Skip to content
OpenAdvisories

Archive

22 February 2008

Vulnerabilities first published on this day (UTC), newest first.

← January 2008 2008 / February /22 March 2008 →
  1. 119
  2. 2 
  3. 3 
  4. 415
  5. 533
  6. 634
  7. 717
  8. 820
  9. 92
  10. 10 
  11. 114
  12. 1291
  13. 1356
  14. 1410
  15. 1525
  16. 16 
  17. 17 
  18. 187
  19. 1925
  20. 2016
  21. 2140
  22. 2229
  23. 23 
  24. 24 
  25. 2525
  26. 266
  27. 2719
  28. 2823
  29. 2917
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2008-0920 Public exploit

    SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management (OSSIM) 0.9.9 rc5…

  • Unscored —
    CVE-2008-0911 Public exploit

    SQL injection vulnerability in productdetails.php in iScripts MultiCart 2.0 allows remote authenticated users to execut…

  • Unscored —
    CVE-2008-0912 Public exploit EPSS 16%

    Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere…

  • Unscored —
    CVE-2008-0922 Public exploit

    SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-0919 Public exploit

    Cross-site scripting (XSS) vulnerability in session/login.php in Open Source Security Information Management (OSSIM) 0.…

  • Unscored —
    CVE-2008-0913

    Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 allows remote attackers to inj…

  • Unscored —
    CVE-2008-0914

    Multiple cross-site scripting (XSS) vulnerabilities in the Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.8…

  • Unscored —
    CVE-2008-0921 Public exploit

    SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-0917

    Cross-site scripting (XSS) vulnerability in Tor World Tor Search 1.1 and earlier, I-Navigator 4.0, Mobile Frontier 2.1 …

  • Unscored —
    CVE-2008-0916 Public exploit

    SQL injection vulnerability in the Highwood Design hwdVideoShare (com_hwdvideoshare) 1.1.3 Alpha component for Joomla! …

  • Unscored —
    CVE-2008-0915

    The Mediation server in IPdiva SSL VPN Server 2.2 before 2.2.8.84 and 2.3 before 2.3.2.14 stores the number of remainin…

  • Unscored —
    CVE-2008-0918 Public exploit

    SQL injection vulnerability in includes/count_dl_or_link.inc.php in the astatsPRO (com_astatspro) 1.0.1 component for J…

  • Unscored —
    CVE-2008-0910

    Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-S…

  • Unscored —
    CVE-2008-0899

    Cross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and Express 9.0 through 1…

  • Unscored —
    CVE-2008-0905 Public exploit

    Directory traversal vulnerability in globsy_edit.php in Globsy 1.0 allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2008-0904

    Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interacti…

  • Unscored —
    CVE-2008-0903

    Unspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed before November 2007 and …

  • Unscored —
    CVE-2008-0900 EPSS 10%

    Session fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2 through MP1, and 10.0 allows…

  • Unscored —
    CVE-2008-0909

    Cross-site scripting (XSS) vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to inject…

  • Unscored —
    CVE-2008-0908

    SQL injection vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-0895

    BEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass authentication for applicat…

  • Unscored —
    CVE-2008-0897

    Unspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated users without "receive" p…

  • Unscored —
    CVE-2008-0896

    BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, rem…

  • Unscored —
    CVE-2008-0902

    Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1 through 10.0 MP1 allow remot…

  • Unscored —
    CVE-2008-0898

    The distributed queue feature in JMS in BEA WebLogic Server 9.0 through 10.0, in certain configurations, does not prope…

  • Unscored —
    CVE-2008-0162

    misc.c in splitvt 1.6.6 and earlier does not drop group privileges before executing xprop, which allows local users to …

    splitvt Debian
  • Unscored —
    CVE-2008-0901

    BEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force password guessing attac…

  • Unscored —
    CVE-2008-0907 Public exploit

    SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-0906 Public exploit

    SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands v…