cve.nowby Sazabi

CVEs published October 22, 2008

34 CVEs were published on October 22, 2008: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 34
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 34
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 34

CVE-2008-4699Insecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004 allows remote attackers to execute…UnratedOct 22, 2008
CVE-2008-4700SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to…UnratedOct 22, 2008
CVE-2008-4701SQL injection vulnerability in admin.php in Libera CMS 1.12, when magic_quotes_gpc is disabled, allows remote attackers to execute…UnratedOct 22, 2008
CVE-2008-4702Multiple directory traversal vulnerabilities in PhpWebGallery 1.3.4 allow remote attackers to include and execute arbitrary local files…UnratedOct 22, 2008
CVE-2008-4677autoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions, and 7.2 stores…UnratedOct 22, 2008
CVE-2008-4678The HTTP_Request_Parser method in the HTTP Transport component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 allows…UnratedOct 22, 2008
CVE-2008-4679The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when…UnratedOct 22, 2008
CVE-2008-4680packet-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application…UnratedOct 22, 2008
CVE-2008-4681Unspecified vulnerability in the Bluetooth RFCOMM dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of…UnratedOct 22, 2008
CVE-2008-4682wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a malformed Tamos…UnratedOct 22, 2008
CVE-2008-4683The dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allows remote attackers…UnratedOct 22, 2008
CVE-2008-4684packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote…UnratedOct 22, 2008
CVE-2008-4685Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through…UnratedOct 22, 2008
CVE-2008-4686Multiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC media player, probably 0.9.4, might allow…UnratedOct 22, 2008
CVE-2008-4687manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing…UnratedOct 22, 2008
CVE-2008-4688core/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the…UnratedOct 22, 2008
CVE-2008-4689Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.UnratedOct 22, 2008
CVE-2008-4690lynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL handler, allows remote attackers to execute…UnratedOct 22, 2008
CVE-2008-4691Unspecified vulnerability in the SQLNLS_UNPADDEDCHARLEN function in the New Compiler (aka Starburst derived compiler) component in the…UnratedOct 22, 2008
CVE-2008-4692The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5 before FP2, when a definer cannot…UnratedOct 22, 2008
CVE-2008-4693The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive information to the trace output, which…UnratedOct 22, 2008
CVE-2008-4665SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to (1)…UnratedOct 22, 2008
CVE-2008-4666SQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to execute arbitrary SQL commands via the…UnratedOct 22, 2008
CVE-2008-4667Directory traversal vulnerability in rss.php in ArabCMS 2.0 beta 1 allows remote attackers to include and execute arbitrary local files…UnratedOct 22, 2008
CVE-2008-4668Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for Joomla! allows remote attackers to include…UnratedOct 22, 2008

Show all 34 entriesShow fewer entries