Skip to content
OpenAdvisories

Archive

28 April 2008

Vulnerabilities first published on this day (UTC), newest first.

← March 2008 2008 / April /28 May 2008 →
  1. 111
  2. 240
  3. 3 
  4. 422
  5. 5 
  6. 66
  7. 711
  8. 822
  9. 919
  10. 1011
  11. 1120
  12. 1210
  13. 13 
  14. 1415
  15. 1518
  16. 1660
  17. 1730
  18. 1816
  19. 19 
  20. 201
  21. 2118
  22. 2210
  23. 2311
  24. 2414
  25. 2514
  26. 26 
  27. 2729
  28. 2813
  29. 298
  30. 3027
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2008-1930 Public exploit

    The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXP…

    wordpress Debian
  • Unscored —
    CVE-2008-1999

    Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible" characters in the useri…

  • Unscored —
    CVE-2008-1103

    Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issu…

    blender Debian
  • Unscored —
    CVE-2008-1996 Public exploit EPSS 11%

    licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application cras…

  • Unscored —
    CVE-2008-1997

    Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 al…

  • Unscored —
    CVE-2008-1998

    The NNSTAT (aka SYSPROC.NNSTAT) procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 on Windows allo…

  • Unscored —
    CVE-2008-2003

    BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which…

  • Unscored —
    CVE-2008-2002

    Multiple cross-site request forgery (CSRF) vulnerabilities on Motorola Surfboard with software SB5100-2.3.3.0-SCM00-NOS…

  • Unscored —
    CVE-2008-2001

    Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via a file:///%E2 link that…

  • Unscored —
    CVE-2008-2000

    Unspecified vulnerability in Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash…

  • Unscored —
    CVE-2008-1995

    Sun Java System Directory Proxy Server 6.0, 6.1, and 6.2 classifies a connection using the "bind-dn" criteria, which ca…

  • Unscored —
    CVE-2008-1671

    start_kdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause a denial of service a…

  • Unscored —
    CVE-2008-1670

    Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to 4.0…