CVE & Exploit Intelligence Database

CVE-2008-4996 5.5 MEDIUM EPSS 0.00

init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor disputes this vulnerability, stating that "init is [used in] a single-user context; there's no possibility that this is exploitable.

CWE-59 Nov 07, 2008

CVE-2008-3474 6.5 MEDIUM EPSS 0.49

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy and obtain sensitive information via a crafted HTML document, aka "Cross-Domain Information Disclosure Vulnerability."

CWE-200 Oct 15, 2008

CVE-2008-4302 5.5 MEDIUM 1 PoC Analysis EPSS 0.00

fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_to_page_cache_lru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service (kernel BUG and system crash), as demonstrated by the fio I/O tool.

CWE-667 Sep 29, 2008

CVE-2008-3935 6.1 MEDIUM EPSS 0.00

Cross-site scripting (XSS) vulnerability in DIC shop_v50 3.0 and earlier and shop_v52 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CWE-79 Sep 05, 2008

CVE-2008-3937 6.1 MEDIUM 3 PoCs Analysis EPSS 0.00

Multiple cross-site scripting (XSS) vulnerabilities in Open Media Collectors Database (OpenDb) 1.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) user_id parameter in an edit action to user_admin.php, the (2) title parameter to listings.php, and the (3) redirect_url parameter to user_profile.php.

CWE-79 Sep 05, 2008

CVE-2007-6716 5.5 MEDIUM EPSS 0.00

fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test.

Sep 04, 2008

CVE-2008-3893 5.5 MEDIUM EPSS 0.01

Microsoft Bitlocker in Windows Vista before SP1 stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer during boot, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer.

CWE-200 Sep 03, 2008

CVE-2008-3281 6.5 MEDIUM EPSS 0.01

libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document.

CWE-776 Aug 27, 2008

CVE-2008-3775 4.4 MEDIUM EPSS 0.00

Folder Lock 5.9.5 and earlier uses weak encryption (ROT-25) for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\_pack registry value.

CWE-327 Aug 22, 2008

CVE-2008-3275 5.5 MEDIUM EPSS 0.00

The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.

CWE-120 Aug 12, 2008

CVE-2008-3397 6.1 MEDIUM EPSS 0.00

Cross-site scripting (XSS) vulnerability in Runesoft Cerberus CMS before 3_1.4_0.9 allows remote attackers to inject arbitrary web script or HTML via a cerberus_user cookie.

CWE-79 Jul 31, 2008

CVE-2008-2951 6.1 MEDIUM EPSS 0.01

Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.

CWE-601 Jul 27, 2008

CVE-2008-2991 6.1 MEDIUM EPSS 0.03

Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Help Errors log.

CWE-79 Jul 09, 2008

CVE-2007-3650 5.3 MEDIUM EPSS 0.00

myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to calendar.php, reached through index.php; (2) a direct request to common.php; and (3) a mode array parameter in the query string to login.php, which reveal the installation path in various error messages.

CWE-200 Jul 09, 2008

CVE-2007-3651 5.3 MEDIUM EPSS 0.00

class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a '; (quote semicolon) sequence in the id parameter, which reveals the installation path in an error message.

CWE-200 Jul 09, 2008

CVE-2008-1447 6.8 MEDIUM 6 PoCs Analysis EPSS 0.87

The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka "DNS Insufficient Socket Entropy Vulnerability" or "the Kaminsky bug."

CWE-331 Jul 08, 2008

CVE-2008-2052 6.1 MEDIUM EXPLOITED EPSS 0.01

Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the goto parameter.

CWE-601 May 02, 2008

CVE-2008-1567 5.5 MEDIUM EPSS 0.00

phpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information.

CWE-312 Mar 31, 2008

CVE-2008-1299 6.1 MEDIUM EPSS 0.00

Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Windows allows remote attackers to inject arbitrary web script or HTML via the searchText parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CWE-79 Mar 12, 2008

CVE-2008-0642 6.1 MEDIUM EPSS 0.02

Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) or (2) WildFire (WildFireExt) extension, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-1280.

CWE-79 Feb 15, 2008