|
292231
|
- |
|
gnu
|
escript
|
Multiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2) tilde_subst function (src/util.c) in GNU enscript 1.6.1, and possibly earlier, might allow remote attackers to e…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2008-5078
|
2017-09-29 10:32 |
2008-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292232
|
- |
|
avahi
|
avahi
|
The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS p…
|
CWE-399
Resource Management Errors
|
CVE-2008-5081
|
2017-09-29 10:32 |
2008-12-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292233
|
- |
|
libvirt
|
libvirt
|
Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions.
|
NVD-CWE-Other
|
CVE-2008-5086
|
2017-09-29 10:32 |
2008-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292234
|
- |
|
knowledgebase-script
|
phpkb_knowledge_base_software
|
Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) email.php and (2) questio…
|
CWE-89
SQL Injection
|
CVE-2008-5088
|
2017-09-29 10:32 |
2008-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292235
|
- |
|
citrix
|
deterministic_network_enhancer
|
dne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as used in (1) Cisco VPN Client, (2) Blue Coat WinProxy, and (3) SafeNet SoftRemote and HighAssurance Remot…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-5121
|
2017-09-29 10:32 |
2008-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292236
|
- |
|
castillocentral
|
ccleague
|
SQL injection vulnerability in admin.php in CCleague Pro 1.2 allows remote attackers to execute arbitrary SQL commands via the u parameter.
|
CWE-89
SQL Injection
|
CVE-2008-5123
|
2017-09-29 10:32 |
2008-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292237
|
- |
|
castillocentral
|
ccleague
|
admin.php in CCleague Pro 1.2 allows remote attackers to bypass authentication by setting the type cookie value to admin.
|
CWE-287
Improper Authentication
|
CVE-2008-5125
|
2017-09-29 10:32 |
2008-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292238
|
- |
|
ocean12_technologies
|
contact_manager
|
Ocean12 Contact Manager Pro 1.02 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request t…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-5127
|
2017-09-29 10:32 |
2008-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292239
|
- |
|
develop_it_easy
|
news_and_article_system
|
Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute arbitrary SQL commands via (1) the aid parameter to article_details.php, and th…
|
CWE-89
SQL Injection
|
CVE-2008-5131
|
2017-09-29 10:32 |
2008-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
292240
|
- |
|
memht
|
memht_portal
|
SQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header.
|
CWE-89
SQL Injection
|
CVE-2008-5132
|
2017-09-29 10:32 |
2008-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|