CVEs published in December 2008
528 vulnerabilities, 129 critical, 0 exploited.
- kvm qumranet kvm, qemu +1 moreThe protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2)...5.0 Medium
- aspindir iltaweb alisveris sistemiSQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers...7.5 High
- phpHeap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring...10.0 High
- university of washington imapOff-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the...4.3 Medium
- php-collabStatic code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and earlier...9.0 High
- phpcollabgeneral/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary...10.0 High
- php-collabMultiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote...6.8 Medium
- trend micro housecallUse-after-free vulnerability in the Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0...9.3 High
- trend micro housecallThe Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0.1278 in Housecall_ActiveX.dll...9.3 High
- verlihub-project verlihubThe cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in...6.9 Medium
- verlihub-project verlihubThe cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in...9.3 High
- gpsdrivesrc/unit_test.c in gpsdrive (aka gpsdrive-scripts) 2.10~pre4 might allow local users to overwrite...7.6 High
- gpsdrivegpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users to overwrite arbitrary files via a...6.2 Medium
- linux kernelBuffer underflow in the ibwdt_ioctl function in drivers/watchdog/ib700wdt.c in the Linux kernel...7.2 High
- debian linux, linux kernel +1 moreArray index error in arch/mips/kernel/scall64-o32.S in the Linux kernel before 2.6.28-rc8 on 64...4.7 Medium
- linux kernellibata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests,...1.9 Low
- sun opensolaris, solaris +1 moreThe name service cache daemon (nscd) in Sun Solaris 10 and OpenSolaris snv_50 through snv_104...4.6 Medium
- kde konquerorHTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to...4.3 Medium
- skype extension for firefoxThe skype_tool.copy_num method in the Skype extension BETA 2.2.0.95 for Firefox allows remote...4.3 Medium
- moodle, debian linux +1 moreSQL injection vulnerability in the hotpot_delete_selected_attempts function in report.php in the...7.5 High
- novell netwareNovell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS...9.3 High
- wordpress, wordpress mu +1 morewp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not...8.5 High
- sandboxPHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php in Sandbox 1.4...10.0 High
- ipswitch ws ftpIpswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might...5.0 Medium
- ipswitch ws ftpIpswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote...5.0 Medium
- phonecian casino flashaxHeap-based buffer overflow in the Phoenician Casino FlashAX ActiveX control 1.0.0.7 allows remote...9.3 High
- sun opensolaris, solaris +1 moreThe Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01...2.1 Low
- sun opensolaris, solaris +1 moretun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause...7.2 High
- mediawikiMediaWiki 1.8.1, and other versions before 1.13.3, when the wgShowExceptionDetails variable is...4.3 Medium
- mediawikiMediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download...5.0 Medium
- ibm tivoli provisioning managerIBM Tivoli Provisioning Manager (TPM) before 5.1.1.1 IF0006, when its LDAP service is shared with...8.5 High
- sun scappSun ScApp firmware 5.18.x, 5.19.x, and 5.20.0 through 5.20.10 on Sun Fire and Netra platforms...10.0 High
- sun opensolaris, solaris +1 moreUnspecified vulnerability in the X Inter Client Exchange library (aka libICE) in Sun Solaris 8...5.0 Medium
- mediawikiCross-site request forgery (CSRF) vulnerability in the Special:Import feature in MediaWiki 1.3.0...5.8 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.6.11, 1.12.x before 1.12.2, and 1...3.5 Low
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote...4.3 Medium
- libvirtMultiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which...7.2 High
- joomla joomla\!Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which...7.5 High
- barracuda networks spam firewallSQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF...6.5 Medium
- barracuda networks im firewall, load balancer, message archiver +2 more +4 moreMultiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF)...3.5 Low
- opera browserUnspecified vulnerability in Opera before 9.63 allows remote attackers to "reveal random data"...7.8 High
- opera browserCross-site scripting (XSS) vulnerability in Opera before 9.63 allows remote attackers to inject...4.3 Medium
- opera browserOpera before 9.63 does not block unspecified "scripted URLs" during the feed preview, which...4.3 Medium
- opera browserMultiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute...9.3 High
- operaThe HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code...9.3 High
- courier-mta courtier-authlibSQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin...5.1 Medium
- fdgroup olib7 webviewFretwell-Downing Informatics (FDI) OLIB7 WebView 2.5.1.1 allows remote authenticated users to...4.0 Medium
- kwalbumUnrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is...7.1 High
- breach modsecurityMultiple unspecified vulnerabilities in the ModSecurity (aka mod_security) module 2.5.0 through 2...5.0 Medium
- ibm websphere portalUnspecified vulnerability in IBM WebSphere Portal 6.0 before 6.0.1.5 has unknown impact and...10.0 High
- Show moreLoading…