Skip to content
OpenAdvisories

Archive

May 2008

Vulnerabilities first published in this month (UTC), newest first.

← April 2008 2008 / May June 2008 →
  1. 19
  2. 211
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 710
  8. 814
  9. 918
  10. 10 
  11. 11 
  12. 1224
  13. 1334
  14. 1443
  15. 15 
  16. 1634
  17. 17 
  18. 1822
  19. 1913
  20. 2012
  21. 2117
  22. 2219
  23. 2317
  24. 24 
  25. 25 
  26. 26 
  27. 2719
  28. 2822
  29. 2922
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

386 results · Feed

  • Unscored —
    CVE-2008-2077

    Unspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors related to "data form list…

  • Unscored —
    CVE-2008-2074 Public exploit

    Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is en…

  • Unscored —
    CVE-2008-2073 Public exploit

    Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attacker…

  • Unscored —
    CVE-2008-2072 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to i…

  • Unscored —
    CVE-2008-2075

    Cross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote attackers to inject a…

  • Unscored —
    CVE-2008-2078

    Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via unspecif…

    robocode Debian
  • Unscored —
    CVE-2008-2068

    Cross-site scripting (XSS) vulnerability in WordPress 2.5 allows remote attackers to inject arbitrary web script or HTM…

    wordpress Debian
  • Unscored —
    CVE-2008-2069 Public exploit EPSS 33%

    Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code vi…

  • Unscored —
    CVE-2008-2065 Public exploit

    SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-2066

    Cross-site scripting (XSS) vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2008-2064

    Multiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack vectors related to "a fu…

  • Unscored —
    CVE-2008-2063 Public exploit

    SQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-2067

    SQL injection vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-2052 Scanner template

    Open redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to redirect users to arb…

  • Unscored —
    CVE-2008-1294

    Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until…

  • Unscored —
    CVE-2008-1375

    Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 befo…

  • Unscored —
    CVE-2008-1675

    The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1 does not properly che…

  • Unscored —
    CVE-2008-1381

    ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installation…

    zoneminder Debian
  • Unscored —
    CVE-2008-2048 Public exploit

    Cross-site scripting (XSS) vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows remote attackers to inject…

  • Unscored —
    CVE-2008-2045 Public exploit

    Absolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows remote attackers to re…

  • Unscored —
    CVE-2008-2049

    The POP3 server (EPSTPOP3S.EXE) 4.22 in E-Post Mail Server 4.10 allows remote attackers to obtain sensitive information…

  • Unscored —
    CVE-2008-2046 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Softpedia SiteXS CMS 0.1.1 Pre-Alpha allows remote attackers t…

  • Unscored —
    CVE-2008-2047 Public exploit

    Multiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-2043

    Multiple cross-site request forgery (CSRF) vulnerabilities in cPanel, possibly 11.18.3 and 11.19.3, allow remote attack…

  • Unscored —
    CVE-2008-2044 Public exploit EPSS 11%

    includes/library.php in netOffice Dwins 1.3 p2 compares the demoSession variable to the 'true' string literal instead o…

  • Unscored —
    CVE-2007-6339 EPSS 11%

    The Akamai Download Manager (aka DLM or dlmanager) ActiveX control (DownloadManagerV2.ocx) before 2.2.3.5 allows remote…