Skip to content
OpenAdvisories

Archive

23 May 2008

Vulnerabilities first published on this day (UTC), newest first.

← April 2008 2008 / May /23 June 2008 →
  1. 19
  2. 211
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 710
  8. 814
  9. 918
  10. 10 
  11. 11 
  12. 1224
  13. 1334
  14. 1443
  15. 15 
  16. 1634
  17. 17 
  18. 1822
  19. 1913
  20. 2012
  21. 2117
  22. 2219
  23. 2317
  24. 24 
  25. 25 
  26. 26 
  27. 2719
  28. 2822
  29. 2922
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2008-2423

    Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2008-2407

    Stack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian before 3.1.10.0 allows user-assisted remote attacke…

  • Unscored —
    CVE-2008-2425 Public exploit

    SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-2409

    Stack-based buffer overflow in Cerulean Studios Trillian before 3.1.10.0 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2008-2333 Public exploit

    Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows rem…

  • Unscored —
    CVE-2008-2419 Public exploit

    Mozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service (heap corruption and application crash) o…

  • Unscored —
    CVE-2008-2422 Public exploit

    SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-2424

    Unspecified vulnerability in the 404 error page for the "Standard demo" in Interchange before 5.6.0 and before 5.5.2 ha…

  • Medium 6.1
    CVE-2008-2302

    Django Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previ…

    python-django django Debian PyPI
  • Unscored —
    CVE-2008-2421 Public exploit

    Cross-site scripting (XSS) vulnerability in the Web GUI in SAP Web Application Server (WAS) 7.0, Web Dynpro for ABAP (a…

  • Unscored —
    CVE-2008-2408

    Heap-based buffer overflow in the XML parsing functionality in talk.dll in Cerulean Studios Trillian Pro before 3.1.10.…

  • Unscored —
    CVE-2008-2420

    The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows…

    stunnel4 Debian
  • Unscored —
    CVE-2008-1767 Public exploit EPSS 13%

    Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (…

    libxslt Debian
  • Unscored —
    CVE-2008-2418

    Race condition in the STREAMS Administrative Driver (sad) in Sun Solaris 10 allows local users to cause a denial of ser…

  • Unscored —
    CVE-2007-5495

    sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log…

  • Unscored —
    CVE-2007-5961

    Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Netw…

  • Unscored —
    CVE-2007-5496

    Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or H…