Skip to content
OpenAdvisories

Archive

March 2008

Vulnerabilities first published in this month (UTC), newest first.

← February 2008 2008 / March April 2008 →
  1. 1 
  2. 2 
  3. 316
  4. 424
  5. 515
  6. 637
  7. 7 
  8. 813
  9. 95
  10. 1055
  11. 1122
  12. 1226
  13. 1319
  14. 147
  15. 15 
  16. 16 
  17. 1724
  18. 1839
  19. 1915
  20. 2047
  21. 21 
  22. 22 
  23. 23 
  24. 2442
  25. 2527
  26. 2613
  27. 2717
  28. 2820
  29. 29 
  30. 30 
  31. 3137
All Critical High Medium Low Exploited only Public exploit

520 results · Feed

  • Unscored —
    CVE-2008-1295 Public exploit

    SQL injection vulnerability in archives.php in Gregory Kokanosky (aka Greg's Place) phpMyNewsletter 0.8 beta 5 and earl…

  • Unscored —
    CVE-2008-1313 Public exploit

    Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-1303 Public exploit

    The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2008-1312

    Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions bef…

  • Low —
    CVE-2008-1300 Public exploit

    Alkacon Open CMS XSS via Logfile Viewer Settings function

    Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the …

    org.opencms:opencms-core Maven
  • Unscored —
    CVE-2008-1307 Public exploit EPSS 15%

    Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Onl…

  • Medium 6.1
    CVE-2008-1299

    Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Win…

  • Unscored —
    CVE-2008-0643

    Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to inject ar…

  • Unscored —
    CVE-2008-0890

    Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to …

  • Unscored —
    CVE-2008-0644

    Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to bypass the cross-site scripting (XSS) protection mech…

  • Unscored —
    CVE-2008-1202

    Cross-site scripting (XSS) vulnerability in the web management interface in Adobe LiveCycle Workflow 6.2 allows remote …

  • Unscored —
    CVE-2008-1203 EPSS 15%

    The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, whic…

  • Unscored —
    CVE-2007-6253

    Multiple buffer overflows in Adobe Form Designer 5.0 and Form Client 5.0 allow remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2008-0113 Public exploit EPSS 42%

    Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to exec…

  • Unscored —
    CVE-2008-0112 Public exploit EPSS 32%

    Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote att…

  • Unscored —
    CVE-2008-0115 Public exploit EPSS 39%

    Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac…

  • Unscored —
    CVE-2008-0117 Public exploit EPSS 33%

    Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assis…

  • Unscored —
    CVE-2008-0306

    sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by usin…

  • Unscored —
    CVE-2008-0116 Public exploit EPSS 48%

    Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows use…

  • Unscored —
    CVE-2008-0301 Public exploit

    Multiple SQL injection vulnerabilities in Mapbender 2.4.4 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2008-0110 EPSS 32%

    Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows u…

  • Unscored —
    CVE-2008-0300 Public exploit

    mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in …

  • Unscored —
    CVE-2008-0307

    Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to exec…

  • Unscored —
    CVE-2008-0111 Public exploit EPSS 51%

    Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 fo…

  • Unscored —
    CVE-2008-0114 Public exploit EPSS 39%

    Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows use…

  • Unscored —
    CVE-2008-0118 Public exploit EPSS 35%

    Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 …

  • Unscored —
    CVE-2006-4695 EPSS 40%

    Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote at…

  • Unscored —
    CVE-2007-1201 EPSS 29%

    Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote at…

  • Unscored —
    CVE-2008-1287

    IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is val…

  • Unscored —
    CVE-2008-1286

    Unspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers to bypass intended ac…

  • Medium 5.3
    CVE-2008-1285

    Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF)

    Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

    com.sun.faces:jsf-api Maven
  • Unscored —
    CVE-2008-1288

    IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about…

  • Unscored —
    CVE-2004-2759

    Shared Sun StorEdge QFS and SAM-QFS file systems, as used in Utilization Suite 4.0 through 4.1 and Performance Suite 4.…

  • Unscored —
    CVE-2008-1283 Public exploit

    Cross-site scripting (XSS) vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2008-1284

    Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, w…

  • Unscored —
    CVE-2008-1279

    Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and…

  • Unscored —
    CVE-2008-1218 Public exploit

    Argument injection vulnerability in Dovecot 1.0.x before 1.0.13, and 1.1.x before 1.1.rc3, when using blocking passdbs,…

    dovecot Debian
  • Unscored —
    CVE-2008-1282

    Buffer overflow in the BFup ActiveX control (BFup.dll) in B21Soft BFup before 1.0.802.29 allows remote attackers to exe…

  • Unscored —
    CVE-2008-1274

    Untrusted search path vulnerability in man in IBM AIX 6.1.0 allows local users to execute arbitrary code via a maliciou…

  • Unscored —
    CVE-2008-1277 Public exploit

    The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote…