CVEs published in October 2008
540 vulnerabilities, 114 critical, 1 exploited.
- galerieSQL injection vulnerability in galerie.php in Galerie 3.2 allows remote attackers to execute...7.5 High
- blue coat systems k9 web protectionBlue Coat K9 Web Protection 4.0.230 Beta relies on client-side JavaScript as a protection...7.5 High
- konquerorThe HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service ...5.0 Medium
- phorumCross-site scripting (XSS) vulnerability in BBcode API module in Phorum 5.2.8 allows remote...4.3 Medium
- designplace asp\/ms access shoutboxASP/MS Access Shoutbox, probably 1.1 beta, stores db/shoutdb.mdb under the web root with...5.0 Medium
- todd woolums asp news managementTodd Woolums ASP News Management, possibly 2.21, stores db/news.mdb under the web root with...5.0 Medium
- microsoft windows vistaMicrosoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a...4.9 Medium
- foss gallery galleryUnrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery...10.0 High
- tonec inc. internet download managerStack-based buffer overflow in the file parsing function in Tonec Internet Download Manager,...7.8 High
- ibm lotus quickrUnspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) allows editors to...7.5 High
- ibm lotus quickrUnspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) allows a place...7.5 High
- ibm lotus quickrUnspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) might allow...7.8 High
- herosoft hero dvd playerHeap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user...6.8 Medium
- adobe flash playerThe Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause...6.8 Medium
- datafeedfile dff framework apiMultiple PHP remote file inclusion vulnerabilities in DataFeedFile (DFF) PHP Framework API allow...10.0 High
- solarwinds serv-u file serverDirectory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2...9.0 High
- solarwinds serv-u file serverServ-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a...4.0 Medium
- php web explorer liteMultiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote...9.3 High
- phpautosSQL injection vulnerability in searchresults.php in PHP Autos 2.9.1 allows remote attackers to...7.5 High
- built2go real estate listingsSQL injection vulnerability in event_detail.php in Built2Go Real Estate Listings 1.5 allows...7.5 High
- select development solutions php realtorSQL injection vulnerability in view_cat.php in PHP Realtor 1.5 allows remote attackers to execute...7.5 High
- select development solutions php auto dealerSQL injection vulnerability in view_cat.php in PHP Auto Dealer 2.7 allows remote attackers to...7.5 High
- torrenttraderSQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and...7.5 High
- microsoft digital imageMicrosoft PicturePusher ActiveX control (PipPPush.DLL 7.00.0709), as used in Microsoft Digital...6.8 Medium
- condor project condorCondor before 7.0.5 does not properly handle when the configuration specifies overlapping...7.2 High
- condor project condorUnspecified vulnerability in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to...5.0 Medium
- condor project condorStack-based buffer overflow in the condor_ schedd daemon in Condor before 7.0.5 allows attackers...4.6 Medium
- condor project condorUnspecified vulnerability in Condor before 7.0.5 allows attackers to execute jobs as other users...4.6 Medium
- cisco unityUnspecified vulnerability in Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x...5.8 Medium
- yourownbuxSQL injection vulnerability in referrals.php in YourOwnBux 4.0 allows remote attackers to execute...7.5 High
- apple mailApple Mail.app 3.5 on Mac OS X, when "Store draft messages on the server" is enabled, stores...5.0 Medium
- phpabookDirectory traversal vulnerability in config.inc.php in phpAbook 0.8.8b and earlier, when...5.1 Medium
- ataroneDirectory traversal vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to...10.0 High
- ataroneCross-site scripting (XSS) vulnerability in ap-pages.php in Atarone CMS 1.2.0 allows remote...4.3 Medium
- ataroneSQL injection vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to...6.8 Medium
- yerbaDirectory traversal vulnerability in index.php in SAC.php (SACphp), as used in Yerba 6.3 and...10.0 High
- bluecoat security gateway osCross-site scripting (XSS) vulnerability in the ICAP patience page in Blue Coat Security Gateway...4.3 Medium
- crux software gallerymain.php in Crux Gallery 1.32 and earlier allows remote attackers to gain administrative access...6.8 Medium
- crux software galleryDirectory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when...6.8 Medium
- apache xerces-c\+\+The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of...7.8 High
- redmineCross-site scripting (XSS) vulnerability in Redmine 0.7.2 and earlier allows remote attackers to...4.3 Medium
- v-webmailOpen redirect vulnerability in redirect.php in V-webmail 1.5.0 allows remote attackers to...4.3 Medium
- jim trocki monalert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink...7.2 High
- v-webmailSQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to...7.5 High
- v-webmailV-webmail 1.5.0 allows remote attackers to obtain sensitive information via (1) malformed input...5.0 Medium
- sympasympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on...6.9 Medium
- gnu ibackupibackup 2.27 allows local users to overwrite arbitrary files via a symlink attack on temporary...7.2 High
- freeradiusfreeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a...7.2 High
- freedesktop dbus, dbus1.0, dbus1.1.0 +2 moreThe dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote...2.1 Low
- autodesk design review, revit architecture, dwf viewer +2 moreThe UpdateEngine class in the LiveUpdate ActiveX control (LiveUpdate16.DLL 17.2.56), as used in...9.3 High
- Show moreLoading…