Browse CVEs

MEDIUM 5.0 CVE-2008-5773 Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the databas… Nukedit No fix yet Fix from $1,6002008-12-30 MEDIUM 5.0 CVE-2008-5780 Forest Blog 1.3.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the dat… Forest Blog No fix yet Fix from $1,6002008-12-30 HIGH 7.2 CVE-2008-5736 Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before 7.0-RELEASE-p7,… FreeBSD No fix yet Fix from $1,9502008-12-26 HIGH 7.5 CVE-2008-5738 Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by setting the nodstrumCalendarV2… Mysql Calendar No fix yet Fix from $1,9502008-12-26 HIGH 7.2 CVE-2008-5724 The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows local users to gain privileges vi… Smart Security after 3.0.672 Fix from $1,9502008-12-26 HIGH 7.2 CVE-2008-5725 The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows local users to gain privileges via… Powerstrip after 3.84 Fix from $1,9502008-12-26 HIGH 7.2 CVE-2008-5716 xend in Xen 3.3.0 does not properly restrict a guest VM's write access within the /local/domain xenstore directory tree, which allows guest OS users … Xen Mitigation only Fix from $1,9502008-12-24 MEDIUM 5.0 CVE-2008-5687 MediaWiki 1.11, and other versions before 1.13.3, does not properly protect against the download of backups of deleted images, which might allow remo… Mediawiki Mitigation only Fix from $1,6002008-12-19 HIGH 10.0 CVE-2008-5675 Unspecified vulnerability in IBM WebSphere Portal 6.0 before 6.0.1.5 has unknown impact and attack vectors related to "Access problems with BasicAuth… Websphere Portal after 6.0.1.4 Fix from $1,9502008-12-19 MEDIUM 6.5 CVE-2008-5673 PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote attack vect… Phparanoid after 0.3 Fix from $1,6002008-12-19 HIGH 7.5 CVE-2008-5504 Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed previe… Firefox after 2.0.0.18 Fix from $1,9502008-12-17 MEDIUM 5.0 CVE-2008-5505 Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions by using the persist attribute in an XUL element to … Firefox after 3.0.4 Fix from $1,6002008-12-17 MEDIUM 6.8 CVE-2008-5506 Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to… Firefox 1.1.14 / 2.0.0.19+ Fix from $1,6002008-12-17 MEDIUM 6.8 CVE-2008-5512 Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x … Firefox 1.1.14 / 2.0.0.19+ Fix from $1,6002008-12-17 HIGH 8.5 CVE-2008-5617 The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote attackers to bypass inte… Rsyslog Patch available Fix from $1,9502008-12-17 HIGH 9.3 CVE-2008-4234 Incomplete blacklist vulnerability in the Quarantine feature in CoreTypes in Apple Mac OS X 10.5 before 10.5.6 allows user-assisted remote attackers … Mac Os X after 10.5.5 Fix from $1,9502008-12-17 MEDIUM 5.0 CVE-2008-5596 Ikon AdManager 2.1 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to dow… Ikon Admanager after 2.1 Fix from $1,6002008-12-16 MEDIUM 5.0 CVE-2008-5597 Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database fil… Cold Bbs No fix yet Fix from $1,6002008-12-16 MEDIUM 5.0 CVE-2008-5600 Merlix Teamworx Server stores sensitive information under the web root with insufficient access control, which allows remote attackers to download th… Teamworx Server No fix yet Fix from $1,6002008-12-16 MEDIUM 5.0 CVE-2008-5601 User Engine Lite ASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the … Asp User Engine No fix yet Fix from $1,6002008-12-16 MEDIUM 5.0 CVE-2008-5602 Natterchat 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the datab… Natterchat No fix yet Fix from $1,6002008-12-16 MEDIUM 5.0 CVE-2008-5603 ASPTicker 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the databas… Aspticker No fix yet Fix from $1,6002008-12-16 MEDIUM 5.0 CVE-2008-5606 Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attacker… Qmail Mailing List Manager No fix yet Fix from $1,6002008-12-16 MEDIUM 5.0 CVE-2008-5608 ASP AutoDealer stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the databa… Asp Autodealer No fix yet Fix from $1,6002008-12-16 MEDIUM 5.0 CVE-2008-5592 Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downl… Nightfall Personal Diary No fix yet Fix from $1,6002008-12-16 MEDIUM 5.0 CVE-2008-5560 PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database f… Postecards No fix yet Fix from $1,6002008-12-15 MEDIUM 5.0 CVE-2008-5562EPSS 5% ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database fi… Aspportal No fix yet Fix from $1,6002008-12-15 MEDIUM 5.0 CVE-2008-5572EPSS 7% Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers t… Professional Download Assistant No fix yet Fix from $1,6002008-12-15 MEDIUM 5.0 CVE-2008-5549 Unspecified vulnerability in the Sun Java Web Console components in Sun Java System Portal Server 7.1 and 7.2 allows remote attackers to access local… Java System Portal Server Patch available Fix from $1,6002008-12-12 HIGH 7.5 CVE-2008-5422 Sun Sun Ray Server Software 3.1 through 4.0 does not properly restrict access, which allows remote attackers to discover the Sun Ray administration p… Ray Server Software Patch available Fix from $1,9502008-12-11