Browse CVEs

HIGH 7.5 CVE-2008-2296 PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute arbitrary PHP code via a URL … Rgboard No fix yet Fix from $1,9502008-05-18 HIGH 7.5 CVE-2008-2270 Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to execute arbitrary PHP code vi… Kostenloses Linkmanagementscript No fix yet Fix from $1,9502008-05-16 HIGH 7.5 CVE-2008-2275 Unspecified vulnerability in sr_feuser_register 1.4.0, 1.6.0, 2.2.1 to 2.2.7, 2.3.0 to 2.3.6, 2.4.0, and 2.5.0 to 2.5.9 extension for TYPO3 allows re… Sr Feuser Register Extension Patch available Fix from $1,9502008-05-16 MEDIUM 6.8 CVE-2008-2220 Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when register_globals is enabled, allow… Interact No fix yet Fix from $1,6002008-05-14 MEDIUM 6.8 CVE-2008-2224 Multiple PHP remote file inclusion vulnerabilities in SazCart 1.5.1, when register_globals is enabled, allow remote attackers to execute arbitrary PH… Sazcart No fix yet Fix from $1,6002008-05-14 HIGH 9.3 CVE-2008-2228 PHP remote file inclusion vulnerability in portfolio/commentaires/derniers_commentaires.php in Cyberfolio 7.12, when register_globals is enabled, all… Cyberfolio No fix yet Fix from $1,9502008-05-14 HIGH 10.0 CVE-2008-2192 Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9 allows remote attackers to inject arbitrary PHP code into bo… Itcms No fix yet Fix from $1,9502008-05-14 HIGH 7.5 CVE-2008-2193 PHP remote file inclusion vulnerability in example.php in Thomas Gossmann ScorpNews 2.0 allows remote attackers to execute arbitrary PHP code via a U… Scorpnews No fix yet Fix from $1,9502008-05-14 MEDIUM 6.5 CVE-2008-2195 Static code injection vulnerability in admincp.php in DeluxeBB 1.2 and earlier allows remote authenticated administrators to inject arbitrary PHP cod… Deluxebb after 1.2 Fix from $1,6002008-05-14 MEDIUM 6.8 CVE-2008-2198 PHP remote file inclusion vulnerability in kmitaadmin/kmitat/htmlcode.php in Kmita Tellfriend 2.0 and earlier, when register_globals is enabled, allo… Tellfriend after 2.0 Fix from $1,6002008-05-14 MEDIUM 6.8 CVE-2008-2199 PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php in Kmita Mail 3.0 and earlier, when register_globals is enabled, allows rem… Kmita Mail after 3.0 Fix from $1,6002008-05-14 HIGH 9.3 CVE-2008-0119EPSS 31% Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to exe… Office Mitigation only Fix from $1,9502008-05-13 HIGH 9.3 CVE-2008-1091EPSS 41% Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attacke… Office Mitigation only Fix from $1,9502008-05-13 HIGH 9.3 CVE-2008-2160EPSS 18% Multiple unspecified vulnerabilities in the JPEG (GDI+) and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitr… Windows Embedded Compact Mitigation only Fix from $1,9502008-05-12 HIGH 7.5 CVE-2008-2128 PHP remote file inclusion vulnerability in templates/header.php in CMS Faethon 2.2 Ultimate allows remote attackers to execute arbitrary PHP code via… Cms Faethon No fix yet Fix from $1,9502008-05-09 MEDIUM 6.9 CVE-2008-1669 Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in p… Linux Kernel Patch available Fix from $1,6002008-05-08 HIGH 7.5 CVE-2008-2074 Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers … Harris Wap Chat No fix yet Fix from $1,9502008-05-05 MEDIUM 6.8 CVE-2007-6339EPSS 11% The Akamai Download Manager (aka DLM or dlmanager) ActiveX control (DownloadManagerV2.ocx) before 2.2.3.5 allows remote attackers to force the downlo… Download Manager after 2.2.1.0 Fix from $1,6002008-05-01 HIGH 7.5 CVE-2008-1381 ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary comman… Zoneminder Mitigation only Fix from $1,9502008-05-01 HIGH 7.5 CVE-2008-2044EPSS 11% includes/library.php in netOffice Dwins 1.3 p2 compares the demoSession variable to the 'true' string literal instead of the true boolean literal, wh… Dwins No fix yet Fix from $1,9502008-05-01 HIGH 10.0 CVE-2008-2041 Multiple unspecified vulnerabilities in eGroupWare before 1.4.004 have unspecified attack vectors and "grave" impact when the web server has write ac… Egroupware after 1.4.003 Fix from $1,9502008-04-30 HIGH 7.5 CVE-2008-2016 PHP remote file inclusion vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to execute arbitrary PHP cod… Chicomas Mitigation only Fix from $1,9502008-04-30 HIGH 9.0 CVE-2008-1997 Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated user… Db2 Mitigation only Fix from $1,9502008-04-28 HIGH 10.0 CVE-2008-1989 PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_globals is enabled, allows rem… 123 Flash Chat Module No fix yet Fix from $1,9502008-04-27 MEDIUM 6.5 CVE-2008-1958 Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr Script News 2.1 allows remote authenticated users to execute arb… Tr Script News No fix yet Fix from $1,6002008-04-25 HIGH 7.5 CVE-2008-1963EPSS 39% PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attackers to execute arbitrary PHP… Grape Web Statistics No fix yet Fix from $1,9502008-04-25 HIGH 9.3 CVE-2008-1965EPSS 11% Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used by Lotus S… Lotus Expeditor Client No fix yet Fix from $1,9502008-04-25 HIGH 7.5 CVE-2008-1926 Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activi… Util Linux Mitigation only Fix from $1,9502008-04-24 HIGH 7.5 CVE-2008-1903EPSS 39% PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is enabled, allows remote attackers … Newsoffice No fix yet Fix from $1,9502008-04-22 HIGH 7.5 CVE-2008-1893 PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL in the ila… Online Banking Mitigation only Fix from $1,9502008-04-18