30337 matches found
CVE-2008-7046
AJ Square Free Polling Script AJPoll allows remote attackers to bypass authentication and create new polls via a direct request to admin/include/newpoll.php, a different vector than CVE-2008-7045. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
CVE-2008-3376
Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors...
CVE-2008-7263
ftpserver.py in pyftpdlib before 0.5.0 does not delay its response after receiving an invalid login attempt, which makes it easier for remote attackers to obtain access via a brute-force attack...
CVE-2008-0774
Cross-site scripting XSS vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the hotelname parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...
CVE-2008-6440
Cerberus Helpdesk before 4.0 Build 600 allows remote attackers to obtain sensitive information via direct requests for "controllers ... that aren't standard helpdesk pages," possibly involving the 1 /display and 2 /kb URIs...
CVE-2008-5961
Cross-site scripting XSS vulnerability in index.php in Tribiq CMS Community 5.0.10B and 5.0.11E allows remote attackers to inject arbitrary web script or HTML via the cID parameter in a document action. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...
CVE-2008-5925
ASP-DEv XM Events Diary stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for diary.mdb...
CVE-2008-7291
gri before 2.12.18 generates temporary files in an insecure way...
CVE-2008-5842
Multiple cross-site scripting XSS vulnerabilities in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via vectors associated with 1 a demo application shipped with WebTransactions and possibly 2 an unspecified...
CVE-2008-1341
SQL injection vulnerability in SearchResults.aspx in LaGarde StoreFront 6 before SP8 allows remote attackers to execute arbitrary SQL commands via the CategoryId parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-7303
The nonet and nointernet sandbox profiles in Apple Mac OS X 10.5.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of launchctl to trigger the launchd daemon's execution of a script...
CVE-2008-5087
SQL injection vulnerability in TYPO3 Another Backend Login wrganotherbelogin extension before 0.0.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-10004
A vulnerability was found in Email Registration 5.x-2.1 on Drupal. It has been declared as critical. This vulnerability affects the function emailregistrationuser of the file emailregistration.module. The manipulation of the argument namenew leads to sql injection. The attack can be initiated...
May 13, 2025—KB5058449 (Monthly Rollup)
None None...
KB5058380: Cumulative security update for Internet Explorer: May 13, 2025
None None...
KB5058429: Windows Server 2008 Security Update (May 2025)
The remote Windows host is missing security update 5058429. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. CVE-2025-29962 - Use of uninitialized resource in Windows Routing and...
Cisco IP Phones Improper Input Validation (CVE-2008-4444)
Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers. This...
April 8, 2025—KB5055561 (Monthly Rollup)
None None...