CVEs published in November 2008
433 vulnerabilities, 92 critical, 1 exploited.
- mozilla firefoxMozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: URI when it is accessed in...5.1 Medium
- mozilla firefox, seamonkey, thunderbird +2 more +4 morejslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x...10.0 High
- mozilla firefox, seamonkey +1 moreMozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1...5.0 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +1 more +3 moreThe http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2...9.3 High
- jooblogSQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote...7.5 High
- clam anti-virus clamavOff-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus ...9.3 High
- isecsoft anti-keylogger eliteBuffer overflow in AKEProtect.sys 3.3.3.0 in ISecSoft Anti-Keylogger Elite 3.3.0 and earlier, and...7.2 High
- isecsoft anti-trojan eliteBuffer overflow in Atepmon.sys in ISecSoft Anti-Trojan Elite 4.2.1 and earlier, and possibly 4.2...7.2 High
- mole group rental scriptSQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote...7.5 High
- mole group pizza scriptSQL injection vulnerability in index.php in Mole Group Pizza Script allows remote attackers to...7.5 High
- network-client.com ftp nowHeap-based buffer overflow in Network-Client FTP Now 2.6, and possibly other versions, allows...10.0 High
- gnu gnutls, canonical ubuntu linux, debian linux +4 more +6 moreThe _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2...5.9 Medium
- microsoft windows server 2003, windows vista +1 moreRace condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of...4.0 Medium
- ibm metrica service assurance frameworkMultiple cross-site scripting (XSS) vulnerabilities in the web-based interface in IBM Metrica...3.5 Low
- microsoft windows, windows 2000, windows server 2008 +1 more +3 moreMicrosoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold...9.3 High
- microsoft xml core servicesCross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft...4.3 Medium
- microsoft internet explorerCross-domain vulnerability in Microsoft XML Core Services 3.0 and 4.0, as used in Internet...4.3 Medium
- zeeways photovideotubeZeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and...7.5 High
- sweex ro002 routerSweex RO002 Router with firmware Ts03-072 has "rdc123" as its default password for the "rdc123"...7.5 High
- graphiks myforumGraphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative...7.5 High
- php-nuke league moduleCross-site scripting (XSS) vulnerability in the League module for PHP-Nuke, possibly 2.4, allows...4.3 Medium
- novell edirectoryUse-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7...9.8 Critical
- elkagroup image gallerySQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to...7.5 High
- videolan vlc media playerStack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user...9.3 High
- ibm hardware management consoleThe Resource Monitoring and Control (RMC) daemon in IBM Hardware Management Console (HMC) 7...5.0 Medium
- a mennucc1 printfilters-ppd** DISPUTED ** master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary...6.9 Medium
- linux kernelThe chip_command function in drivers/media/video/tvaudio.c in the Linux kernel 2.6.25.x before 2...7.8 High
- pythonMultiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent...10.0 High
- libcaudioHeap-based buffer overflow in the cddb_read_disc_data function in cddb.c in libcdaudio 0.99.12p2...10.0 High
- linux kernelThe __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier...4.9 Medium
- sap sapgui, simba technologies mdrmsap activex control +1 moreUnspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui...9.3 High
- nagios, op5 monitor +1 moreCross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5...6.8 Medium
- nagios, op5 monitor +1 moreThe Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote...6.5 Medium
- microsoft sharepoint serverMicrosoft SharePoint uses URLs with the same hostname and port number for a web site's primary...3.5 Low
- ibm lotusMultiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1 before 8.1.0.2...4.3 Medium
- sun opensolaris, solaris +1 morein.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103,...10.0 High
- sun solstice x.25Race condition in the s_xout kernel module in Sun Solstice X.25 9.2, when running on a multiple...4.0 Medium
- mega-nerd secret rabbit codeBuffer overflow in src/src_sinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4,...9.3 High
- lazaruscreate_lazarus_export_tgz.sh in lazarus 0.9.24 allows local users to overwrite or delete...6.9 Medium
- mywebland bloggie liteSQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote...7.5 High
- shahroodSQL injection vulnerability in ndetail.php in Shahrood allows remote attackers to execute...7.5 High
- chilkat software crypt activex controlInsecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2...9.3 High
- ultravncMultiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in...9.3 High
- phpxSQL injection vulnerability in admin/includes/news.inc.php in PHPX 3.5.16, when magic_quotes_gpc...6.8 Medium
- vmware ace, esx, esxi +3 more +5 moreThe CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player...6.9 Medium
- adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 8 and 8.0.1 and ColdFusion MX 7.0.2 allows local...7.2 High
- adobe flash playerCross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows...4.3 Medium
- adobe flash playerAdobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows...6.8 Medium
- adobe flash playerAdobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly...4.3 Medium
- Show moreLoading…