257071
|
- |
|
postnuke
|
postnuke
|
The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magic_quotes_runtime is enabled, which allows remote attackers to conduct SQL injection attacks and execute …
|
CWE-89
SQL Injection
|
CVE-2008-1591
|
2017-09-29 10:30 |
2008-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257072
|
- |
|
ibm
|
aix
|
The checkpoint and restart feature in the kernel in IBM AIX 5.2, 5.3, and 6.1 does not properly protect kernel memory, which allows local users to read and modify portions of memory and gain privileg…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-1593
|
2017-09-29 10:30 |
2008-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257073
|
- |
|
ibm
|
aix
|
The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes, which allows local users of one node to cause a denial o…
|
NVD-CWE-Other
|
CVE-2008-1594
|
2017-09-29 10:30 |
2008-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257074
|
- |
|
ibm
|
aix
|
The proc filesystem in the kernel in IBM AIX 5.2 and 5.3 does not properly enforce directory permissions when a file executing from a directory has weaker permissions than the directory itself, which…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-1595
|
2017-09-29 10:30 |
2008-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257075
|
- |
|
ibm
|
aix
|
The WPAR system call implementation in the kernel in IBM AIX 6.1 allows local users to cause a denial of service via unknown calls that trigger "undefined behavior."
|
NVD-CWE-noinfo
|
CVE-2008-1597
|
2017-09-29 10:30 |
2008-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257076
|
- |
|
ibm
|
aix
|
The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat, (3) fddistat, (4) hdl…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-1599
|
2017-09-29 10:30 |
2008-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257077
|
- |
|
ibm
|
aix
|
The lsmcode program on IBM AIX 5.2, 5.3, and 6.1 does not properly handle environment variables, which allows local users to gain privileges, a different vulnerability than CVE-2004-1329.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-1600
|
2017-09-29 10:30 |
2008-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257078
|
- |
|
ibm
|
aix
|
Stack-based buffer overflow in the reboot program on IBM AIX 5.2 and 5.3 allows local users in the shutdown group to gain privileges.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2008-1601
|
2017-09-29 10:30 |
2008-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257079
|
- |
|
clever_copy
|
clever_copy
|
SQL injection vulnerability in postview.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter, a different vector than CVE-2008-0363 and CVE-2006-0583.
|
CWE-89
SQL Injection
|
CVE-2008-1608
|
2017-09-29 10:30 |
2008-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257080
|
- |
|
tallsoft_quick
|
tftp_server_pro
|
Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long mode field in a read or write request.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2008-1610
|
2017-09-29 10:30 |
2008-04-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|