Vulnerabilities > Microsoft > Windows

DATE CVE VULNERABILITY TITLE RISK
2008-12-31 CVE-2008-5787 Path Traversal vulnerability in Arabportal Arab Portal 2.1
Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary files via a ..
network
high complexity
arabportal microsoft CWE-22
5.4
2008-12-10 CVE-2008-5412 Multiple Unspecified vulnerability in IBM WebSphere Application Server
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows has unknown impact and attack vectors related to JSPs.
network
low complexity
microsoft ibm
critical
10.0
2008-12-05 CVE-2008-5326 Credentials Management vulnerability in IBM Rational Clearquest
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks.
4.4
2008-12-03 CVE-2008-5315 Path Traversal vulnerability in Apple Iphone Configuration web Utility 1.0
Directory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility 1.0 on Windows allows remote attackers to read arbitrary files via unspecified vectors.
network
low complexity
apple microsoft CWE-22
7.8
2008-11-20 CVE-2008-5178 Buffer Errors vulnerability in Opera 9.62
Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI.
network
opera microsoft CWE-119
critical
9.3
2008-11-17 CVE-2008-5112 Information Exposure vulnerability in Microsoft Windows and Windows 2000
The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind requests, as demonstrated by ldapuserenum.
network
low complexity
microsoft CWE-200
5.0
2008-11-17 CVE-2008-3623 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Safari
Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted image, related to improper handling of color spaces.
network
microsoft apple CWE-119
critical
9.3
2008-11-10 CVE-2008-4820 Information Exposure vulnerability in Adobe Flash Player
Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors.
7.1
2008-11-05 CVE-2008-4816 Unspecified vulnerability in Adobe Acrobat and Acrobat Reader
Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors.
network
microsoft adobe
4.3
2008-10-17 CVE-2008-4473 Buffer Errors vulnerability in Adobe Flash Player Cs3/Mx2004
Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters.
network
adobe microsoft CWE-119
critical
9.3