Skip to content
OpenAdvisories

Archive

3 June 2008

Vulnerabilities first published on this day (UTC), newest first.

← May 2008 2008 / June /3 July 2008 →
  1. 1 
  2. 228
  3. 327
  4. 431
  5. 516
  6. 620
  7. 7 
  8. 8 
  9. 91
  10. 1033
  11. 111
  12. 1227
  13. 1321
  14. 14 
  15. 15 
  16. 1631
  17. 175
  18. 1831
  19. 1913
  20. 2013
  21. 21 
  22. 22 
  23. 2320
  24. 2416
  25. 2527
  26. 2620
  27. 2717
  28. 28 
  29. 29 
  30. 3039
All Critical High Medium Low Exploited only Public exploit

27 results · Feed

  • Unscored —
    CVE-2008-1035 Public exploit EPSS 10%

    Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote att…

  • Unscored —
    CVE-2008-0169

    Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote attackers to bypass aut…

    ikiwiki Debian
  • Unscored —
    CVE-2008-2522 Public exploit

    SQL injection vulnerability in members.php in Battle.net Clan Script for PHP 1.5.3 and earlier, when magic_quotes_gpc i…

  • Unscored —
    CVE-2008-2537 Public exploit

    SQL injection vulnerability in cat.php in HispaH Model Search allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-2539

    The Sun Cluster Global File System in Sun Cluster 3.1 on Sun Solaris 8 through 10, when an underlying ufs filesystem is…

  • Unscored —
    CVE-2008-2534 Public exploit

    Directory traversal vulnerability in admin/admin_frame.php in Phoenix View CMS Pre Alpha2 and earlier allows remote att…

  • Unscored —
    CVE-2008-2538

    Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv_93, allows local users to …

  • Unscored —
    CVE-2008-2533 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers t…

  • Unscored —
    CVE-2008-2530 Public exploit

    Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-2525

    Cross-site scripting (XSS) vulnerability in the Event Database (aka rlmp_eventdb) extension before 1.1.2 for TYPO3 allo…

  • Unscored —
    CVE-2008-2520 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in BigACE 2.4, when register_globals is enabled, allow remote attack…

  • Unscored —
    CVE-2008-2523

    SQL injection vulnerability in the Autopatcher server plugin in RakNet before 3.23 allows remote attackers to execute a…

  • Unscored —
    CVE-2008-2526

    Cross-site scripting (XSS) vulnerability in the WT Gallery (aka wt_gallery) extension 2.6.2 and earlier for TYPO3 allow…

  • Unscored —
    CVE-2008-2540

    Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has a…

  • Unscored —
    CVE-2008-2527

    Cross-site scripting (XSS) vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAna…

  • Unscored —
    CVE-2008-2536 Public exploit

    SQL injection vulnerability in out.php in YABSoft Advanced Image Hosting (AIH) Script 2.1 and earlier allows remote att…

  • Unscored —
    CVE-2008-2532 Public exploit

    SQL injection vulnerability in forum/topic_detail.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers t…

  • Unscored —
    CVE-2008-2524

    BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary use…

  • Unscored —
    CVE-2008-2535 Public exploit

    Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arb…

  • Unscored —
    CVE-2008-2531

    Cross-site scripting (XSS) vulnerability in the search script in Build A Niche Store (BANS) 3.0 allows remote attackers…

  • Unscored —
    CVE-2008-2521 Public exploit

    SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote auth…

  • Unscored —
    CVE-2008-2529 Public exploit

    SQL injection vulnerability in read.php in Advanced Links Management (ALM) 1.5.2 allows remote attackers to execute arb…

  • Unscored —
    CVE-2008-2528

    Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and …

  • Unscored —
    CVE-2008-2518

    Cross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search/advanced.jsp) in Sun Java Sys…

  • Unscored —
    CVE-2008-2516

    pam_sm_authenticate in pam_pgsql.c in libpam-pgsql 0.6.3 does not properly consider operator precedence when evaluating…

  • Unscored —
    CVE-2008-2517

    The sarab.sh script in SaraB before 0.2.4 places the dar program's encryption key on the command line, which allows loc…

  • Unscored —
    CVE-2008-2519

    Directory traversal vulnerability in Core FTP client 2.1 Build 1565 allows remote FTP servers to create or overwrite ar…