CVEs published in December 2008
528 vulnerabilities, 129 critical, 0 exploited.
- textpatternCross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6...3.5 Low
- bpsoft hex workshopBuffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause...9.3 High
- intellitamperStack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute...9.3 High
- bpftp bulletproof ftp clientStack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute...9.3 High
- bpftp bulletproof ftp clientStack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted...9.3 High
- wordpress page flip image gallery pluginDirectory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2...4.3 Medium
- alstrasoft web email script enterpriseSQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows...7.5 High
- microsoft internet explorerArgument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows...6.8 Medium
- google chrome** DISPUTED ** Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3...6.8 Medium
- bloofox bloofoxcmsDirectory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows...8.1 High
- f-prot antivirusF-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted...5.0 Medium
- sun snmp management agentSun SNMP Management Agent (SUNWmasf) 1.4u2 through 1.5.4 allows local users to overwrite...6.9 Medium
- microsoft windows media playerInteger overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP...4.3 Medium
- debian linux, kvm qumranet kvm, qemu +1 more +3 moreHeap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU...7.2 High
- asterisk zaptelArray index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows...7.2 High
- pdfjampdfjam creates the (1) pdf90, (2) pdfjoin, and (3) pdfnup files with a predictable name, which...6.9 Medium
- netcatMultiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to...4.0 Medium
- phpArray index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent...5.0 Medium
- pligg cmsSQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers...7.5 High
- nodstrum mysql calendarNodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain...7.5 High
- nodstrum mysql calendarSQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote...7.5 High
- freebsdMultiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6...7.2 High
- coolplayerStack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to...9.3 High
- icewarp merak mail serverCross-site scripting (XSS) vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3...4.3 Medium
- php-fusion team impact ti blog system moduleSQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion...7.5 High
- kafooeyblogUnrestricted file upload vulnerability in lib/image_upload.php in KafooeyBlog 1.55b allows remote...7.5 High
- pgp desktopThe PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9...4.9 Medium
- netcatMultiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to...7.5 High
- netcatMultiple cross-site scripting (XSS) vulnerabilities in AIST NetCat 3.12 and earlier allow remote...4.3 Medium
- netcatMultiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when...5.1 Medium
- netcatSQL injection vulnerability in modules/auth/password_recovery.php in AIST NetCat 3.12 and earlier...6.8 Medium
- stormboards aaronnemisis stormboardsSQL injection vulnerability in thread.php in stormBoards 1.0.1 allows remote attackers to execute...7.5 High
- entechtaiwan powerstripThe NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84...7.2 High
- eset smart securityThe Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672...7.2 High
- cgi-rescue kannibbs2000, kannibbs2000i +1 moreDirectory traversal vulnerability in CGI RESCUE KanniBBS2000 (aka KanniBBS2000i, MiniBBS2000, and...5.0 Medium
- sawstudioBuffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of...10.0 High
- sapporoworks blackjumbodogSapporoWorks BlackJumboDog (BJD) before 4.2.3 allows remote attackers to bypass authentication...5.0 Medium
- seasar mayaaMayaa Cross-site Scripting vulnerability4.3 Medium
- hitachi groupmax web workflow sdk set for active server pages, groupmax workflow to development kit for active server pages +1 moreCross-site scripting (XSS) vulnerability in Hitachi Groupmax Web Workflow SDK Set for Active...4.3 Medium
- netatalkThe papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command...9.3 High
- hitachi jp1 integrated management service supportCross-site scripting (XSS) vulnerability in Hitachi JP1/Integrated Management - Service Support...4.3 Medium
- citrix xenxend in Xen 3.3.0 does not properly restrict a guest VM's write access within the /local/domain...7.2 High
- mozilla firefoxMozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service ...5.0 Medium
- qemuOff-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess...7.8 High
- linux kernelThe __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP...4.9 Medium
- kde konquerorThe HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service ...5.0 Medium
- facebook photouploaderHeap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier...9.3 High
- avaya communication managerMultiple unspecified vulnerabilities in the web management interface in Avaya Communication...5.0 Medium
- avaya communication managerMultiple unspecified vulnerabilities in the web management interface in Avaya Communication...9.0 High
- slimcmsredirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to...7.5 High
- Show moreLoading…