Stack overflow

Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allow context-dependent attackers to gain privileges via an untrusted application, as demonstrated by a an application that grants itself...

CVE-2008-3114

Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows context-dependent attackers to obtain sensitive information the cache location via an untrusted application, aka CR 6704074...

CVE-2008-3114

Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows context-dependent attackers to obtain sensitive information the cache location via an untrusted application, aka CR 6704074...

CVE-2008-3113

CVE-2008-3113 affects Sun Java Web Start in Sun JDK/JRE 5.0 before Update 16 and J2SE 1.4.x before 1.4.2_18. The vulnerability is described as unspecified but allows remote attackers to create or delete arbitrary files via an untrusted application. The connected documents confirm the affected pro...

CVE-2008-1806

Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary PFB file, which triggers a heap-based buffer overflow...

Unfixed XSS vulnerability at www.jobgeni.com

Security researcher xylitol, has submitted on 16/06/2008 a cross-site-scripting XSS vulnerability affecting www.jobgeni.com, which at the time of submission ranked 516984 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is current...

Unfixed Script Insertion vulnerability at www.cnenigeria.com

Security researcher RePLiKaN, has submitted on 16/06/2008 a Script Insertion vulnerability affecting www.cnenigeria.com, which at the time of submission ranked 1347731 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is currently...

CVE-2008-2820

creationtimestamp| type| source ---|---|--- 2008-06-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5831...

CVE-2008-2568

creationtimestamp| type| source ---|---|--- 2008-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5743 2008-06-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5833...

Zomplog <= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit

Exploit for unknown platform in category web applications ========================================================== Zomplog Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль "Confirm...

Archangel Weblog 0.90.02 - post_id SQL Injection

Archangel Weblog 0.90.02 - postid SQL Injection !/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip exploit aported password crypted mgharba :d:d:d:d Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz :...

CVE-2008-2349

creationtimestamp| type| source ---|---|--- 2008-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5634...

CVE-2008-2414

creationtimestamp| type| source ---|---|--- 2008-05-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31803...

openSUSE 10 Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-5158)

This update brings the Mozilla XULRunner engine to security update version 1.8.1.13 Following security problems were fixed : - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant cross-tab popups - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java socket connection to any local port via...

CVE-2008-1920

creationtimestamp| type| source ---|---|--- 2008-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31656...

openSUSE 10 Security Update : seamonkey (seamonkey-5153)

This update brings Mozilla SeaMonkey to security update version 1.1.9 Following security problems were fixed : - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant cross-tab popups - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java socket connection to any local port via LiveConnect - MFSA...

CVE-2008-1570

Race condition in the createlockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs. NOTE: this is due to an incomplete fix for CVE-2008-1569...

CVE-2008-1408

creationtimestamp| type| source ---|---|--- 2008-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5263...

Design/Logic Flaw

Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via unspecified vectors...

Authorization

IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown impact and attack vectors...