# CVEs published 2008-01-12

16 CVEs were published on January 12, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6284](https://cve.now/CVE-2007-6284.md): The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML (no CVSS)
- [CVE-2008-0242](https://cve.now/CVE-2008-0242.md): Unspecified vulnerability in libdevinfo in Sun Solaris 10 allows local users to access files and gain privileges via unknown vectors, relate (no CVSS)
- [CVE-2008-0243](https://cve.now/CVE-2008-0243.md): Unspecified vulnerability in Lotus Domino 7.0.2 before Fix Pack 3 allows attackers to cause a denial of service via unknown vectors. (no CVSS)
- [CVE-2008-0244](https://cve.now/CVE-2008-0244.md): SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in exec (no CVSS)
- [CVE-2008-0245](https://cve.now/CVE-2008-0245.md): admin.php in UploadImage 1.0 does not check for the original password before making a change to a new password, which allows remote attacker (no CVSS)
- [CVE-2008-0246](https://cve.now/CVE-2008-0246.md): admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which allows remote attacke (no CVSS)
- [CVE-2008-0247](https://cve.now/CVE-2008-0247.md): Heap-based buffer overflow in the Express Backup Server service (dsmsvc.exe) in IBM Tivoli Storage Manager (TSM) Express 5.3 before 5.3.7.3 (no CVSS)
- [CVE-2008-0248](https://cve.now/CVE-2008-0248.md): Buffer overflow in an ActiveX control in ccpm\_0237.dll for StreamAudio ChainCast ProxyManager allows remote attackers to execute arbitrary c (no CVSS)
- [CVE-2008-0249](https://cve.now/CVE-2008-0249.md): PHP Webquest 2.6 allows remote attackers to retrieve database credentials via a direct request to admin/backup\_phpwebquest.php, which leaks (no CVSS)
- [CVE-2008-0250](https://cve.now/CVE-2008-0250.md): Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) (no CVSS)
- [CVE-2008-0251](https://cve.now/CVE-2008-0251.md): Unrestricted file upload vulnerability in PhotoPost vBGallery before 2.4.2 allows remote attackers to upload and execute arbitrary files via (no CVSS)
- [CVE-2008-0252](https://cve.now/CVE-2008-0252.md): Directory traversal vulnerability in the \_get\_file\_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfil (no CVSS, cherrypy)
- [CVE-2008-0123](https://cve.now/CVE-2008-0123.md): Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers (no CVSS)
- [CVE-2007-6420](https://cve.now/CVE-2007-6420.md): Cross-site request forgery (CSRF) vulnerability in the balancer-manager in mod\_proxy\_balancer for Apache HTTP Server 2.2.x allows remote att (no CVSS)
- [CVE-2007-6423](https://cve.now/CVE-2007-6423.md): Unspecified vulnerability in mod\_proxy\_balancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows, allows remote attack (no CVSS)
- [CVE-2008-0005](https://cve.now/CVE-2008-0005.md): mod\_proxy\_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-01-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.