CVE-2008-1766
Vulnerability description:
Multiple unspecified vulnerabilities in phpBB before 3.0.1 have unknown impact and attack vectors, related to”two minor security-related bugs.”
Patch available: No
CiscoCisco Security Advisory: Cisco Unified Communications Disaster Recovery Framework Command Execution Vulnerability
A remote, unauthenticated user could exploit this vulnerability to execute arbitrary commands that m …
04 april, 2008
Cisco Security Advisory: Cisco IOS Virtual Private Dial-up Network Denial of Service Vulnerability
Two vulnerabilities exist in the virtual private dial-up network (VPDN) solution when Point-to-Point …
27 march, 2008
Cisco Security Advisory: Cisco IOS User Datagram Protocol Delivery Issue For IPv4/IPv6 Dual-stack Routers
A device running Cisco IOS software that has Internet Protocol version 6 (IPv6) enabled may be subje …
27 march, 2008
Microsoft(MS08-025) Vulnerability in Windows Kernel Could Allow Elevation of Privilege (941693)
A local attacker who successfully exploited this vulnerability could take complete control of an aff …
08 april, 2008
(MS08-024) Cumulative Security Update for Internet Explorer (947864)
The vulnerability could allow remote code execution if a user viewed a specially crafted Web page us …
08 april, 2008
(MS08-023) Security Update of ActiveX Kill Bits (948881)
The vulnerability could allow remote code execution if a user viewed a specially crafted Web page us …
08 april, 2008
Vulnerability Database
CVE-2007-6712
Integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired.
National Vulnerability Database 12 april, 2008 CVE-2008-1766
Multiple unspecified vulnerabilities in phpBB before 3.0.1 have unknown impact and attack vectors, related to”two minor security-related bugs.”
National Vulnerability Database 12 april, 2008 CVE-2008-1764
Unspecified vulnerability in Opera for Windows before 9.27 has unknown impact and attack vectors related to”keyboard handling of password inputs.”
National Vulnerability Database 12 april, 2008 CVE-2008-1763
SQL injection vulnerability in _blogadata/include/sond_result.php in Blogator-script 0.95 allows remote attackers to execute arbitrary SQL commands via the id_art parameter.
National Vulnerability Database 12 april, 2008 CVE-2008-1762
Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers a memory corruption.
National Vulnerability Database 12 april, 2008 CVE-2008-1761
Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory access.
National Vulnerability Database 12 april, 2008 CVE-2008-1760
Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the incl_page parameter in (1) struct_admin.php, (2) struct_admin_blog.php, and (3) struct_main.php in _blogadata/include.
National Vulnerability Database 12 april, 2008 CVE-2008-1759
SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php, a different vector than CVE-2007-4922.
National Vulnerability Database 12 april, 2008 CVE-2008-1758
SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the C_ID parameter to index.php.
National Vulnerability Database 12 april, 2008 CVE-2008-1757
Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter.
National Vulnerability Database 12 april, 2008 CVE-2008-1756
Unspecified vulnerability in the Qmaster daemon in Sun N1 Grid Engine 6.1 allows local users to cause a denial of service (daemon crash) via unspecified vectors.
National Vulnerability Database 11 april, 2008 CVE-2008-1755
Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter.
National Vulnerability Database 11 april, 2008 CVE-2008-1754
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
National Vulnerability Database 11 april, 2008 CVE-2008-1753
Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510.
National Vulnerability Database 11 april, 2008 CVE-2008-1752
ezRADIUS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials via a direct request for (1) config.ini or (2) database.ini. NOTE: some of these details are obtained from third party information.
National Vulnerability Database 11 april, 2008 SearchSUN Microsysytem Security Vulnerabilities in the GNU Zebra and Quagga BGP Routing Daemon May Allow for Denial of Service
Multiple security vulnerabilities in the Quagga and GNU Zebra routing software shipped with Solaris …
11 april, 2008
Security Vulnerability in Solaris 10 Trusted Extensions Labeled Networking Related to Data Transfer Between Labeled Zones
A security vulnerability in Solaris 10 Trusted Extensions labeled networking may allow untrusted app …
11 april, 2008
A Security Vulnerability in Floating Point Context Switch Implementation May Result in a Denial of Service (DoS) or Data Integrity Issues
A security vulnerability in the Solaris floating point context switch implementation may allow a loc …
11 april, 2008
Red Hat[RHSA-2007:1177-4] Important: autofs5 security update
Updated autofs5 technology preview packages that fix a security issue are now available for Red Ha …
24 december, 2007
[RHSA-2007:1176-7] Important: autofs security update
Updated autofs packages that fix a security issue are now available for Red Hat Enterprise Linux 5 …
24 december, 2007
[RHSA-2007:1155-01] Important: mysql security update
MySQL is a multi-user, multi-threaded SQL database server.
18 december, 2007
РоСWinWebMail PREAUTH DoS POC
Target: WinWebMail 3.7.3.2
Impact: Denial of service
LightNEasy 1.2 (no database) Remote Hash Retrieve Exploit
Target: LightNEasy 1.2
Impact: Information disclosure
Alsaplayer < 0.99.80-rc3 Vorbis Input Local Buffer Overflow Exploit
Target: Alsaplayer версии до 0.99.80-rc3
Impact: Code execution
Объявления по теме:
Компьютер Intel Core 2 Duo (двухъядерный/8600GT на 1024 Mb/2048Mb/320 Gb м. Партизанская
Продам ноутбук - ” Версия MAGELLAN 53P “
Smeg SR134