Skip to content
OpenAdvisories

Archive

27 February 2008

Vulnerabilities first published on this day (UTC), newest first.

← January 2008 2008 / February /27 March 2008 →
  1. 119
  2. 2 
  3. 3 
  4. 415
  5. 533
  6. 634
  7. 717
  8. 820
  9. 92
  10. 10 
  11. 114
  12. 1291
  13. 1356
  14. 1410
  15. 1525
  16. 16 
  17. 17 
  18. 187
  19. 1925
  20. 2016
  21. 2140
  22. 2229
  23. 23 
  24. 24 
  25. 2525
  26. 266
  27. 2719
  28. 2823
  29. 2917
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Unscored —
    CVE-2008-1042 Public exploit

    Directory traversal vulnerability in include/body.inc.php in Linux Web Shop (LWS) php Download Manager 1.0 and 1.1 allo…

  • Unscored —
    CVE-2008-1044 Public exploit

    Stack-based buffer overflow in the Quantum Streaming Player (Quantum Streaming IE Player) ActiveX control (aka QSP2IE.Q…

  • Unscored —
    CVE-2008-1053 Public exploit

    Multiple SQL injection vulnerabilities in the Kose_Yazilari module for PHP-Nuke allow remote attackers to execute arbit…

  • Unscored —
    CVE-2008-1038 Public exploit

    PHP remote file inclusion vulnerability in mod/mod.extmanager.php in DBHcms 1.1.4 and earlier allows remote attackers t…

  • Unscored —
    CVE-2008-1037 Public exploit

    Cross-site scripting (XSS) vulnerability in the file listing function in the web management interface in Packeteer Pack…

  • Unscored —
    CVE-2008-1054 Public exploit

    Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin Su…

  • Unscored —
    CVE-2008-1052 Public exploit

    The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2008-1043 Public exploit EPSS 49%

    PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 B…

  • Low —
    CVE-2008-1045 Public exploit

    Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp

    Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree_files.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the resource parameter.

    org.opencms:opencms-core Maven
  • Unscored —
    CVE-2008-1046 Public exploit EPSS 21%

    PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execut…

  • Unscored —
    CVE-2008-1051 Public exploit EPSS 21%

    PHP remote file inclusion vulnerability in include/body_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers …

  • Unscored —
    CVE-2008-1055 Public exploit

    Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earl…

  • Unscored —
    CVE-2008-1050 Public exploit

    SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-1039 Public exploit

    SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands…