CVEs published in December 2008
528 vulnerabilities, 129 critical, 0 exploited.
- bpowerhouse mini cmsMultiple directory traversal vulnerabilities in index.php in Mini CMS 1.0.1 allow remote...7.5 High
- iwrite nightfall personal diaryNightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient...5.0 Medium
- iwrite nightfall personal diaryCross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows...4.3 Medium
- kalptaru infotech product sale frameworkSQL injection vulnerability in customer.forumtopic.php in Kalptaru Infotech Product Sale...7.5 High
- katywhitton rankemSQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to...7.5 High
- katywhitton rankemSQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to...7.5 High
- phppgadminDirectory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when...4.3 Medium
- check up newSQL injection vulnerability in findoffice.php in Check Up New Generation (aka Check New) 4.52,...6.8 Medium
- lcxbbportalMultiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 allow remote...7.5 High
- projectpierMultiple cross-site scripting (XSS) vulnerabilities in ProjectPier 0.8 and earlier allow remote...4.3 Medium
- projectpierCross-site request forgery (CSRF) vulnerability in index.php in ProjectPier 0.8 and earlier...6.8 Medium
- nukeditSQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows...7.5 High
- mini-pubPHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows...7.5 High
- mini-pubmini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary...7.5 High
- mini-pubAbsolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows...5.0 Medium
- scssboardMultiple SQL injection vulnerabilities in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allow...7.5 High
- scssboardPHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows...7.5 High
- scssboardadmin/forums.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to bypass...7.5 High
- proclanmanager pro clan managerSession fixation vulnerability in Pro Clan Manager 0.4.2 and earlier allows remote attackers to...7.5 High
- unscripts webmaster marketplaceSQL injection vulnerability in member.php in Webmaster Marketplace allows remote attackers to...7.5 High
- adcomplete poll proSQL injection vulnerability in the login feature in Poll Pro 2.0 allows remote attackers to...7.5 High
- dotnetindex professional download assistantProfessional Download Assistant 0.1 stores sensitive information under the web root with...5.0 Medium
- dotnetindex professional download assistantSQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows...7.5 High
- php multiple newsletters multiple newslettersDirectory traversal vulnerability in index.php in PHP Multiple Newsletters 2.7, when...6.8 Medium
- phpeppershopMultiple cross-site scripting (XSS) vulnerabilities in PHPepperShop 1.4 allow remote attackers to...4.3 Medium
- ipn-mate ipn pro 3Cross-site request forgery (CSRF) vulnerability in admin/settings.php in IPN Pro 3 1.44 and...6.8 Medium
- bonzacart bonza cartCross-site request forgery (CSRF) vulnerability in admin/ad_settings.php in Bonza Cart 1.10 and...6.8 Medium
- phpmultiplenewslettersCross-site scripting (XSS) vulnerability in index.php in Triangle Solutions PHP Multiple...4.3 Medium
- dinkumsoft dl paycartCross-site request forgery (CSRF) vulnerability in admin/settings.php in DL PayCart 1.34 and...6.8 Medium
- orb networks orbUnspecified vulnerability in the media server in Orb Networks Orb before 2.01.0025 allows remote...5.0 Medium
- aruba networks mobility controller, arubanetworks aruba mobility controller, aruba networks mobility controllers +2 moreAruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote...7.8 High
- aspapps aspportalASPPortal stores sensitive information under the web root with insufficient access control, which...5.0 Medium
- netrefSQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL...7.5 High
- dazzlindonna postecardsPostEcards stores sensitive information under the web root with insufficient access control,...5.0 Medium
- dazzlindonna postecardsSQL injection vulnerability in sendcard.cfm in PostEcards allows remote attackers to execute...7.5 High
- mozilla thunderbirdMozilla Thunderbird 2.0.14 does not properly handle (1) multipart/mixed e-mail messages with many...4.3 Medium
- microsoft internet explorer** DISPUTED ** The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 8.0 Beta 2 relies on the XDomainRequestAllowed HTTP header to...4.3 Medium
- microsoft internet explorerThe XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP...4.3 Medium
- microsoft internet explorerThe XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a...4.3 Medium
- microsoft internet explorerThe XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the...4.3 Medium
- microsoft internet explorerThe XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the...4.3 Medium
- sun java web console, solaris, sunos +2 moreOpen redirect vulnerability in console/faces/jsp/login/BeginLogin.jsp in Sun Java Web Console 3.0...4.3 Medium
- sun java system portal serverUnspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server...5.0 Medium
- virusbusterVirusBuster 4.5.11.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass...9.3 High
- hauri virobotHAURI ViRobot 2008.12.4.1499 and possibly 2008.9.12.1375, when Internet Explorer 6 or 7 is used,...9.3 High
- virusblokada vba32 antivirusVirusBlokAda VBA32 3.12.8.5, when Internet Explorer 6 or 7 is used, allows remote attackers to...9.3 High
- trend micro antivirusTrend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, when Internet Explorer 6 or 7 is used,...9.3 High
- hacksoft the hackerHacksoft The Hacker 6.3.1.2.174 and possibly 6.3.0.9.081, when Internet Explorer 6 or 7 is used,...9.3 High
- symantec antivirusSymantec AntiVirus (SAV) 10, when Internet Explorer 6 or 7 is used, allows remote attackers to...9.3 High
- Show moreLoading…