CVEs published in November 2008
433 vulnerabilities, 92 critical, 1 exploited.
- iea software air marshal, emerald, radius test client +3 more +5 more The web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions before 5.1.44,... 10.0 High
- ghh google hack honeypot file upload manager Google Hack Honeypot (GHH) File Upload Manager 1.3 allows remote attackers to delete uploaded... 6.4 Medium
- w3c amaya web browser Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to... 10.0 High
- south river technologies titan ftp server Heap-based buffer overflow in Titan FTP Server 6.05 build 550 allows remote attackers to execute... 10.0 High
- zilab zim server The Local ZIM Server in Zilab Chat and Instant Messaging (ZIM) Server 2.0 and 2.1 allows remote... 5.0 Medium
- zilab zim server The Local ZIM Server (zcs.exe) in Zilab Chat and Instant Messaging (ZIM) Server 2.1 and earlier... 10.0 High
- wordpress Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator ... 4.3 Medium
- net2ftp Multiple directory traversal vulnerabilities in the (a) "Unzip archive" and (b) "Upload files and... 7.5 High
- toddwoolums todd woolums asp news management Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct... 5.0 Medium
- toddwoolums todd woolums asp news management SQL injection vulnerability in viewnews.asp in Todd Woolums ASP News Management 2.2 allows remote... 7.5 High
- syndeocms Multiple directory traversal vulnerabilities in Fred Stuurman SyndeoCMS 2.6.0 allow remote... 4.0 Medium
- syndeocms Cross-site scripting (XSS) vulnerability in index.php in Fred Stuurman SyndeoCMS 2.6.0 allows... 4.3 Medium
- wareziz yuhhu superstar 2008 SQL injection vulnerability in view.topics.php in Yuhhu Superstar 2008 allows remote attackers to... 7.5 High
- powie psys SQL injection vulnerability in index.php in pSys 0.7.0 alpha allows remote attackers to execute... 7.5 High
- aspportal SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to... 7.5 High
- experts SQL injection vulnerability in answer.php in Experts 1.0.0, when magic_quotes_gpc is disabled,... 6.8 Medium
- sun java system application server, oracle glassfish server +1 more Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2... 4.3 Medium
- tntforum tnt forum Directory traversal vulnerability in index.php in TNT Forum 0.9.4, when magic_quotes_gpc is... 6.8 Medium
- tornado knowledge retrieval system Cross-site scripting (XSS) vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4... 4.3 Medium
- ibm tivoli access manager for e-business webseald in WebSEAL 6.0.0.17 in IBM Tivoli Access Manager for e-business allows remote attackers... 4.3 Medium
- virtualox The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows... 4.4 Medium
- suse yast2-backup yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain... 7.2 High
- redhat enterprise linux, enterprise linux desktop +1 more tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora... 6.8 Medium
- redhat enterprise linux, enterprise linux desktop +1 more A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure... 6.0 Medium
- freebsd The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy... 7.0 High
- xine xine-lib xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via "MP3... 4.3 Medium
- xine xine-lib The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15... 4.3 Medium
- xine xine-lib Multiple heap-based buffer overflows in xine-lib before 1.1.15 allow remote attackers to execute... 9.3 High
- xine xine-lib xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required... 9.3 High
- xine xine-lib Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related... 10.0 High
- xine xine-lib The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier... 4.3 Medium
- xine xine-lib demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not validate the count... 6.8 Medium
- xine xine-lib Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows... 4.3 Medium
- xine xine-lib xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input value to... 4.3 Medium
- xine xine-lib xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle (a) negative and... 4.3 Medium
- xine Integer overflow in the real_parse_mdpr function in demux_real.c in xine-lib 1.1.12, and other... 7.1 High
- xine Multiple integer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow... 10.0 High
- xine Multiple heap-based buffer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions,... 9.3 High
- xine Heap-based buffer overflow in the demux_real_send_chunk function in src/demuxers/demux_real.c in... 9.3 High
- xine xine-lib Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow... 9.3 High
- xine xine-lib xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in... 4.3 Medium
- microsoft windows nt, windows 2000 +1 more Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX... 9.3 High
- novell iprint Stack-based buffer overflow in the ExecuteRequest method in the Novell iPrint ActiveX control in... 9.3 High
- novell iprint Insecure method vulnerability in the GetFileList method in an unspecified ActiveX control in... 5.0 Medium
- novell iprint Multiple buffer overflows in Novell iPrint Client before 5.06 allow remote attackers to execute... 9.3 High
- calendarix basic Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to... 7.5 High
- cisco ios The Temporal Key Integrity Protocol (TKIP) implementation in unspecified Cisco products and other... 6.8 Medium
- microsoft windows vista Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows... 6.9 Medium
- ibm workplace content management Cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1... 2.6 Low
- phpcow Unspecified vulnerability in PHPCow allows remote attackers to execute arbitrary code via unknown... 10.0 High
- Show olderLoading…