cve.nowby Sazabi

CVEs published January 8, 2008

45 CVEs were published on January 8, 2008: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 45
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 45
Now in CISA KEV: 0
Fix available: 1

Most affected products

org.mortbay.jetty:jetty: 1

Medium, low and unrated 45

CVE-2007-0066The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote…UnratedJan 8, 2008
CVE-2007-0069Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of…UnratedJan 8, 2008
CVE-2007-5352Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1…UnratedJan 8, 2008
CVE-2007-5360Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC defined, as used in…UnratedJan 8, 2008
CVE-2008-0003Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus), when…UnratedJan 8, 2008
CVE-2007-6421Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows…UnratedJan 8, 2008
CVE-2007-6674Cross-site scripting (XSS) vulnerability in Default.asp in RapidShare Database allows remote attackers to inject arbitrary web script or…UnratedJan 8, 2008
CVE-2007-6675The b_system_comments_show function in htdocs/modules/system/blocks/system_blocks.php in XOOPS before 2.0.18 does not check permissions…UnratedJan 8, 2008
CVE-2007-6676The default configuration of Uber Uploader (UU) 5.3.6 and earlier does not block uploads of (1) .html, (2) .asp, and other possibly…UnratedJan 8, 2008
CVE-2008-0133Multiple SQL injection vulnerabilities in Tribisur 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id…UnratedJan 8, 2008
CVE-2008-0134Cross-site scripting (XSS) vulnerability in Forums/setup.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to inject…UnratedJan 8, 2008
CVE-2008-0135Snitz Forums 2000 3.4.06 and earlier stores sensitive information under the web root with insufficient access control, which allows remote…UnratedJan 8, 2008
CVE-2008-0136Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals…UnratedJan 8, 2008
CVE-2008-0137PHP remote file inclusion vulnerability in config.inc.php in SNETWORKS PHP CLASSIFIEDS 5.0 allows remote attackers to execute arbitrary…UnratedJan 8, 2008
CVE-2008-0138PHP remote file inclusion vulnerability in xoopsgallery/init_basic.php in the mod_gallery module for XOOPS, when register_globals is…UnratedJan 8, 2008
CVE-2008-0139Eval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows remote attackers to execute arbitrary PHP…UnratedJan 8, 2008
CVE-2008-0140Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users to read arbitrary…UnratedJan 8, 2008
CVE-2008-0141actions.php in WebPortal CMS 0.6-beta generates predictable passwords containing only the time of day, which makes it easier for remote…UnratedJan 8, 2008
CVE-2008-0142Multiple SQL injection vulnerabilities in WebPortal CMS 0.6-beta allow remote attackers to execute arbitrary SQL commands via the…UnratedJan 8, 2008
CVE-2008-0143PHP remote file inclusion vulnerability in common/db.php in samPHPweb, possibly 4.2.2 and others, as provided with SAM Broadcaster, allows…UnratedJan 8, 2008
CVE-2008-0144PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote attackers to execute arbitrary PHP code…UnratedJan 8, 2008
CVE-2008-0145Unspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown impact and attack vectors.UnratedJan 8, 2008
CVE-2008-0146Cross-site scripting (XSS) vulnerability in the error page in W3-mSQL allows remote attackers to inject arbitrary web script or HTML via…UnratedJan 8, 2008
CVE-2007-6388Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2…UnratedJan 8, 2008
CVE-2007-6422The balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Multi-Processing Module…UnratedJan 8, 2008

Show all 45 entriesShow fewer entries