CVE-2008-1341

SQL injection vulnerability in SearchResults.aspx in LaGarde StoreFront 6 before SP8 allows remote attackers to execute arbitrary SQL commands via the CategoryId parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-7303

The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's execution of a script...

CVE-2008-5087

SQL injection vulnerability in TYPO3 Another Backend Login wrganotherbelogin extension before 0.0.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-10004

A vulnerability was found in Email Registration 5.x-2.1 on Drupal. It has been declared as critical. This vulnerability affects the function emailregistrationuser of the file emailregistration.module. The manipulation of the argument namenew leads to sql injection. The attack can be initiated...

May 13, 2025—KB5058449 (Monthly Rollup)

None None...

KB5058380: Cumulative security update for Internet Explorer: May 13, 2025

None None...

KB5058429: Windows Server 2008 Security Update (May 2025)

The remote Windows host is missing security update 5058429. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. CVE-2025-29962 - Use of uninitialized resource in Windows Routing and...

Cisco IP Phones Improper Input Validation (CVE-2008-4444)

Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers. This...

April 8, 2025—KB5055570 (Security-only update)

None None...

April 8, 2025—KB5055609 (Monthly Rollup)

None None...

April 8, 2025—KB5055596 (Security-only update)

None None...

KB5055515: Cumulative security update for Internet Explorer: April 8, 2025

None None...

April 8, 2025—KB5055561 (Monthly Rollup)

None None...

Microsoft Local Security Authority Server 安全漏洞

Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. A security vulnerability exists in Microsoft Local Security Authority Server. The following products and versions are affected:Windows Server 2025,Windows Server 2025 Server Core...

KB5056457: Servicing stack update for Windows Server 2008 SP2: April 8, 2025

None None...

KB5056456: Servicing stack update for Windows Server 2008 R2 SP1: April 8, 2025

None None...

Microsoft Active Directory Certificate Services 安全漏洞

Microsoft Active Directory Certificate Services is a Windows Server role from Microsoft Corporation USA that issues and manages Public Key Infrastructure PKI certificates used in secure communications and authentication protocols. A security vulnerability exists in Microsoft Active Directory...

Microsoft Windows NTFS 缓冲区错误漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-healing, and logging capabilities. A buffer error vulnerability exists in Microsoft Windows NTFS. An attacker could exploit the vulnerability to elevate privileges...

KB5055596: Windows Server 2008 Security Update (April 2025)

The remote Windows host is missing security update 5055596. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. CVE-2025-26687 - A remote code execution vulnerability. An attacker ca...

KB5055570: Windows Server 2008 R2 Security Update (April 2025)

The remote Windows host is missing security update 5055570. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network. CVE-2025-26687 - A remote code execution vulnerability. An attacker ca...