# CVEs published 2008-01-29 20 CVEs were published on January 29, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2007-6694](https://cve.now/CVE-2007-6694.md): The chrp\_show\_cpuinfo function (chrp/setup.c) in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to (no CVSS) - [CVE-2008-0468](https://cve.now/CVE-2008-0468.md): SQL injection vulnerability in category.php in Flinx 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id pa (no CVSS) - [CVE-2008-0469](https://cve.now/CVE-2008-0469.md): SQL injection vulnerability in index.php in Tiger Php News System (TPNS) 1.0b and earlier allows remote attackers to execute arbitrary SQL c (no CVSS) - [CVE-2008-0470](https://cve.now/CVE-2008-0470.md): A certain ActiveX control in Comodo AntiVirus 2.0 allows remote attackers to execute arbitrary commands via the ExecuteStr method. (no CVSS) - [CVE-2008-0471](https://cve.now/CVE-2008-0471.md): Cross-site request forgery (CSRF) vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete private messages (PM) as ar (no CVSS) - [CVE-2008-0472](https://cve.now/CVE-2008-0472.md): Cross-site request forgery (CSRF) vulnerability in modcp.php in Woltlab Burning Board (wBB) 2.3.6 PL2 allows remote attackers to delete thre (no CVSS) - [CVE-2008-0473](https://cve.now/CVE-2008-0473.md): RTE\_popup\_save\_file.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to upload (1) .html and (2) .htm files via unspecified vecto (no CVSS) - [CVE-2008-0474](https://cve.now/CVE-2008-0474.md): Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Applications Manager 8.1 build 8100 allow remote attackers to inject arb (no CVSS) - [CVE-2008-0475](https://cve.now/CVE-2008-0475.md): ManageEngine Applications Manager 8.1 build 8100 allows remote attackers to obtain sensitive information ( Home-\>Summary) via an invalid URI (no CVSS) - [CVE-2008-0476](https://cve.now/CVE-2008-0476.md): ManageEngine Applications Manager 8.1 build 8100 does not check authentication for monitorType.do and unspecified other pages, which allows (no CVSS) - [CVE-2008-0477](https://cve.now/CVE-2008-0477.md): Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgrade Manager allows re (no CVSS) - [CVE-2008-0478](https://cve.now/CVE-2008-0478.md): Directory traversal vulnerability in index.php in SetCMS 3.6.5 allows remote attackers to include and execute arbitrary local files via a .. (no CVSS) - [CVE-2008-0479](https://cve.now/CVE-2008-0479.md): Directory traversal vulnerability in RTE\_file\_browser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and (no CVSS) - [CVE-2008-0480](https://cve.now/CVE-2008-0480.md): Multiple directory traversal vulnerabilities in Web Wiz Forums 9.07 and earlier allow remote attackers to list arbitrary directories, and .t (no CVSS) - [CVE-2008-0481](https://cve.now/CVE-2008-0481.md): Directory traversal vulnerability in RTE\_file\_browser.asp in Web Wiz Rich Text Editor 4.0 allows remote attackers to list arbitrary director (no CVSS) - [CVE-2008-0174](https://cve.now/CVE-2008-0174.md): GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier uses HTTP Basic Authentication, which transmits usernames and passwords in bas (no CVSS) - [CVE-2008-0175](https://cve.now/CVE-2008-0175.md): Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute a (no CVSS) - [CVE-2008-0176](https://cve.now/CVE-2008-0176.md): Heap-based buffer overflow in w32rtr.exe in GE Fanuc CIMPLICITY HMI SCADA system 7.0 before 7.0 SIM 9, and earlier versions before 6.1 SP6 H (no CVSS) - [CVE-2008-0387](https://cve.now/CVE-2008-0387.md): Integer overflow in Firebird SQL 1.0.3 and earlier, 1.5.x before 1.5.6, 2.0.x before 2.0.4, and 2.1.x before 2.1.0 RC1 might allow remote at (no CVSS) - [CVE-2008-0467](https://cve.now/CVE-2008-0467.md): Stack-based buffer overflow in Firebird before 2.0.4, and 2.1.x before 2.1.0 RC1, might allow remote attackers to execute arbitrary code via (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-01-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.