Skip to content
OpenAdvisories

Archive

March 2008

Vulnerabilities first published in this month (UTC), newest first.

← February 2008 2008 / March April 2008 →
  1. 1 
  2. 2 
  3. 316
  4. 424
  5. 515
  6. 637
  7. 7 
  8. 813
  9. 95
  10. 1055
  11. 1122
  12. 1226
  13. 1319
  14. 147
  15. 15 
  16. 16 
  17. 1724
  18. 1839
  19. 1915
  20. 2047
  21. 21 
  22. 22 
  23. 23 
  24. 2442
  25. 2527
  26. 2613
  27. 2717
  28. 2820
  29. 29 
  30. 30 
  31. 3137
All Critical High Medium Low Exploited only Public exploit

520 results · Feed

  • Unscored —
    CVE-2008-1522

    ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), have (1) "user"…

  • Unscored —
    CVE-2008-1521

    ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote au…

  • Unscored —
    CVE-2008-1523

    ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow r…

  • Unscored —
    CVE-2008-1529

    ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier fo…

  • Unscored —
    CVE-2008-1526

    ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(A…

  • Unscored —
    CVE-2008-1525

    The default SNMP configuration on ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) th…

  • Unscored —
    CVE-2008-1514

    arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local u…

  • Unscored —
    CVE-2008-1509 Public exploit

    SQL injection vulnerability in index.php in XLPortal 2.2.4 and earlier allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-1512 Public exploit

    Directory traversal vulnerability in admin/admin_xs.php in eXtreme Styles module (XS-Mod) 2.3.1 and 2.4.0 for phpBB all…

  • Low —
    CVE-2008-1510 Public exploit

    Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameter

    Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter.

    org.opencms:opencms-core Maven
  • Unscored —
    CVE-2008-1513 Public exploit

    SQL injection vulnerability in index.php in Danneo CMS 0.5.1 and earlier, when the Referers statistics option is enable…

  • Unscored —
    CVE-2008-1508 Public exploit

    SQL injection vulnerability in EfesTech E-Kontör and earlier allows remote attackers to execute arbitrary SQL commands …

  • Critical 9.8
    CVE-2008-1511 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in ooComments 1.0 allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2008-1507 Public exploit

    PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@p…

  • Unscored —
    CVE-2008-1506 Public exploit

    PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to php…

  • Unscored —
    CVE-2008-1496 Public exploit

    Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-1499 Public exploit

    Cross-site scripting (XSS) vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote at…

  • Unscored —
    CVE-2008-1490

    Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and…

  • Unscored —
    CVE-2008-1493 Public exploit

    Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arb…

  • Unscored —
    CVE-2008-1503

    Cross-site scripting (XSS) vulnerability in the web management interface in F5 BIG-IP 9.4.3 allows remote attackers to …

  • Unscored —
    CVE-2008-1491 Public exploit EPSS 70%

    Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 a…

  • Unscored —
    CVE-2008-1501 Public exploit

    The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and …

  • Unscored —
    CVE-2008-1492 Public exploit

    Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and …

  • Unscored —
    CVE-2008-1497

    Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated user…

  • Unscored —
    CVE-2008-1494

    SQL injection vulnerability in inc/module/online.php in Easy-Clanpage 2.2 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-1505 Public exploit EPSS 46%

    PHP remote file inclusion vulnerability in the SSTREAMTV custompages (com_custompages) 1.1 and earlier component for Jo…

  • Unscored —
    CVE-2008-1500 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in TinyPortal 0.8.6 and 1.0.3 allows remote attackers to inject a…

  • Unscored —
    CVE-2008-1495 Public exploit

    Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote aut…

  • Medium —
    CVE-2008-1502 EPSS 11%

    Moodle vulnerable to Cross-site scripting

    The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a st…

    moodle/moodle wordpress Debian Packagist
  • Unscored —
    CVE-2008-1498 Public exploit

    Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated use…

  • Unscored —
    CVE-2008-1504 Public exploit

    Cross-site scripting (XSS) vulnerability in setup.php3 in phpHeaven phpMyChat 0.14.5 allows remote attackers to inject …

  • Unscored —
    CVE-2008-1092 EPSS 26%

    Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-1160 Public exploit EPSS 15%

    ZyXEL ZyWALL 1050 has a hard-coded password for the Quagga and Zebra processes that is not changed when it is set by a …

  • Unscored —
    CVE-2008-1489 Public exploit EPSS 12%

    Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial …

    vlc Debian
  • Unscored —
    CVE-2008-1487

    Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2008-1486

    SQL injection vulnerability in Phorum before 5.2.6, when mysql_use_ft is disabled, allows remote attackers to execute a…

  • Unscored —
    CVE-2008-1484 Public exploit

    The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which …

  • Unscored —
    CVE-2008-1483

    OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set …

    openssh Debian
  • Unscored —
    CVE-2008-1485

    Cross-site scripting (XSS) vulnerability in PunBB 1.2.16 and earlier allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2008-1488 Public exploit

    Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to ex…