CVEs published in December 2008
528 vulnerabilities, 129 critical, 0 exploited.
- octeth oemproOcteth Oempro 3.5.5.1, and possibly other versions before 4, does not set the secure flag for the...5.0 Medium
- awstatsawstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows...4.3 Medium
- netart media blog systemSQL injection vulnerability in image.php in NetArt Media Blog System 1.5 allows remote attackers...7.5 High
- netart media car portalSQL injection vulnerability in image.php in NetArt Media Car Portal 2.0 allows remote attackers...7.5 High
- netart media real estate portalSQL injection vulnerability in NetArt Media Real Estate Portal 1.2 allows remote attackers to...7.5 High
- lovecms the simple forumThe Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to...7.5 High
- pilot group pg real roommate finder solutionSQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote...7.5 High
- pilot group pg real estate solutionSQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers...7.5 High
- perl file\Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows...6.9 Medium
- perl file\Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8...6.9 Medium
- dovecotDirectory traversal vulnerability in the ManageSieve implementation in Dovecot 1.0.15, 1.1, and 1...6.4 Medium
- linux kernelLinux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process...4.9 Medium
- karakas-online chm2pdfchm2pdf 0.9 allows user-assisted local users to delete arbitrary files via a symlink attack on ...6.9 Medium
- karakas-online chm2pdfchm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to...2.1 Low
- vitalwerks no-ip ducBuffer overflow in No-IP DUC 2.1.7 and earlier allows remote HTTP servers to execute arbitrary...7.6 High
- galleryGallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when register_globals is enabled, allows...6.8 Medium
- jamit software job boardSQL injection vulnerability in index.php in Jamit Job Board 3.4.10 allows remote attackers to...7.5 High
- bdigital web solutions webstudio ecatalogueSQL injection vulnerability in index.php in WebStudio eCatalogue allows remote attackers to...7.5 High
- bdigital web solutions webstudio ehotelSQL injection vulnerability in index.php in WebStudio eHotel allows remote attackers to execute...7.5 High
- videogirls bizSQL injection vulnerability in view_snaps.php in VideoGirls BiZ allows remote attackers to...7.5 High
- fuzzylime cmsDirectory traversal vulnerability in code/track.php in FuzzyLime 3.03 allows remote attackers to...7.5 High
- scripts4you clean cmsCross-site scripting (XSS) vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows...4.3 Medium
- scripts4you clean cmsSQL injection vulnerability in full_txt.php in Werner Hilversum Clean CMS 1.5 allows remote...7.5 High
- scripts4you faq managerPHP remote file inclusion vulnerability in include/header.php in Werner Hilversum FAQ Manager 1.2...6.8 Medium
- scripts4you faq managerSQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote...7.5 High
- apple cupsInteger overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote...7.5 High
- wiresharkWireshark 1.0.4 and earlier allows remote attackers to cause a denial of service via a long SMTP...5.0 Medium
- sambasmbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and...8.5 High