Skip to content
OpenAdvisories

Archive

12 March 2008

Vulnerabilities first published on this day (UTC), newest first.

← February 2008 2008 / March /12 April 2008 →
  1. 1 
  2. 2 
  3. 316
  4. 424
  5. 515
  6. 637
  7. 7 
  8. 813
  9. 95
  10. 1055
  11. 1122
  12. 1226
  13. 1319
  14. 147
  15. 15 
  16. 16 
  17. 1724
  18. 1839
  19. 1915
  20. 2047
  21. 21 
  22. 22 
  23. 23 
  24. 2442
  25. 2527
  26. 2613
  27. 2717
  28. 2820
  29. 29 
  30. 30 
  31. 3137
All Critical High Medium Low Exploited only Public exploit

26 results · Feed

  • Unscored —
    CVE-2008-1304 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2008-1296 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-1309 Public exploit EPSS 46%

    The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, Re…

  • Unscored —
    CVE-2008-1310

    Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other vers…

  • Unscored —
    CVE-2008-1298 Public exploit

    SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-1297 Public exploit

    SQL injection vulnerability in index.php in the eWriting (com_ewriting) 1.2.1 module for Mambo and Joomla! allows remot…

  • Unscored —
    CVE-2008-1305 Public exploit

    SQL injection vulnerability in filebase.php in the Filebase mod for phpBB allows remote attackers to execute arbitrary …

  • Medium —
    CVE-2008-1301 Public exploit

    Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameter

    Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter.

    org.opencms:opencms-core Maven
  • Unscored —
    CVE-2008-1314 Public exploit

    SQL injection vulnerability in the Johannes Hass gaestebuch 2.2 module for PHP-Nuke allows remote attackers to execute …

  • Unscored —
    CVE-2008-1311 Public exploit EPSS 49%

    The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2008-1308 Public exploit

    SQL injection vulnerability in the Sudirman Angriawan NukeC30 3.0 module for PHP-Nuke allows remote attackers to execut…

  • Unscored —
    CVE-2008-1302

    The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2008-1306

    Multiple cross-site scripting (XSS) vulnerabilities in Savvy Content Manager (CM) allow remote attackers to inject arbi…

  • Unscored —
    CVE-2008-1295 Public exploit

    SQL injection vulnerability in archives.php in Gregory Kokanosky (aka Greg's Place) phpMyNewsletter 0.8 beta 5 and earl…

  • Unscored —
    CVE-2008-1313 Public exploit

    Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-1303 Public exploit

    The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2008-1312

    Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions bef…

  • Low —
    CVE-2008-1300 Public exploit

    Alkacon Open CMS XSS via Logfile Viewer Settings function

    Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the …

    org.opencms:opencms-core Maven
  • Unscored —
    CVE-2008-1307 Public exploit EPSS 15%

    Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Onl…

  • Medium 6.1
    CVE-2008-1299

    Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Win…

  • Unscored —
    CVE-2008-0643

    Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to inject ar…

  • Unscored —
    CVE-2008-0890

    Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to …

  • Unscored —
    CVE-2008-0644

    Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to bypass the cross-site scripting (XSS) protection mech…

  • Unscored —
    CVE-2008-1202

    Cross-site scripting (XSS) vulnerability in the web management interface in Adobe LiveCycle Workflow 6.2 allows remote …

  • Unscored —
    CVE-2008-1203 EPSS 15%

    The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, whic…

  • Unscored —
    CVE-2007-6253

    Multiple buffer overflows in Adobe Form Designer 5.0 and Form Client 5.0 allow remote attackers to execute arbitrary co…