Skip to content
OpenAdvisories

Archive

May 2008

Vulnerabilities first published in this month (UTC), newest first.

← April 2008 2008 / May June 2008 →
  1. 19
  2. 211
  3. 3 
  4. 4 
  5. 515
  6. 611
  7. 710
  8. 814
  9. 918
  10. 10 
  11. 11 
  12. 1224
  13. 1334
  14. 1443
  15. 15 
  16. 1634
  17. 17 
  18. 1822
  19. 1913
  20. 2012
  21. 2117
  22. 2219
  23. 2317
  24. 24 
  25. 25 
  26. 26 
  27. 2719
  28. 2822
  29. 2922
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

386 results · Feed

  • Unscored —
    CVE-2008-2488 Public exploit

    admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated…

  • Unscored —
    CVE-2008-2494

    Cross-site scripting (XSS) vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2008-2486

    Unspecified vulnerability in eMule Plus before 1.2d has unknown impact and attack vectors related to "staticservers.dat…

  • Unscored —
    CVE-2008-2484 Public exploit

    SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magic_quotes_gpc is disabled, allows remote atta…

  • Unscored —
    CVE-2008-2447 Public exploit

    SQL injection vulnerability in products.php in the Mytipper ZoGo-shop plugin 1.15.5 and 1.16 Beta 13 for e107 allows re…

  • Unscored —
    CVE-2008-2456 Public exploit

    SQL injection vulnerability in index.php in ComicShout 2.5 and earlier allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-2449 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Isaac McGowan phpInstantGallery 2.0 allow remote attackers to in…

  • Unscored —
    CVE-2008-2461 Public exploit

    SQL injection vulnerability in index.php in Netious CMS 0.4 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-2443 Public exploit

    SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-2446 Public exploit

    Multiple SQL injection vulnerabilities in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and earlier allow re…

  • Unscored —
    CVE-2008-2454 Public exploit

    SQL injection vulnerability in the xsstream-dm (com_xsstream-dm) component 0.01 Beta for Joomla! allows remote attacker…

  • Unscored —
    CVE-2008-2450

    Multiple cross-site scripting (XSS) vulnerabilities in the Statistics (aka ke_stats) extension 0.1.2 and earlier for TY…

  • Unscored —
    CVE-2008-2457 Public exploit

    SQL injection vulnerability in jokes_category.php in PHP-Jokesite 2.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-2445 Public exploit

    Cross-site scripting (XSS) vulnerability in profile.php in Web Group Communication Center (WGCC) 1.0.3 PreRelease 1 and…

  • Unscored —
    CVE-2008-2460

    SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-2453 Public exploit

    Multiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-2444 Public exploit

    SQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-2459 Public exploit

    Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote attackers to include and execu…

  • Unscored —
    CVE-2008-2455 Public exploit

    SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to ex…

  • Unscored —
    CVE-2008-2448 Public exploit

    Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-2452

    Cross-site scripting (XSS) vulnerability in the Questionaire (aka pbsurvey) extension 1.2.0 and earlier for TYPO3 allow…

  • Unscored —
    CVE-2008-2458 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attac…

  • Unscored —
    CVE-2008-2451

    Multiple SQL injection vulnerabilities in the Statistics (aka ke_stats) extension 0.1.2 and earlier for TYPO3 allow rem…

  • Unscored —
    CVE-2008-2423

    Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2008-2407

    Stack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian before 3.1.10.0 allows user-assisted remote attacke…

  • Unscored —
    CVE-2008-2425 Public exploit

    SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-2409

    Stack-based buffer overflow in Cerulean Studios Trillian before 3.1.10.0 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2008-2333 Public exploit

    Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows rem…

  • Unscored —
    CVE-2008-2419 Public exploit

    Mozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service (heap corruption and application crash) o…

  • Unscored —
    CVE-2008-2422 Public exploit

    SQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-2424

    Unspecified vulnerability in the 404 error page for the "Standard demo" in Interchange before 5.6.0 and before 5.5.2 ha…

  • Medium 6.1
    CVE-2008-2302

    Django Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previ…

    python-django django Debian PyPI
  • Unscored —
    CVE-2008-2421 Public exploit

    Cross-site scripting (XSS) vulnerability in the Web GUI in SAP Web Application Server (WAS) 7.0, Web Dynpro for ABAP (a…

  • Unscored —
    CVE-2008-2408

    Heap-based buffer overflow in the XML parsing functionality in talk.dll in Cerulean Studios Trillian Pro before 3.1.10.…

  • Unscored —
    CVE-2008-2420

    The OCSP functionality in stunnel before 4.24 does not properly search certificate revocation lists (CRL), which allows…

    stunnel4 Debian
  • Unscored —
    CVE-2008-1767 Public exploit EPSS 13%

    Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (…

    libxslt Debian
  • Unscored —
    CVE-2008-2418

    Race condition in the STREAMS Administrative Driver (sad) in Sun Solaris 10 allows local users to cause a denial of ser…

  • Unscored —
    CVE-2007-5495

    sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log…

  • Unscored —
    CVE-2007-5961

    Cross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used in RHN and Red Hat Netw…

  • Unscored —
    CVE-2007-5496

    Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or H…