Skip to content
OpenAdvisories

Archive

May 2008

Vulnerabilities first published in this month (UTC), newest first.

← April 2008 2008 / May June 2008 →
  1. 19
  2. 211
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 710
  8. 814
  9. 918
  10. 10 
  11. 11 
  12. 1224
  13. 1334
  14. 1443
  15. 15 
  16. 1634
  17. 17 
  18. 1822
  19. 1913
  20. 2012
  21. 2117
  22. 2219
  23. 2317
  24. 24 
  25. 25 
  26. 26 
  27. 2719
  28. 2822
  29. 2922
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

195 results · Clear filters · Feed

  • Unscored —
    CVE-2008-2448 Public exploit

    Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-2458 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attac…

  • Unscored —
    CVE-2008-2425 Public exploit

    SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-2333 Public exploit

    Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows rem…

  • Unscored —
    CVE-2008-2419 Public exploit

    Mozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service (heap corruption and application crash) o…

  • Unscored —
    CVE-2008-2422 Public exploit

    SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-2421 Public exploit

    Cross-site scripting (XSS) vulnerability in the Web GUI in SAP Web Application Server (WAS) 7.0, Web Dynpro for ABAP (a…

  • Unscored —
    CVE-2008-1767 Public exploit EPSS 13%

    Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (…

    libxslt Debian
  • Unscored —
    CVE-2008-2416 Public exploit

    SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-2413 Public exploit

    Cross-site scripting (XSS) vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2008-2415 Public exploit

    Directory traversal vulnerability in template/purpletech/base_include.php in DigitalHive (aka hive) 2.0 RC2 allows remo…

  • Unscored —
    CVE-2008-2006 Public exploit

    Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to cause a denial of ser…

  • Unscored —
    CVE-2008-2412 Public exploit

    SQL injection vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-2417 Public exploit

    SQL injection vulnerability in showQAnswer.asp in How2ASP.net Webboard 4.1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-2414 Public exploit

    Cross-site scripting (XSS) vulnerability in send_email.php in AN Guestbook (ANG) 0.4 allows remote attackers to inject …

  • Unscored —
    CVE-2008-2411 Public exploit

    SQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote…

  • Unscored —
    CVE-2008-2240 Public exploit EPSS 65%

    Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allow…

  • Unscored —
    CVE-2007-5962 Public exploit EPSS 12%

    Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 throu…

  • Unscored —
    CVE-2008-2395 Public exploit

    SQL injection vulnerability in thread.php in AlkalinePHP 0.80.00 beta and earlier allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-2394 Public exploit

    Multiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2008-2396 Public exploit

    PHP remote file inclusion vulnerability in index.php in Wajox Software microSSys CMS 1.5 and earlier, when register_glo…

  • Unscored —
    CVE-2008-2393 Public exploit

    SQL injection vulnerability in play.php in EntertainmentScript 1.4.0 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-2390 Public exploit

    Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute methods, which allows…

  • Unscored —
    CVE-2008-2398 Public exploit Scanner template

    Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attacker…

  • Unscored —
    CVE-2008-2351 Public exploit

    Multiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-2353 Public exploit

    Directory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote attackers to include an…

  • Unscored —
    CVE-2008-2348 Public exploit

    MeltingIce File System 1.0 allows remote attackers to bypass application authentication, create new user accounts, and …

  • Unscored —
    CVE-2008-2355 Public exploit

    Directory traversal vulnerability in index.php in WR-Meeting 1.0, when magic_quotes_gpc is disabled, allows remote atta…

  • Unscored —
    CVE-2008-2347 Public exploit

    MyPicGallery 1.0 allows remote attackers to bypass application authentication and gain administrative access by setting…

  • Unscored —
    CVE-2008-2346 Public exploit

    AlkalinePHP 0.77.35 and earlier allows remote attackers to bypass authentication and gain administrative access by crea…

  • Unscored —
    CVE-2008-2352 Public exploit

    Directory traversal vulnerability in index.php in Smeego 1.0, when magic_quotes_gpc is disabled, allows remote attacker…

  • Unscored —
    CVE-2008-2356 Public exploit

    SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arb…

  • Unscored —
    CVE-2008-2350 Public exploit

    Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitr…

  • Unscored —
    CVE-2008-2349 Public exploit

    Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a dire…

  • Unscored —
    CVE-2008-2341 Public exploit

    PHP remote file inclusion vulnerability in ch_readalso.php in News Manager 2.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-2339 Public exploit

    SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to ex…

  • Unscored —
    CVE-2008-2335 Public exploit

    Cross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1.2 allows remote attack…

  • Unscored —
    CVE-2008-2343 Public exploit

    News Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information via a direct request t…

  • Unscored —
    CVE-2008-2338 Public exploit

    Interspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the auth cookie to true when …

  • Unscored —
    CVE-2008-2342 Public exploit

    Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary file…