Skip to content
OpenAdvisories

Archive

28 March 2008

Vulnerabilities first published on this day (UTC), newest first.

← February 2008 2008 / March /28 April 2008 →
  1. 1 
  2. 2 
  3. 316
  4. 424
  5. 515
  6. 637
  7. 7 
  8. 813
  9. 95
  10. 1055
  11. 1122
  12. 1226
  13. 1319
  14. 147
  15. 15 
  16. 16 
  17. 1724
  18. 1839
  19. 1915
  20. 2047
  21. 21 
  22. 22 
  23. 23 
  24. 2442
  25. 2527
  26. 2613
  27. 2717
  28. 2820
  29. 29 
  30. 30 
  31. 3137
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Unscored —
    CVE-2008-0704

    Unspecified vulnerability in the SSH server in HP OpenVMS TCP/IP Services on OpenVMS on the Alpha platform with 5.4 bef…

  • Unscored —
    CVE-2008-1542

    Airspan Base Station Distribution Unit (BSDU) has "topsecret" as its password for the root account, which allows remote…

  • Unscored —
    CVE-2008-1545 EPSS 12%

    The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 7 does not restrict the dangero…

  • Unscored —
    CVE-2008-1544 EPSS 26%

    The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 5.01, 6, and 7 does not block d…

  • Unscored —
    CVE-2008-1543

    The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain defau…

  • Unscored —
    CVE-2008-1546

    servlet/MIMEReceiveServlet in the web controller for Mitsubishi Electric GB-50 and GB-50A air-conditioning control syst…

  • Unscored —
    CVE-2005-4874

    The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain (1) …

  • Unscored —
    CVE-2008-0924

    Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier…

  • Unscored —
    CVE-2008-0926 Public exploit EPSS 58%

    The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on clie…

  • Unscored —
    CVE-2008-1538

    Cross-site scripting (XSS) vulnerability in searchAction.do in ManageEngine EventLog Analyzer 5 allows remote attackers…

  • Unscored —
    CVE-2008-1539 Public exploit

    SQL injection vulnerability in includes/dynamic_titles.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to exec…

  • Unscored —
    CVE-2008-1535 Public exploit

    SQL injection vulnerability in the Matti Kiviharju rekry (aka com_rekry or rekry!Joom) 1.0.0 component for Joomla! allo…

  • Unscored —
    CVE-2008-1536

    Cross-site scripting (XSS) vulnerability in index.php in Pictures Pro (aka Tim Grissett) Photo Cart 4.1 allows remote a…

  • Unscored —
    CVE-2008-1541 Public exploit

    Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote attackers to read arbitra…

  • Unscored —
    CVE-2008-1534 Public exploit

    Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote attackers to include and execute arbit…

  • Unscored —
    CVE-2008-1537 Public exploit

    Directory traversal vulnerability in pb_inc/admincenter/index.php in PowerScripts PowerBook 1.21 allows remote attacker…

  • Unscored —
    CVE-2008-1540 Public exploit

    SQL injection vulnerability in the Datsogallery (com_datsogallery) 1.3.1 module for Joomla! and Mambo allows remote att…

    Web / CMS
  • Unscored —
    CVE-2008-1240

    LiveConnect in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 does not properly parse the content origin fo…

  • Unscored —
    CVE-2008-1532

    Perlbal before 1.70, when buffered upload is enabled, allows remote attackers to cause a denial of service (crash) via …

  • Unscored —
    CVE-2008-1533

    Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthori…