cve.nowby Sazabi

CVEs published October 3, 2008

35 CVEs were published on October 3, 2008: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 35
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 35
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 35

CVE-2008-4383Stack-based buffer overflow in the Agranet-Emweb embedded management web server in Alcatel OmniSwitch OS7000, OS6600, OS6800, OS6850, and…UnratedOct 3, 2008
CVE-2008-4423SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the item…UnratedOct 3, 2008
CVE-2008-4424Cross-site scripting (XSS) vulnerability in index.php in Domain Group Network GooCMS 1.02 allows remote attackers to inject arbitrary web…UnratedOct 3, 2008
CVE-2008-4425Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to delete…UnratedOct 3, 2008
CVE-2008-4426Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote attackers to…UnratedOct 3, 2008
CVE-2008-4427changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative authentication…UnratedOct 3, 2008
CVE-2008-4428Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier allows remote…UnratedOct 3, 2008
CVE-2008-4429Unspecified vulnerability in SOURCENEXT Virus Security ZERO 9.5.0173 and earlier and Virus Security 9.5.0173 and earlier allows remote…UnratedOct 3, 2008
CVE-2008-4431SQL injection vulnerability in index.php in IceBB 1.0-rc9.3 and earlier allows remote attackers to execute arbitrary SQL commands via the…UnratedOct 3, 2008
CVE-2008-4432Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attackers to inject…UnratedOct 3, 2008
CVE-2008-4433SQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow remote attackers to execute arbitrary…UnratedOct 3, 2008
CVE-2008-4434Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlier allows remote…UnratedOct 3, 2008
CVE-2008-4435Multiple cross-site scripting (XSS) vulnerabilities in the RMSOFT Downloads Plus (rmdp) module 1.5 and 1.7 for Xoops allow remote…UnratedOct 3, 2008
CVE-2008-4436SQL injection vulnerability in bblog_plugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitrary SQL commands via…UnratedOct 3, 2008
CVE-2008-4437Directory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5, when --attach_path is enabled, allows…UnratedOct 3, 2008
CVE-2008-4438Cross-site scripting (XSS) vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbitrary web script or…UnratedOct 3, 2008
CVE-2008-4439PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote attackers to…UnratedOct 3, 2008
CVE-2008-4440The to-upgrade plugin in feta 1.4.16 allows local users to overwrite arbitrary files via a symlink on the (1) /tmp/feta.install.$USER and…UnratedOct 3, 2008
CVE-2008-3832A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5-45 on Fedora 9…UnratedOct 3, 2008
CVE-2008-3833The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid and setgid bits…UnratedOct 3, 2008
CVE-2008-4359lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL…UnratedOct 3, 2008
CVE-2008-4360mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons…UnratedOct 3, 2008
CVE-2008-4405xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a…UnratedOct 3, 2008
CVE-2008-4406A certain Debian patch to the run scripts for sabre (aka xsabre) 0.2.4b allows local users to delete or overwrite arbitrary files via a…UnratedOct 3, 2008
CVE-2008-4407XRunSabre in sabre (aka xsabre) 0.2.4b relies on the ability to create /tmp/sabre.log, which allows local users to cause a denial of…UnratedOct 3, 2008

Show all 35 entriesShow fewer entries