Unspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows attackers to obtain “path and PHP configuration” via unknown vectors.
CVE-2008-3653
Multiple unspecified vulnerabilities in TikiWiki CMS/Groupware before 2.0 have unknown impact and attack vectors.
CVE-2008-3652
src/racoon/handler.c in racoon in ipsec-tools does not remove an “orphaned ph1” (phase 1) handle when it has been initiated remotely, which allows remote attackers to cause a denial of service (resource consumption).
CVE-2008-3651
Memory leak in racoon/proposal.c in the racoon daemon in ipsec-tools before 0.7.1 allows remote authenticated users to cause a denial of service (memory consumption) via invalid proposals.
CVE-2008-3650
Multiple unspecified vulnerabilities in Horde Groupware Webmail before Edition 1.1.1 (final) have unknown impact and attack vectors related to “unescaped output,” possibly cross-site scripting (XSS), in the (1) object browser and (2) contact view.
CVE-2008-3649
SQL injection vulnerability in categorydetail.php in Article Friendly Standard allows remote attackers to execute arbitrary SQL commands via the Cat parameter.