257411
|
- |
|
podcast_generator
|
podcast_generator
|
Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absoluteurl parameter to (1) compo…
|
CWE-94
Code Injection
|
CVE-2008-1124
|
2017-09-29 10:30 |
2008-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257412
|
- |
|
podcast_generator
|
podcast_generator
|
Multiple directory traversal vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) theme_path parameter to core/them…
|
CWE-22
Path Traversal
|
CVE-2008-1125
|
2017-09-29 10:30 |
2008-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257413
|
- |
|
barryvan_compo
|
barryvan_compo_manager
|
PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the pageURL parameter.
|
CWE-94
Code Injection
|
CVE-2008-1126
|
2017-09-29 10:30 |
2008-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257414
|
- |
|
barryvan_compo
|
barryvan_compo_manager
|
More information available at:
http://www.securityfocus.com/bid/28035/info
|
CWE-94
Code Injection
|
CVE-2008-1126
|
2017-09-29 10:30 |
2008-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257415
|
- |
|
crytek
|
crysis
|
Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute arbitrary code via format string specifiers in the user name, which is triggered…
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2008-1127
|
2017-09-29 10:30 |
2008-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257416
|
- |
|
deslock
|
deslock
|
DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a certain ZERO_MEM DLMFENC_IOCTL request to \\.\DLKPFSD_Device, aka the "ring0 li…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2008-1138
|
2017-09-29 10:30 |
2008-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257417
|
- |
|
deslock
|
deslock
|
DESlock+ 3.2.6 and earlier, when DLMFENC.sys 1.0.0.26 and DLMFDISK.sys 1.2.0.27 are present, allows local users to gain privileges via a certain DLMFENC_IOCTL request to \\.\DLKPFSD_Device that overw…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-1139
|
2017-09-29 10:30 |
2008-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257418
|
- |
|
deslock
|
deslock
|
DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISK_IOCTL request to \\.\DLKFDisk_Control that overwrites a data structure associated with…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2008-1140
|
2017-09-29 10:30 |
2008-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257419
|
- |
|
deslock
|
deslock
|
Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (kernel memory consumption) via a series of DLMFENC_IOCTL requests to \\.\DLKPFSD_Dev…
|
CWE-399
Resource Management Errors
|
CVE-2008-1141
|
2017-09-29 10:30 |
2008-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
257420
|
- |
|
cisco
|
ios
|
The virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (resource exhaustion) via a series of PPTP sessions, related to the …
|
CWE-399
Resource Management Errors
|
CVE-2008-1150
|
2017-09-29 10:30 |
2008-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|