CVE-2008-1813

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote unauthenticated or authenticated attack vectors related to 1 SYS.DBMSAQ in the Advanced Queuing component, aka DB01; 2 Core RDBMS, aka DB03; 3 SDOGEOM i...

CVE-2008-1826

Technical details about CVE-2008-1826 are not publicly available in the provided documents. No concrete information on impacted components, root cause, or fixes is included; monitor for updates.

CVE-2008-1821

CVE-2008-1821 affects Oracle Database 9.0.1.5 FIPS+ and 10.1.0.5 in the Advanced Queuing (AQ) component, related to SYS.DBMS_AQJMS_INTERNAL (DB15). The available description in the provided documents indicates an unspecified vulnerability with unknown impact and remote attack vectors, and mention...

CVE-2008-1711

CVE-2008-1711 affects Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0, where passwords are stored in cleartext in a MySQL database. The underlying issue is insecure, unencrypted password storage, which enables threat actors with access to the database to directly obtain sensitive cr...

Apache Tomcat Connector jk2-2.0.2 mod_jk2 - Remote Overflow

/ Fedora Core 6,7,8 exec-shield based Apache Tomcat Connector jk2-2.0.2modjk2 remote overflow exploit by INetCop Security Advanced exploitation in exec-shield Fedora Core case study URL: http://www.milw0rm.com/papers/151 IOActive Security Advisory: http://www.securityfocus.com/archive/1/487983...

Apache Tomcat Connector jk2-2.0.2 (mod_jk2) Remote Overflow Exploit

Exploit for linux platform in category remote exploits =================================================================== Apache Tomcat Connector jk2-2.0.2 modjk2 Remote Overflow Exploit =================================================================== / Fedora Core 6,7,8 exec-shield based...

Sql injection

SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP VSO-XP allows remote attackers to execute arbitrary SQL commands via the IssueID parameter...

CVE-2008-1354

SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP VSO-XP allows remote attackers to execute arbitrary SQL commands via the IssueID parameter...

CVE-2008-1354

SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP VSO-XP allows remote attackers to execute arbitrary SQL commands via the IssueID parameter...

Adobe Form Designer and Advanced Form Client ActiveX controls contain multiple buffer overflows

Overview Adobe Form Designer and Advanced Form Client contain multiple ActiveX buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Adobe Form Designer and Advanced Form Client software provide multiple ActiveX...

Powerful HA1 through Microsoft signatures-vulnerability and early warning-the black bar safety net

No HOOK, do not replace the file, get to a clean system to check the signature, too All the tools are the same as Microsoft, SRE, sysinternals, large into the Directly display the signature of the publisher is Microsoft Windows Publisher Points come in to see the big picture Technology is too...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to the 1 Advanced Queuing component DB02 and 2 Oracle Spatial component DB04...

Information disclosure

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+ and 10.1.0.5 has unknown impact and remote attack vectors, aka DB03...

CVE-2008-0341

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+ and 10.1.0.5 has unknown impact and remote attack vectors, aka DB03...

CVE-2008-0340

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to the 1 Advanced Queuing component DB02 and 2 Oracle Spatial component DB04...

CVE-2008-0340

CVE-2008-0340 concerns Oracle Database with multiple unspecified vulnerabilities affecting the Advanced Queuing (DB02) and Oracle Spatial (DB04) components across several versions (e.g., 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3). The description notes unknown impact and remote attack...

CVE-2008-0341

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+ and 10.1.0.5 has unknown impact and remote attack vectors, aka DB03...

CVE-2008-0340

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to the 1 Advanced Queuing component DB02 and 2 Oracle Spatial component DB04...

Microsoft Windows LSASS LPC Request Local Privilege Escalation Vulnerability

Description Microsoft Windows Local Security Authority Subsystem Service LSASS is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will facilitate in the complete...

Unfixed XSS vulnerability at www.cora.de

Security researcher Fabian Fingerle, has submitted on 01/07/2008 a cross-site-scripting XSS vulnerability affecting www.cora.de, which at the time of submission ranked 371332 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It is...