Skip to content
OpenAdvisories

Archive

18 May 2008

Vulnerabilities first published on this day (UTC), newest first.

  1. 19
  2. 211
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 710
  8. 814
  9. 918
  10. 10 
  11. 11 
  12. 1224
  13. 1334
  14. 1443
  15. 15 
  16. 1634
  17. 17 
  18. 1822
  19. 1913
  20. 2012
  21. 2117
  22. 2219
  23. 2317
  24. 24 
  25. 25 
  26. 26 
  27. 2719
  28. 2822
  29. 2922
  30. 30 
  31. 31 

22 results · Feed

  • Unscored —
    CVE-2008-0167 Public exploit

    The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to ze…

  • Unscored —
    CVE-2008-2297 Public exploit

    The admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges by setting the loginin…

  • Unscored —
    CVE-2008-2294 Public exploit

    Pet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct request to useradded.php wit…

  • Unscored —
    CVE-2008-2298 Public exploit

    Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin c…

  • Unscored —

    Unspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and …

  • Unscored —

    Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and mo…

  • Unscored —
    CVE-2008-2283 Public exploit

    IDAutomation allows remote attackers to overwrite arbitrary files via the argument to the (1) SaveBarCode and (2) SaveE…

  • Unscored —
    CVE-2008-2286 Public exploit EPSS 33%

    SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allo…

  • Unscored —

    Unspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5 and earlier, Access E…

  • Unscored —
    CVE-2008-2301 Public exploit

    SQL injection vulnerability in Kostenloses Linkmanagementscript allows remote attackers to execute arbitrary SQL comman…

  • Unscored —

    Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.…

  • Unscored —

    Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, wh…

  • Unscored —

    Unspecified vulnerability in a tooltip element in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 a…

  • Unscored —

    The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain opt…

  • Unscored —
    CVE-2008-2282 Public exploit

    admin.php in Internet Photoshow and Internet Photoshow Special Edition (SE) allows remote attackers to bypass authentic…

  • Unscored —
    CVE-2008-2281 Public exploit EPSS 23%

    Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows u…

  • Unscored —
    CVE-2008-2293 Public exploit

    admin.php in Multi-Page Comment System (MPCS) 1.0 and 1.1 allows remote attackers to bypass authentication and gain pri…

  • Unscored —

    axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed …

  • Unscored —
    CVE-2008-2292 Public exploit

    Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for…

  • Unscored —
    CVE-2008-2284 Public exploit

    PHP remote file inclusion vulnerability in fusebox5.php in Fusebox 5.5.1 allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2008-2296 Public exploit

    PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute…

  • Unscored —
    CVE-2008-2295 Public exploit

    Cross-site scripting (XSS) vulnerability in rg_search.php in Rgboard 3.0.12, and possibly earlier versions, allows remo…