Browse CVEs

MEDIUM 6.3 CVE-2008-0931 w_export.c in XWine 1.0.1 on Debian GNU/Linux sets insecure permissions (0666) for /etc/wine/config, which might allow local users to execute arbitra… Xwine Mitigation only Fix from $1,6002008-03-04 MEDIUM 6.8 CVE-2008-1095 Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewal… Solaris Patch available Fix from $1,6002008-02-29 HIGH 7.5 CVE-2008-0910 Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and … F Secure Anti Virus after 7.00 Fix from $1,9502008-02-22 HIGH 7.2 CVE-2008-0162 misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to gain privileges. Splitvt after 1.6.6 Fix from $1,9502008-02-22 HIGH 7.9 CVE-2008-0897 Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" permissions to bypass intended … Weblogic Server Patch available Fix from $1,9502008-02-22 MEDIUM 5.8 CVE-2008-0898 The distributed queue feature in JMS in BEA WebLogic Server 9.0 through 10.0, in certain configurations, does not properly handle when a client canno… Weblogic Server Patch available Fix from $1,6002008-02-22 MEDIUM 6.0 CVE-2008-0900EPSS 10% Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows remote authenticated users to… Weblogic Server Patch available Fix from $1,6002008-02-22 MEDIUM 5.0 CVE-2008-0864 Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definitio… Weblogic Portal Mitigation only Fix from $1,6002008-02-21 MEDIUM 5.0 CVE-2008-0865 Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP port… Weblogic Portal No fix yet Fix from $1,6002008-02-21 MEDIUM 6.4 CVE-2008-0843 StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp. Statcountex No fix yet Fix from $1,6002008-02-20 HIGH 10.0 CVE-2007-6319 Multiple unspecified vulnerabilities in Lyris ListManager 8.x before 8.95d, 9.2 before 9.2c, and 9.3 before 9.3b allow remote attackers to (1) gain l… List Manager Patch available Fix from $1,9502008-02-19 HIGH 7.5 CVE-2008-0556 Cross-site request forgery (CSRF) vulnerability in OpenCA PKI 0.9.2.5, and possibly earlier versions, allows remote attackers to perform unauthorized… Openca Pki after 0.9.2.5 Fix from $1,9502008-02-19 HIGH 9.3 CVE-2008-0805EPSS 5% Unrestricted file upload vulnerability in image.php in PHPizabi 0.848b C1 HFP1 allows remote attackers to execute arbitrary code by uploading a file … Medias Phpizabi No fix yet Fix from $1,9502008-02-19 MEDIUM 6.5 CVE-2007-6313 MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote authorized user… Mysql Community Server Mitigation only Fix from $1,6002008-02-18 MEDIUM 5.8 CVE-2008-0792 Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Service, and … F Secure Anti Virus after 7.00 Fix from $1,6002008-02-15 HIGH 7.2 CVE-2008-0779 The fortimon.sys device driver in Fortinet FortiClient Host Security 3.0 MR5 Patch 3 and earlier does not properly initialize its DeviceExtension, wh… Forticlient Host Security after 3.0 Fix from $1,9502008-02-14 HIGH 10.0 CVE-2008-0741 Unspecified vulnerability in the PropFilePasswordEncoder utility in IBM WebSphere Application Server (WAS) before 6.0.2 Fix Pack 25 (6.0.2.25) has un… Websphere Application Server after 6.0.2.24 Fix from $1,9502008-02-13 MEDIUM 6.9 CVE-2007-5757 Untrusted search path vulnerability in db2pd in IBM DB2 Universal Database (UDB) 8 before FixPak 16 and 9 before Fix Pack 4 allows local users to gai… Db2 Universal Database after 8.0 Fix from $1,6002008-02-13 HIGH 7.2 CVE-2008-0074EPSS 5% Unspecified vulnerability in Microsoft Internet Information Services (IIS) 5.0 through 7.0 allows local users to gain privileges via unknown vectors … Internet Information Server Mitigation only Fix from $1,9502008-02-12 HIGH 7.5 CVE-2008-0731 The Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 does not properly handle failure of an AppArmor change_hat system call, which might allow … Apparmor Mitigation only Fix from $1,9502008-02-12 HIGH 10.0 CVE-2008-0215 Multiple unspecified vulnerabilities in HP Storage Essentials Storage Resource Management (SRM) before 6.0.0 allow remote attackers to obtain unspeci… Storage Essentials Srm Enterprise after 5.1.3 Fix from $1,9502008-02-12 HIGH 7.5 CVE-2008-0696 IBM DB2 UDB before 8.2 Fixpak 16 does not properly check authorization for the ALTER TABLE statement, which has unknown impact and attack vectors. Db2 Mitigation only Fix from $1,9502008-02-12 HIGH 7.2 CVE-2008-0697 Unspecified vulnerability in DB2PD in IBM DB2 UDB before 8.2 Fixpak 16 allows local users to gain root privileges via unspecified vectors. Db2 Mitigation only Fix from $1,9502008-02-12 MEDIUM 5.0 CVE-2008-0701 ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown imp… Ce Mitigation only Fix from $1,6002008-02-12 HIGH 7.5 CVE-2008-0214 Multiple unspecified vulnerabilities in HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13, and 4.20 allow remote authenticated users to gain access via… Select Identity No fix yet Fix from $1,9502008-02-08 MEDIUM 6.4 CVE-2008-0664 The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog … WordPress Patch available Fix from $1,6002008-02-08 HIGH 9.3 CVE-2008-0632EPSS 6% Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file … Lightblog No fix yet Fix from $1,9502008-02-06 HIGH 7.2 CVE-2008-0581 Geert Moernaut LSrunasE allows local users to gain privileges by obtaining the encrypted password from a batch file, and constructing a modified batc… Lsrunase Mitigation only Fix from $1,9502008-02-05 HIGH 7.2 CVE-2008-0584 Multiple buffer overflows in bos.rte.control in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) s… Aix Mitigation only Fix from $1,9502008-02-05 MEDIUM 6.6 CVE-2008-0585 sysmgt.websm.webaccess in IBM AIX 5.2 and 5.3 has world writable permissions for unspecified WebSM Remote Client files, which allows local users to "… Aix Mitigation only Fix from $1,6002008-02-05