CVE-2008-4425

creationtimestamp| type| source ---|---|--- 2008-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6215 2008-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6231 2009-02-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8105...

CVE-2008-3431

creationtimestamp| type| source ---|---|--- 2008-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6218 2020-06-17 19:20:47+00:00| seen| MISP/5eea648c-6088-4f01-bf29-6af3ac13a7a7 2020-06-22 13:30:58+00:00| seen| https://t.me/cyberbannewsir/909 2020-10-09 13:47:08+00:00| seen|...

CVE-2008-3668

creationtimestamp| type| source ---|---|--- 2008-08-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32199 2008-08-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32202 2008-08-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32203 2008-08-09...

USN-627-1: Dnsmasq vulnerability

Dan Kaminsky discovered weaknesses in the DNS protocol as implemented by Dnsmasq. A remote attacker could exploit this to spoof DNS entries and poison DNS caches. Among other things, this could lead to misdirected email and web traffic...

USN-622-1: Bind vulnerability

Dan Kaminsky discovered weaknesses in the DNS protocol as implemented by Bind. A remote attacker could exploit this to spoof DNS entries and poison DNS caches. Among other things, this could lead to misdirected email and web traffic...

Movable Type session management vulnerability

Overview Movable Type, a web log system from Six Apart KK, contains a vulnerability which could allow a remote attacker to gain illegal access. Impact A remote attacker could freely manipulate a web log by posting or deleting blog entries. Solution None...

CVE-2008-2104

The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIGNED bug entries via a request to the XML-RPC interface, which bypasses the canconfirm check...

CVE-2008-2104

The WebService in Bugzilla 3.1.3 allows remote authenticated users without canconfirm privileges to create NEW or ASSIGNED bug entries via a request to the XML-RPC interface, which bypasses the canconfirm check...

CVE-2008-1985

creationtimestamp| type| source ---|---|--- 2008-04-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31701 2009-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10427...

CVE-2008-2037

creationtimestamp| type| source ---|---|--- 2008-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31662 2008-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31660 2008-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31664 2008-04-17...

CVE-2008-6206

creationtimestamp| type| source ---|---|--- 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31611 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31610...

DEBIAN-CVE-2008-1612

The arrayShrink function lib/Array.c in Squid 2.6.STABLE17 allows attackers to cause a denial of service process exit via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239...

CVE-2008-1118

Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified 1 computer...

Input validation

Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified 1 computer...

CVE-2008-1118

CVE-2008-1118 affects Timbuktu Pro 8.6.5 for Windows (and possibly 8.7 for Mac OS X). The root cause is a lack of input validation when logging information fields sourced from remote packets (computer name, user name, IP address). This allows a remote attacker to craft log entries or manipulate l...

CVE-2008-1118

Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified 1 computer...

CVE-2008-0978

Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to obtain sensitive information via a packet of type 1 0x2728, which provides operating system and path information; 2 0x274e, which lists Ethernet adapters; 3...

Design/Logic Flaw

Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to obtain sensitive information via a packet of type 1 0x2728, which provides operating system and path information; 2 0x274e, which lists Ethernet adapters; 3...

CVE-2008-0978

Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to obtain sensitive information via a packet of type 1 0x2728, which provides operating system and path information; 2 0x274e, which lists Ethernet adapters; 3...

Fedora 8 : kernel-2.6.23.14-115.fc8 (2008-0984)

Update to Linux kernel 2.6.23.14: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.10 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.11 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.12 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.13...