CVEs published in October 2008
540 vulnerabilities, 114 critical, 1 exploited.
- ovidentiaSQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute...6.5 Medium
- alcatel aosStack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel...10.0 High
- linux kernelThe vmi_write_ldt_entry function in arch/x86/kernel/vmi_32.c in the Virtual Machine Interface ...4.9 Medium
- xmlsoft libxml2libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities,...5.0 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.13.1, 1.12.0, and possibly other versions...4.3 Medium
- debian xsabreXRunSabre in sabre (aka xsabre) 0.2.4b relies on the ability to create /tmp/sabre.log, which...2.1 Low
- debian xsabreA certain Debian patch to the run scripts for sabre (aka xsabre) 0.2.4b allows local users to...7.2 High
- citrix xenxend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory...7.2 High
- lighttpd, debian linux +1 moremod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is...7.5 High
- lighttpd, debian linux +1 morelighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite...7.5 High
- linux kernelThe generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not...4.9 Medium
- redhat fedoraA certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora...4.9 Medium
- ibm zseriesThe IPv6 Neighbor Discovery Protocol (NDP) implementation on IBM zSeries servers does not...10.0 High
- trend micro officescanThe CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1...5.0 Medium
- trend micro officescanMultiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before...10.0 High
- redhat enterprise linux, enterprise linux desktop +1 morepam_krb5 2.2.14 in Red Hat Enterprise Linux (RHEL) 5 and earlier, when the existing_ticket option...4.4 Medium
- force10 ftos, freebsd, netbsd +3 more +5 moreThe IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2)...9.3 High
- trend micro officescan, worry free business security +1 moreDirectory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT...5.0 Medium
- blosxomCross-site scripting (XSS) vulnerability in blosxom.cgi in Blosxom before 2.1.2 allows remote...4.3 Medium
- safer networking filealyzerStack-based buffer overflow in Safer Networking FileAlyzer 1.6.0.0 and 1.6.0.4 beta, and possibly...9.3 High
- kde konquerorKonqueror in KDE 3.5.9 allows remote attackers to cause a denial of service (application crash)...5.0 Medium
- microsoft internet explorerMicrosoft Internet Explorer 7 allows remote attackers to cause a denial of service (application...5.0 Medium
- hp insight diagnosticsUnspecified vulnerability in HP Insight Diagnostics before 7.9.1.2402 allows remote attackers to...7.8 High
- jasper project jasper, redhat enterprise virtualization +1 moreBuffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900...10.0 High
- jasper project jasperRace condition in the jas_stream_tmpfile function in libjasper/base/jas_stream.c in JasPer 1.900...7.2 High
- jasper project jasperMultiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an...9.3 High
- mailmarshal smtp, e10000 appliance +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the delegated spam management feature in...3.5 Low
- samsung dvr shr2040The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service ...7.8 High
- mr. cgi guy hot links sql phpCross-site scripting (XSS) vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and...4.3 Medium
- mr. cgi guy hot links sql phpSQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows...7.5 High
- creative mind creator cmsSQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers...7.5 High
- livetvscript live tv scriptSQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute...7.5 High
- availscript classmate scriptSQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote...7.5 High
- cmsbuzz cms buzzSQL injection vulnerability in index.php in CMS Buzz allows remote attackers to execute arbitrary...7.5 High
- availscript jobs portal scriptSQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows...7.5 High
- availscript article scriptCross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows...4.3 Medium
- availscript article scriptSQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers...7.5 High
- availscript photo albumMultiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote...4.3 Medium
- availscript photo albumSQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to...7.5 High
- apple mac os xThe default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction...5.0 Medium