Skip to content
OpenAdvisories

Archive

May 2008

Vulnerabilities first published in this month (UTC), newest first.

← April 2008 2008 / May June 2008 →
  1. 19
  2. 211
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 710
  8. 814
  9. 918
  10. 10 
  11. 11 
  12. 1224
  13. 1334
  14. 1443
  15. 15 
  16. 1634
  17. 17 
  18. 1822
  19. 1913
  20. 2012
  21. 2117
  22. 2219
  23. 2317
  24. 24 
  25. 25 
  26. 26 
  27. 2719
  28. 2822
  29. 2922
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

195 results · Clear filters · Feed

  • Unscored —
    CVE-2008-2198 Public exploit

    PHP remote file inclusion vulnerability in kmitaadmin/kmitat/htmlcode.php in Kmita Tellfriend 2.0 and earlier, when reg…

  • Unscored —
    CVE-2008-2194 Public exploit

    SQL injection vulnerability in forums.php in DeluxeBB 1.2 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-2196 Public exploit

    Cross-site scripting (XSS) vulnerability in admin.php in LifeType 1.2.8 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2008-2192 Public exploit

    Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS (aka itcms) 1.9 allows remote attackers to inj…

  • Unscored —
    CVE-2008-2193 Public exploit

    PHP remote file inclusion vulnerability in example.php in Thomas Gossmann ScorpNews 2.0 allows remote attackers to exec…

  • Unscored —
    CVE-2008-2199 Public exploit

    PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php in Kmita Mail 3.0 and earlier, when register_…

  • Unscored —
    CVE-2008-2190 Public exploit

    SQL injection vulnerability in index.php in Online Rent (aka Online Rental Property Script) 4.5 and earlier allows remo…

  • Unscored —
    CVE-2008-2191 Public exploit

    SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to exec…

  • Unscored —
    CVE-2008-2197 Public exploit

    SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-2202 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2008-2189 Public exploit

    SQL injection vulnerability in viewfaqs.php in AnServ Auction XL allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-2195 Public exploit

    Static code injection vulnerability in admincp.php in DeluxeBB 1.2 and earlier allows remote authenticated administrato…

  • Unscored —
    CVE-2008-2184 Public exploit

    Multiple SQL injection vulnerabilities in SMartBlog (aka SMBlog) 1.3 allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-2183 Public exploit

    SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-2188 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in EJ3 BlackBook 1.0 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2008-2186 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows r…

  • Unscored —
    CVE-2008-2175 Public exploit

    SQL injection vulnerability in comments.php in Gamma Scripts BlogMe PHP 1.1 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-2177 Public exploit

    Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magic_quotes_gpc is disabled, allow remote at…

  • Unscored —
    CVE-2008-2180 Public exploit

    Multiple SQL injection vulnerabilities in cpLinks 1.03, when magic_quotes_gpc is disabled, allow remote attackers to ex…

  • Unscored —
    CVE-2008-2185 Public exploit

    Directory traversal vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to include arbitra…

  • Unscored —
    CVE-2008-2181 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in search.php in cpLinks 1.03 allow remote attackers to inject arbi…

  • Unscored —
    CVE-2008-2187 Public exploit

    Cross-site scripting (XSS) vulnerability in mjguest.php in Mjguest 6.7 GT Rev.01 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2008-2168 Public exploit EPSS 55%

    Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web sc…

    apache2 Debian
  • Unscored —
    CVE-2008-2167 Public exploit EPSS 17%

    Cross-site scripting (XSS) vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2008-0166 Public exploit EPSS 71%

    OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that g…

    openssl openssh Debian
  • Unscored —
    CVE-2008-2162 Public exploit

    Cross-site scripting (XSS) vulnerability in SonicWall Email Security 6.1.1 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-2161 Public exploit EPSS 65%

    Buffer overflow in TFTP Server SP 1.4 and 1.5 on Windows, and possibly other versions, allows remote attackers to execu…

  • Unscored —
    CVE-2008-1802 Public exploit EPSS 13%

    Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbit…

    rdesktop Debian
  • Unscored —
    CVE-2008-1801 Public exploit EPSS 13%

    Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of s…

    rdesktop Debian
  • Unscored —
    CVE-2008-2070 Public exploit

    The WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allows remote attackers to bypass XS…

  • Unscored —
    CVE-2008-2138 Public exploit EPSS 16%

    Oracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access restrictions and read…

  • Unscored —
    CVE-2008-2127 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in CMS Faethon 2.2 Ultimate allows remote attackers to inject ar…

  • Unscored —
    CVE-2008-2129 Public exploit

    SQL injection vulnerability in index.php in Galleristic 1.0, when magic_quotes_gpc is disabled, allows remote attackers…

  • Unscored —
    CVE-2008-2135 Public exploit

    Multiple SQL injection vulnerabilities in VisualShapers ezContents 2.0.0 allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-2132 Public exploit

    SQL injection vulnerability in step1.asp in Systementor PostcardMentor allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-2128 Public exploit

    PHP remote file inclusion vulnerability in templates/header.php in CMS Faethon 2.2 Ultimate allows remote attackers to …

  • Unscored —
    CVE-2008-2123 Public exploit

    Cross-site scripting (XSS) vulnerability in WGate in SAP Internet Transaction Server (ITS) 6.20 allows remote attackers…

  • Unscored —
    CVE-2008-2124 Public exploit

    SQL injection vulnerability in modules/print.asp in fipsASP fipsCMS allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-2125 Public exploit

    SQL injection vulnerability in viewalbums.php in Musicbox 2.3.6 and 2.3.7 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-2130 Public exploit

    SQL injection vulnerability in poll_vote.php in iGaming CMS 1.5 allows remote attackers to execute arbitrary SQL comman…