CVEs published in October 2008
540 vulnerabilities, 114 critical, 1 exploited.
- mywebcards webcards Unrestricted file upload vulnerability in the "Add Image Macro" feature in WebCards 1.3 allows... 8.5 High
- mywebcards webcards SQL injection vulnerability in admin.php in WebCards 1.3, when magic_quotes_gpc is disabled,... 6.8 Medium
- philips electronics voip841 dect phone Cross-site scripting (XSS) vulnerability in the web server component in Philips Electronics... 4.3 Medium
- philips electronics voip841 dect phone Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone... 6.8 Medium
- philips electronics voip841 dect phone The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80... 5.0 Medium
- sepal spboard board.cgi in Sepal SPBOARD 4.5 allows remote attackers to execute arbitrary commands via shell... 10.0 High
- itechscripts itechbids Cross-site scripting (XSS) vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote... 4.3 Medium
- my little forum little forum Cross-site scripting (XSS) vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote... 4.3 Medium
- dovecot dovecot 1.0.7 in Red Hat Enterprise Linux (RHEL) 5, and possibly Fedora, uses world-readable... 2.1 Low
- ffmpeg FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers to cause a denial of service... 10.0 High
- ffmpeg Unspecified vulnerability in the avcodec_close function in libavcodec/utils.c in FFmpeg 0.4.9... 10.0 High
- ffmpeg Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before r14917, as used by MPlayer, allows... 10.0 High
- ffmpeg Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by... 10.0 High
- valgrind Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute... 7.2 High
- python Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow... 7.5 High
- blender Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows local users to... 6.9 Medium
- net-snmp Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5... 5.0 Medium
- smarty The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 r2797 and... 7.5 High
- smarty The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 before r2797... 7.5 High
- ibm lotus connections Multiple unspecified vulnerabilities in the Profiles search pages in IBM Lotus Connections 2.x... 10.0 High
- ibm lotus connections IBM Lotus Connections 2.x before 2.0.1 allows attackers to discover passwords via unspecified... 5.0 Medium
- ibm lotus connections IBM Lotus Connections 2.x before 2.0.1 stores the password for the administrative user in the... 2.1 Low
- ibm lotus connections Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote... 7.5 High
- ibm lotus connections Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.x before 2.0.1... 4.3 Medium
- adobe pagemaker Stack-based buffer overflow in AldFs32.dll in Adobe PageMaker 7.0.1 and 7.0.2 allows user... 9.3 High
- nukedgallery gallery SQL injection vulnerability in the Gallery module 1.3 for PHP-Nuke allows remote attackers to... 7.5 High
- simple php scripts gallery Cross-site scripting (XSS) vulnerability in index.php in Simple PHP Scripts gallery 0.1, 0.3, and... 4.3 Medium
- simple php scripts blog Cross-site scripting (XSS) vulnerability in complete.php in Simple PHP Scripts blog 0.3 allows... 4.3 Medium
- ibm tivoli storage manager client, tivoli storage manager express +1 more Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the... 10.0 High
- microsoft debug diagnostic tool The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic... 5.0 Medium
- netpbm pamperspective in Netpbm before 10.35.48 does not properly calculate a window height, which... 4.3 Medium
- webgui The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 (stable) allows remote... 9.3 High
- arihiro kurta kantan web server Directory traversal vulnerability in Arihiro Kurata Kantan WEB Server 1.8 and earlier allows... 5.0 Medium
- snoopy project snoopy, debian linux, nagios +1 more +3 more The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1)... 10.0 High
- opera The links panel in Opera before 9.62 processes Javascript within the context of the "outermost... 4.3 Medium
- opera Opera before 9.62 allows remote attackers to execute arbitrary commands via the History Search... 9.3 High
- adobe pagemaker Heap-based buffer overflow in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote... 9.3 High
- adobe pagemaker Stack-based buffer overflow in AldFs32.dll in Adobe PageMaker 7.0.1 and 7.0.2 allows user... 9.3 High
- drupal Drupal Node Validation Bypass in the node module API 7.5 High
- drupal The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate... 6.0 Medium
- drupal The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might allow remote authenticated... 6.0 Medium
- drupal The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass... 6.0 Medium
- drupal The validation functionality in the core upload module in Drupal 6.x before 6.5 allows remote... 6.0 Medium
- microsoft internet explorer Microsoft Internet Explorer 6 omits high-bit URL-encoded characters when displaying the address... 5.0 Medium
- microsoft internet explorer Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof... 5.8 Medium
- e107 easyshop plugin SQL injection vulnerability in easyshop.php in the EasyShop plugin for e107 allows remote... 7.5 High
- e107 alternate profiles plugin SQL injection vulnerability in newuser.php in the alternate_profiles plugin, possibly 0.2, for... 7.5 High
- aflog aflog 1.01 allows remote attackers to bypass authentication and gain administrative access by... 7.5 High
- easy-script tlads tlAds 1.0 allows remote attackers to bypass authentication and gain administrative access by... 7.5 High
- aiocp SQL injection vulnerability in public/code/cp_polls_results.php in All In One Control Panel ... 7.5 High
- Show olderLoading…