Skip to content
OpenAdvisories

Archive

March 2008

Vulnerabilities first published in this month (UTC), newest first.

← February 2008 2008 / March April 2008 →
  1. 1 
  2. 2 
  3. 316
  4. 424
  5. 515
  6. 637
  7. 7 
  8. 813
  9. 95
  10. 1055
  11. 1122
  12. 1226
  13. 1319
  14. 147
  15. 15 
  16. 16 
  17. 1724
  18. 1839
  19. 1915
  20. 2047
  21. 21 
  22. 22 
  23. 23 
  24. 2442
  25. 2527
  26. 2613
  27. 2717
  28. 2820
  29. 29 
  30. 30 
  31. 3137
All Critical High Medium Low Exploited only Public exploit

520 results · Feed

  • Unscored —
    CVE-2008-1253

    Cross-site scripting (XSS) vulnerability in cgi-bin/webcm on the D-Link DSL-G604T router allows remote attackers to inj…

  • Unscored —
    CVE-2008-1224

    Cross-site scripting (XSS) vulnerability in account.php in BosClassifieds Classified Ads System 3.0 allows remote attac…

  • Unscored —
    CVE-2008-1254

    Multiple cross-site request forgery (CSRF) vulnerabilities on the ZyXEL P-660HW series router allow remote attackers to…

  • Unscored —
    CVE-2008-1257

    Cross-site scripting (XSS) vulnerability in Forms/DiagGeneral_2 on the ZyXEL P-660HW series router allows remote attack…

  • Unscored —
    CVE-2008-1251

    Cross-site scripting (XSS) vulnerability in the web interface on the central phone server for the Snom 320 SIP Phone al…

  • Unscored —
    CVE-2008-1267

    The Siemens SpeedStream 6520 router allows remote attackers to cause a denial of service (web interface crash) via an H…

  • Unscored —
    CVE-2008-1225 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in WebCT Campus Edition 4.1.5.8, when "Don't wrap text" is enabled,…

  • Unscored —
    CVE-2008-1252

    b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain t…

  • Unscored —
    CVE-2008-1255

    The ZyXEL P-660HW series router maintains authentication state by IP address, which allows remote attackers to bypass a…

  • Unscored —
    CVE-2008-1258

    Cross-site scripting (XSS) vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbi…

  • Unscored —
    CVE-2008-1217

    Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH, and 8.0.x before…

  • Unscored —
    CVE-2008-1215 Public exploit

    Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed…

  • Unscored —
    CVE-2008-1216

    IBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs containing cross-site scripti…

  • Unscored —
    CVE-2007-6705

    The WebSphere MQ XA 5.3 before FP13 and 6.0.x before 6.0.2.1 client for Windows, when running in an MTS or a COM+ envir…

  • Unscored —
    CVE-2007-6706

    Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and pos…

  • Unscored —
    CVE-2008-1208 Public exploit

    Cross-site scripting (XSS) vulnerability in the login page in Check Point VPN-1 UTM Edge W Embedded NGX 7.0.48x allows …

  • Unscored —
    CVE-2008-1209

    Cross-site scripting (XSS) vulnerability in redirect.do in Xitex WebContent M1 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2008-1204

    Multiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1…

  • Unscored —
    CVE-2008-1212

    Cross-site scripting (XSS) vulnerability in set_permissions.php in Podcast Generator 0.96.2 allows remote attackers to …

  • Unscored —
    CVE-2008-1214

    MRcgi/MRProcessIncomingForms.pl in Numara FootPrints 8.1 on Linux allows remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2008-1205

    Unspecified vulnerability in the ipsecah kernel module in Sun Solaris 10, when a key management daemon for IPsec securi…

  • Unscored —
    CVE-2008-1207

    Multiple unspecified vulnerabilities in Fujitsu Interstage Smart Repository, as used in multiple Fujitsu Interstage pro…

  • Unscored —
    CVE-2008-1206

    Format string vulnerability in the log_message function in lks.c in Linux Kiss Server 1.2, when background (daemon) mod…

  • Unscored —
    CVE-2008-1211

    Cross-site scripting (XSS) vulnerability in BosDates 3.x and 4.x allows remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2008-1210

    Stack-based buffer overflow in the ctags parsing code in Programmer's Notepad before 2.0.8.718 allows user-assisted rem…

  • Unscored —
    CVE-2008-1213

    Cross-site scripting (XSS) vulnerability in Numara FootPrints for Linux 8.1 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2003-1552

    Unrestricted file upload vulnerability in uploader.php in Uploader 1.1 allows remote attackers to execute arbitrary cod…

  • Unscored —
    CVE-2003-1551

    Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors r…

  • Unscored —
    CVE-2008-1187

    Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earli…

  • Unscored —
    CVE-2008-1191

    Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create…

  • Unscored —
    CVE-2008-1185

    Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier,…

  • Unscored —
    CVE-2008-1194

    Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0…

  • Unscored —
    CVE-2008-1189

    Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4…

  • Unscored —
    CVE-2008-1190 EPSS 17%

    Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and S…

  • Unscored —
    CVE-2008-1198

    The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode inst…

  • Unscored —
    CVE-2008-1186

    Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5.0 Update 13 and earli…

  • Unscored —
    CVE-2008-1196

    Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 …

  • Unscored —
    CVE-2008-1193 Public exploit EPSS 13%

    Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, …

  • Unscored —
    CVE-2008-1192

    Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier…

  • Unscored —
    CVE-2008-1195

    Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and ea…