Skip to content
OpenAdvisories

Archive

20 March 2008

Vulnerabilities first published on this day (UTC), newest first.

← February 2008 2008 / March /20 April 2008 →
  1. 1 
  2. 2 
  3. 316
  4. 424
  5. 515
  6. 637
  7. 7 
  8. 813
  9. 95
  10. 1055
  11. 1122
  12. 1226
  13. 1319
  14. 147
  15. 15 
  16. 16 
  17. 1724
  18. 1839
  19. 1915
  20. 2047
  21. 21 
  22. 22 
  23. 23 
  24. 2442
  25. 2527
  26. 2613
  27. 2717
  28. 2820
  29. 29 
  30. 30 
  31. 3137
All Critical High Medium Low Exploited only Public exploit

47 results · Feed

  • Medium —
    CVE-2008-1396

    Plone credentials stored in session cookie

    Plone CMS 3.x uses invariant data (a client username and a server secret) when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network.

    plone PyPI
  • Unscored —
    CVE-2008-1361

    VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6, …

  • Unscored —
    CVE-2008-1395

    Plone CMS does not record users' authentication states, and implements the logout feature solely on the client side, wh…

  • Unscored —
    CVE-2008-1397

    Check Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote authenticated users to caus…

  • Unscored —
    CVE-2008-1332

    Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business E…

    asterisk Debian
  • Unscored —
    CVE-2007-4592 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the web interface for IBM Rational ClearQuest before 2003.06.16 …

  • Unscored —
    CVE-2007-6254

    Stack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX control in RptViewerAX.dll …