8906 matches found
Java Web Start, arbitrary file creation (6703909)
Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909...
CVE-2008-3672
creationtimestamp| type| source ---|---|--- 2008-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6169...
CVE-2008-3670
creationtimestamp| type| source ---|---|--- 2008-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6167...
CVE-2008-3375
creationtimestamp| type| source ---|---|--- 2008-07-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32121...
CVE-2008-3363
creationtimestamp| type| source ---|---|--- 2008-07-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6149...
CVE-2008-3377
creationtimestamp| type| source ---|---|--- 2008-07-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6134...
PR08-13: Persistent Cross-site Scripting (XSS) on Moodle via blog entry title
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PR08-13: Persistent Cross-site Scripting XSS on Moodle via blog entry title Vulnerability found: 20/06/2008 Vendor informed: 25/06/2008 Vulnerability fixed: 16/07/2008 Advisory publicly released: 22/07/2008 Severity: High Description: By creating a ne...
CVE-2008-3384
creationtimestamp| type| source ---|---|--- 2008-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6107...
CVE-2008-6300
creationtimestamp| type| source ---|---|--- 2008-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6081...
CVE-2008-3303
creationtimestamp| type| source ---|---|--- 2008-07-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6073...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-3363. Reason: This candidate is a duplicate of CVE-2008-3363. Notes: All CVE users should reference CVE-2008-3363 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2008-6924
creationtimestamp| type| source ---|---|--- 2008-07-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32045...
CVE-2008-3202
creationtimestamp| type| source ---|---|--- 2008-07-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32021...
CVE-2008-3067
sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits...
CVE-2008-6481
creationtimestamp| type| source ---|---|--- 2008-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5989...
CVE-2008-2943
Double free vulnerability in IBM Tivoli Directory Server TDS 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause a denial of service ABEND and possibly execute arbitrary code by using ldapadd to attempt to create a duplicate ibm-globalAdminGroup LDAP database entry. NOTE:...
IBM Tivoli Directory Server 6.1.x - Adding ibm-globalAdminGroup Entry Denial of Service
IBM Tivoli Directory Server 6.1.x - Adding ibm-globalAdminGroup Entry Denial of Service source: https://www.securityfocus.com/bid/30010/info IBM Tivoli Directory Server is prone to a denial-of-service vulnerability because the server contains a double-free error. An attacker can exploit this issu...
IBM Tivoli Directory Server 6.1.x - Adding 'ibm-globalAdminGroup' Entry Denial of Service
source: https://www.securityfocus.com/bid/30010/info IBM Tivoli Directory Server is prone to a denial-of-service vulnerability because the server contains a double-free error. An attacker can exploit this issue to crash the affected server with a SIGSEGV fault, denying service to legitimate users...