7.8 High
- proftpd project proftpdProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows...6.8 Medium
- cj ultra plusSQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute...7.5 High
- Show moreLoading…