CVE-2008-1806

Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary PFB file, which triggers a heap-based buffer overflow...

Unfixed XSS vulnerability at www.jobgeni.com

Security researcher xylitol, has submitted on 16/06/2008 a cross-site-scripting XSS vulnerability affecting www.jobgeni.com, which at the time of submission ranked 516984 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is current...

Unfixed Script Insertion vulnerability at www.cnenigeria.com

Security researcher RePLiKaN, has submitted on 16/06/2008 a Script Insertion vulnerability affecting www.cnenigeria.com, which at the time of submission ranked 1347731 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is currently...

CVE-2008-2820

creationtimestamp| type| source ---|---|--- 2008-06-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5831...

CVE-2008-2568

creationtimestamp| type| source ---|---|--- 2008-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5743 2008-06-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5833...

Archangel Weblog 0.90.02 - post_id SQL Injection

Archangel Weblog 0.90.02 - postid SQL Injection !/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip exploit aported password crypted mgharba :d:d:d:d Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz :...

Zomplog <= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit

Exploit for unknown platform in category web applications ========================================================== Zomplog Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль "Confirm...

CVE-2008-2349

creationtimestamp| type| source ---|---|--- 2008-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5634...

CVE-2008-2414

creationtimestamp| type| source ---|---|--- 2008-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31803...

openSUSE 10 Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-5158)

This update brings the Mozilla XULRunner engine to security update version 1.8.1.13 Following security problems were fixed : - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant cross-tab popups - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java socket connection to any local port via...

CVE-2008-1920

creationtimestamp| type| source ---|---|--- 2008-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31656...

openSUSE 10 Security Update : seamonkey (seamonkey-5153)

This update brings Mozilla SeaMonkey to security update version 1.1.9 Following security problems were fixed : - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant cross-tab popups - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java socket connection to any local port via LiveConnect - MFSA...

CVE-2008-1570

Race condition in the createlockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs. NOTE: this is due to an incomplete fix for CVE-2008-1569...

CVE-2008-1408

creationtimestamp| type| source ---|---|--- 2008-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5263...

Design/Logic Flaw

Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via unspecified vectors...

Buffer overflow

Buffer overflow in the DAS server in IBM DB2 UDB before 8.2 Fixpak 16 has unknown attack vectors, and an impact probably involving "invalid memory access."...

CVE-2008-0696

IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown impact and attack vectors...

Authorization

IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown impact and attack vectors...

DB2 < 8.1 FixPak 16 Multiple Vulnerabilities (deprecated)

Binary data 4358.prm...

GLSA-200801-16 : MaraDNS: CNAME Denial of Service

The remote host is affected by the vulnerability described in GLSA-200801-16 MaraDNS: CNAME Denial of Service Michael Krieger reported that a specially crafted DNS could prevent an authoritative canonical name CNAME record from being resolved because of an 'improper rotation of resource records'...