Skip to content
OpenAdvisories

Archive

13 May 2008

Vulnerabilities first published on this day (UTC), newest first.

  1. 19
  2. 211
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 710
  8. 814
  9. 918
  10. 10 
  11. 11 
  12. 1224
  13. 1334
  14. 1443
  15. 15 
  16. 1634
  17. 17 
  18. 1822
  19. 1913
  20. 2012
  21. 2117
  22. 2219
  23. 2317
  24. 24 
  25. 25 
  26. 26 
  27. 2719
  28. 2822
  29. 2922
  30. 30 
  31. 31 

34 results · Feed

  • Unscored —

    Multiple stack-based buffer overflows in Sarg might allow attackers to execute arbitrary code via unknown vectors, prob…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers …

  • Unscored —
    CVE-2008-0119 EPSS 31%

    Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier …

  • Unscored —
    CVE-2008-1438 EPSS 13%

    Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in m…

  • Unscored —
    CVE-2008-1091 EPSS 41%

    Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and…

  • Unscored —
    CVE-2008-1437 EPSS 13%

    Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in m…

  • Unscored —
    CVE-2008-1434 EPSS 31%

    Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 …

  • Unscored —

    Unspecified vulnerability in AlaxalA AX routers allows remote attackers to cause a denial of service (dropped session) …

  • Unscored —
    CVE-2008-2184 Public exploit

    Multiple SQL injection vulnerabilities in SMartBlog (aka SMBlog) 1.3 allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-2183 Public exploit

    SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-2188 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in EJ3 BlackBook 1.0 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2008-2186 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows r…

  • Unscored —
    CVE-2008-2175 Public exploit

    SQL injection vulnerability in comments.php in Gamma Scripts BlogMe PHP 1.1 allows remote attackers to execute arbitrar…

  • High 7.5

    Unspecified vulnerability in Yamaha routers allows remote attackers to cause a denial of service (dropped session) via …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in admin/category.php in Zomplog 3.8.2 allows remote attackers to inject arbit…

  • High 7.5

    Unspecified vulnerability in Avici routers allows remote attackers to cause a denial of service (dropped session) via c…

  • Unscored —
    CVE-2008-2177 Public exploit

    Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magic_quotes_gpc is disabled, allow remote at…

  • Unscored —
    CVE-2008-2180 Public exploit

    Multiple SQL injection vulnerabilities in cpLinks 1.03, when magic_quotes_gpc is disabled, allow remote attackers to ex…

  • Unscored —
    CVE-2008-2185 Public exploit

    Directory traversal vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to include arbitra…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in SystemList.jsp in SysAid 5.1.08 allows remote attackers to inject arbitrary…

  • Unscored —

    Unspecified vulnerability in Hitachi GR routers allows remote attackers to cause a denial of service (dropped session) …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the powermail extension before 1.1.10 for TYPO3 allows remote attackers to …

  • Unscored —
    CVE-2008-2181 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbi…

  • Unscored —

    Multiple unspecified vulnerabilities in Robin Rawson-Tetley Animal Shelter Manager (ASM) before 2.2.2 have unknown impa…

  • Unscored —
    CVE-2008-2187 Public exploit

    Cross-site scripting (XSS) vulnerability in mjguest.php in Mjguest 6.7 GT Rev.01 allows remote attackers to inject arbi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.7 allows remote attackers to inject arbitrary web…

  • High 7.5

    Unspecified vulnerability in Century routers allows remote attackers to cause a denial of service (dropped session) via…

  • Unscored —
    CVE-2008-2168 Public exploit EPSS 55%

    Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web sc…

  • Unscored —

    The I2O Utility Filter driver (i2omgmt.sys) 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for …

  • Unscored —

    Unspecified vulnerability in the FTP server for HP-UX B.11.11, B.11.23, and B.11.31 allows remote authenticated users t…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the search module in Sun Java System Web Server 6.1 before SP9 and 7.0 befo…

  • Unscored —
    CVE-2008-2167 Public exploit EPSS 17%

    Cross-site scripting (XSS) vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2008-0166 Public exploit EPSS 71%

    OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that g…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix…