Skip to content
OpenAdvisories

Archive

23 January 2008

Vulnerabilities first published on this day (UTC), newest first.

← December 2007 2008 / January /23 February 2008 →
  1. 1 
  2. 2 
  3. 311
  4. 454
  5. 5 
  6. 6 
  7. 7 
  8. 845
  9. 934
  10. 1038
  11. 1113
  12. 1216
  13. 13 
  14. 14 
  15. 1535
  16. 1628
  17. 1746
  18. 1823
  19. 19 
  20. 20 
  21. 21 
  22. 2216
  23. 2341
  24. 2414
  25. 2513
  26. 26 
  27. 27 
  28. 2810
  29. 2920
  30. 3015
  31. 3126
All Critical High Medium Low Exploited only Public exploit

41 results · Feed

  • Unscored —
    CVE-2008-0440 Public exploit

    AlstraSoft Forum Pay Per Post Exchange 2.0 stores passwords in cleartext, which makes it easier for attackers to access…

  • Unscored —
    CVE-2008-0432 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in phpAutoVideo 2.21 and earlier allows remote attackers to injec…

  • Unscored —
    CVE-2008-0437 Public exploit EPSS 58%

    Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as …

  • Unscored —
    CVE-2008-0439 Public exploit

    Cross-site scripting (XSS) vulnerability in templates/default/admincp/attachments_header.php in DeluxeBB 1.1 allows rem…

  • Unscored —
    CVE-2008-0430 Public exploit

    SQL injection vulnerability in form.php in 360 Web Manager 3.0 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-0429 Public exploit

    SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows remote attackers to execu…

  • Unscored —
    CVE-2008-0434 Public exploit EPSS 10%

    Format string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-0424 Public exploit

    SQL injection vulnerability in blog.php in Mooseguy Blog System (MGBS) 1.0 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-0427 Public exploit

    Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a .…

  • Unscored —
    CVE-2008-0426

    Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PacerCMS before 0.6.1 allow remote attackers to in…

  • Unscored —
    CVE-2008-0425 Public exploit

    Absolute path traversal vulnerability in explorerdir.php in Frimousse 0.0.2 allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2008-0433 Public exploit

    PHP remote file inclusion vulnerability in theme/phpAutoVideo/LightTwoOh/sidebar.php in Agares phpAutoVideo 2.21 and ea…

  • Unscored —
    CVE-2008-0422 Public exploit

    SQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2008-0436 Public exploit

    Cross-site scripting (XSS) vulnerability in profile-upload/upload.asp in PD9 Software MegaBBS 1.5.14b allows remote att…

  • Unscored —
    CVE-2008-0431 Public exploit

    Directory traversal vulnerability in administrator/download.php in IDMOS (aka Phoenix) 1.0 allows remote attackers to r…

  • Unscored —
    CVE-2008-0423 Public exploit EPSS 37%

    Multiple PHP remote file inclusion vulnerabilities in Lama Software allow remote attackers to execute arbitrary PHP cod…

  • Unscored —
    CVE-2008-0435 Public exploit

    Directory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to read portions of arbitrar…

  • Unscored —
    CVE-2008-0428 Public exploit

    Multiple SQL injection vulnerabilities in the login function in system/class_permissions.php in bloofoxCMS 0.3 allow re…

  • Unscored —
    CVE-2008-0438 Public exploit

    Cross-site scripting (XSS) vulnerability in the font rendering functionality in Novemberborn sIFR 2.0.2 allows remote a…

  • Unscored —
    CVE-2008-0029

    Cisco Application Velocity System (AVS) before 5.1.0 is installed with default passwords for some system accounts, whic…

  • Unscored —
    CVE-2008-0028

    Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) …

  • Unscored —
    CVE-2008-0421 Public exploit

    SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2007-6425

    Unspecified vulnerability in HP-UX B.11.31, when running ARPA Transport, allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2008-0398 Public exploit

    Cross-site scripting (XSS) vulnerability in aflog 1.01, and possibly earlier versions, allows remote attackers to injec…

  • Unscored —
    CVE-2008-0401

    Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment (T…

  • Unscored —
    CVE-2008-0400 Public exploit

    Cross-site scripting (XSS) vulnerability in header.tpl.php in the modern template for Singapore 0.10.1 allows remote at…

  • Unscored —
    CVE-2008-0402

    Unspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before Interim Fix 11 allows rem…

  • Unscored —
    CVE-2008-0399 Public exploit

    Multiple buffer overflows in Toshiba Surveillance (Surveillix) RecordSend ActiveX control (MeIpCamX.DLL 1.0.0.4) allow …

  • Unscored —
    CVE-2008-0403 Public exploit

    The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, whi…

  • Unscored —
    CVE-2008-0395

    Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to …

  • Unscored —
    CVE-2008-0404

    Cross-site scripting (XSS) vulnerability in Mantis before 1.1.1 allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2008-0394 Public exploit EPSS 12%

    Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RC…

  • Unscored —
    CVE-2008-0397 Public exploit

    Multiple SQL injection vulnerabilities in aflog 1.01, and possibly earlier versions, allow remote attackers to execute …

  • Unscored —
    CVE-2008-0396 Public exploit

    Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Se…

  • Unscored —
    CVE-2008-0393 Public exploit

    Directory traversal vulnerability in info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execu…

  • Unscored —
    CVE-2008-0392 Public exploit EPSS 30%

    Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to …

  • Unscored —
    CVE-2008-0388 Public exploit

    SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL…

    Web / CMS
  • Unscored —
    CVE-2008-0390 Public exploit

    stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code int…

  • Unscored —
    CVE-2008-0391 Public exploit

    inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an ar…

  • Unscored —
    CVE-2008-0389

    Unspecified vulnerability in the serveServletsByClassnameEnabled feature in IBM WebSphere Application Server (WAS) 6.0 …