|
261021
|
- |
|
spamdyke
|
spamdyke
|
The smtp_filter function in spamdyke before 3.1.8 does not filter RCPT commands after encountering the first DATA command, which allows remote attackers to use the server as an open mail relay by sen…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-2784
|
2017-08-8 10:31 |
2008-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261022
|
- |
|
mozilla
|
firefox
|
Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack vectors. NOTE: due to lack of details as of 20080619, it is not clear whether this is the same issue as CVE-2008-2785. A CVE i…
|
NVD-CWE-noinfo
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2008-2786
|
2017-08-8 10:31 |
2008-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261023
|
- |
|
symantec
|
altiris_notification_server
|
Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local users to gain privileges via unknown attack vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-2794
|
2017-08-8 10:31 |
2008-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261024
|
- |
|
idm_computer_solutions_inc
|
ultraedit
|
Directory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc UltraEdit 14.00b allows remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) or a .…
|
CWE-22
Path Traversal
|
CVE-2008-2795
|
2017-08-8 10:31 |
2008-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261025
|
- |
|
manageengine
|
oputils
|
Cross-site scripting (XSS) vulnerability in MainLayout.do in ManageEngine OpUtils 5.0 allows remote attackers to inject arbitrary web script or HTML via the hostName parameter, when viewing an SNMP g…
|
CWE-79
Cross-site Scripting
|
CVE-2008-2797
|
2017-08-8 10:31 |
2008-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261026
|
- |
|
shoutcastadmin
|
wallcity-server_shoutcast_admin_panel
|
Cross-site scripting (XSS) vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter to the login interface.…
|
CWE-79
Cross-site Scripting
|
CVE-2008-2814
|
2017-08-8 10:31 |
2008-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261027
|
- |
|
blognplus
|
blognplus
|
SQL injection vulnerability in BlognPlus (BURO GUN +) 2.5.4 and earlier MySQL and PostgreSQL editions allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2008-2819
|
2017-08-8 10:31 |
2008-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261028
|
- |
|
glub
|
secure_ftp
|
Directory traversal vulnerability in the FTP client in Glub Tech Secure FTP before 2.5.16 on Windows allows remote FTP servers to create or overwrite arbitrary files via a ..\ (dot dot backslash) in …
|
CWE-22
Path Traversal
|
CVE-2008-2821
|
2017-08-8 10:31 |
2008-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261029
|
- |
|
3dftp
|
3d-ftp_client
|
Multiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1) allow remote FTP servers to create or overwrite arbitrary files via a .. (dot dot) in a response to …
|
CWE-22
Path Traversal
|
CVE-2008-2822
|
2017-08-8 10:31 |
2008-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
261030
|
- |
|
xerox
|
workcentre
|
Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackers to make configuration changes via unknown vectors.
|
NVD-CWE-noinfo
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-2824
|
2017-08-8 10:31 |
2008-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
