# CVEs published 2008-01-17

46 CVEs were published on January 17, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0350](https://cve.now/CVE-2008-0350.md): admin/index.php in Evilsentinel 1.0.9 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to ga (no CVSS)
- [CVE-2008-0351](https://cve.now/CVE-2008-0351.md): admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the es\_security\_captcha pa (no CVSS)
- [CVE-2008-0352](https://cve.now/CVE-2008-0352.md): The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv6 packet, possibly in (no CVSS)
- [CVE-2008-0171](https://cve.now/CVE-2008-0171.md): regex/v4/perl\_matcher\_non\_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attacke (no CVSS)
- [CVE-2008-0172](https://cve.now/CVE-2008-0172.md): The get\_repeat\_type function in basic\_regex\_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-d (no CVSS)
- [CVE-2008-0339](https://cve.now/CVE-2008-0339.md): Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact and remot (no CVSS)
- [CVE-2008-0340](https://cve.now/CVE-2008-0340.md): Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and re (no CVSS)
- [CVE-2008-0341](https://cve.now/CVE-2008-0341.md): Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+ and 10.1.0.5 has unknown impact and remote atta (no CVSS)
- [CVE-2008-0342](https://cve.now/CVE-2008-0342.md): Unspecified vulnerability in the Upgrade/Downgrade component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and remot (no CVSS)
- [CVE-2008-0343](https://cve.now/CVE-2008-0343.md): Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 has unknown imp (no CVSS)
- [CVE-2008-0344](https://cve.now/CVE-2008-0344.md): Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote attack vect (no CVSS)
- [CVE-2008-0345](https://cve.now/CVE-2008-0345.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08. (no CVSS)
- [CVE-2008-0346](https://cve.now/CVE-2008-0346.md): Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.27 and E-Business Suite 11.5.10.2 has unknow (no CVSS)
- [CVE-2008-0347](https://cve.now/CVE-2008-0347.md): Unspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1.2; Database 9.2.0.8, 10.1.0.5, and 10.2.0. (no CVSS)
- [CVE-2008-0348](https://cve.now/CVE-2008-0348.md): Multiple unspecified vulnerabilities in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.18, 8.48 (no CVSS)
- [CVE-2008-0349](https://cve.now/CVE-2008-0349.md): Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.15 and 8.49.07 has (no CVSS)
- [CVE-2008-0325](https://cve.now/CVE-2008-0325.md): SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL commands via the id (no CVSS)
- [CVE-2008-0326](https://cve.now/CVE-2008-0326.md): SQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-0327](https://cve.now/CVE-2008-0327.md): SQL injection vulnerability in show.php in FaScript FaMp3 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter (no CVSS)
- [CVE-2008-0328](https://cve.now/CVE-2008-0328.md): SQL injection vulnerability in page.php in FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id paramete (no CVSS)
- [CVE-2008-0329](https://cve.now/CVE-2008-0329.md): LulieBlog 1.0.1 and 1.0.2 does not restrict access to (1) article\_suppr.php, (2) comment\_accepter.php, and (3) comment\_refuser.php in Admin/ (no CVSS)
- [CVE-2008-0330](https://cve.now/CVE-2008-0330.md): Open System Consultants (OSC) Radiator before 4.0 allows remote attackers to cause a denial of service (daemon crash) via malformed RADIUS r (no CVSS)
- [CVE-2008-0331](https://cve.now/CVE-2008-0331.md): Unspecified vulnerability in Funkwerk System Software before 7.4.1 PATCH 9 for certain Funkwerk Router / VPN devices allows remote attackers (no CVSS)
- [CVE-2008-0332](https://cve.now/CVE-2008-0332.md): Directory traversal vulnerability in arias/help/effect.php in aria 0.99-6 allows remote attackers to include and execute arbitrary local fil (no CVSS)
- [CVE-2008-0333](https://cve.now/CVE-2008-0333.md): Directory traversal vulnerability in download\_view\_attachment.aspx in AfterLogic MailBee WebMail Pro 4.1 for ASP.NET allows remote attackers (no CVSS)
- [CVE-2008-0334](https://cve.now/CVE-2008-0334.md): Cross-site scripting (XSS) vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2.4.1 allows remote attackers to inject arbi (no CVSS)
- [CVE-2008-0335](https://cve.now/CVE-2008-0335.md): Cross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via a (no CVSS)
- [CVE-2008-0336](https://cve.now/CVE-2008-0336.md): Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs an (no CVSS)
- [CVE-2008-0337](https://cve.now/CVE-2008-0337.md): Heap-based buffer overflow in the \_mwProcessReadSocket function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to execute a (no CVSS)
- [CVE-2008-0338](https://cve.now/CVE-2008-0338.md): Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read (no CVSS)
- [CVE-2008-0027](https://cve.now/CVE-2008-0027.md): Heap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (C (no CVSS)
- [CVE-2008-0324](https://cve.now/CVE-2008-0324.md): Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a denial of service (crash) by calling the 0x80 (no CVSS)
- [CVE-2007-6685](https://cve.now/CVE-2007-6685.md): Unspecified vulnerability in the Publish XP module Menalto Gallery before 2.2.4 allows attackers to create albums and upload files via unkno (no CVSS)
- [CVE-2007-6686](https://cve.now/CVE-2007-6686.md): The URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute arbitrary local files via unknown vectors rel (no CVSS)
- [CVE-2007-6687](https://cve.now/CVE-2007-6687.md): Multiple cross-site scripting (XSS) vulnerabilities in Menalto Gallery before 2.2.4 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2007-6688](https://cve.now/CVE-2007-6688.md): Unspecified vulnerability in the Installation application in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to " (no CVSS)
- [CVE-2007-6689](https://cve.now/CVE-2007-6689.md): Menalto Gallery before 2.2.4 does not properly check for malicious file extensions during file uploads, which allows attackers to execute ar (no CVSS)
- [CVE-2007-6690](https://cve.now/CVE-2007-6690.md): The Gallery Remote module in Menalto Gallery before 2.2.4 does not check permissions for unspecified GR commands, which has unknown impact a (no CVSS)
- [CVE-2007-6691](https://cve.now/CVE-2007-6691.md): Multiple unspecified vulnerabilities in Menalto Gallery before 2.2.4 have unknown impact, related to (1) "hotlink protection" in the URL rew (no CVSS)
- [CVE-2007-6692](https://cve.now/CVE-2007-6692.md): Open redirect vulnerability in Menalto Gallery before 2.2.4 allows remote attackers to redirect users to arbitrary web sites and conduct phi (no CVSS)
- [CVE-2007-6693](https://cve.now/CVE-2007-6693.md): Unspecified vulnerability in the WebCam module in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to a "proxied r (no CVSS)
- [CVE-2008-0302](https://cve.now/CVE-2008-0302.md): Untrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows local users to execute arbitrary code via a (no CVSS)
- [CVE-2007-6681](https://cve.now/CVE-2007-6681.md): Stack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote attackers to execute arbitrary code via a long (no CVSS)
- [CVE-2007-6682](https://cve.now/CVE-2007-6682.md): Format string vulnerability in the httpd\_FileCallBack function (network/httpd.c) in VideoLAN VLC 0.8.6d allows remote attackers to execute a (no CVSS)
- [CVE-2007-6683](https://cve.now/CVE-2007-6683.md): The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via (1) the :demuxdump-file option in a filen (no CVSS)
- [CVE-2007-6684](https://cve.now/CVE-2007-6684.md): The RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service (crash) via a request without a Transport parame (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-01-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.