Skip to content
OpenAdvisories

Archive

18 June 2008

Vulnerabilities first published on this day (UTC), newest first.

← May 2008 2008 / June /18 July 2008 →
  1. 1 
  2. 228
  3. 327
  4. 431
  5. 516
  6. 620
  7. 7 
  8. 8 
  9. 91
  10. 1033
  11. 111
  12. 1227
  13. 1321
  14. 14 
  15. 15 
  16. 1631
  17. 175
  18. 1831
  19. 1913
  20. 2013
  21. 21 
  22. 22 
  23. 2320
  24. 2416
  25. 2527
  26. 2620
  27. 2717
  28. 28 
  29. 29 
  30. 3039
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2008-2765

    SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-2768

    Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Poll Manager XE allows remote authenticated users…

  • Unscored —
    CVE-2008-2756

    Cross-site scripting (XSS) vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1.0 allows remote attack…

  • Unscored —
    CVE-2008-2761

    Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Banner Manager XE 2.0 allow remote authenticated …

  • Unscored —
    CVE-2008-2769

    PHP remote file inclusion vulnerability in authentication/smf/smf.functions.php in Simple Machines phpRaider 1.0.6 and …

  • Unscored —
    CVE-2008-2770 Public exploit

    SQL injection vulnerability in index.php in MycroCMS 0.5, when magic_quotes_gpc is disabled, allows remote attackers to…

  • Unscored —
    CVE-2008-2758

    Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute News Manager XE 3.2 allow remote authenticated ad…

  • Unscored —
    CVE-2008-2773

    Cross-site scripting (XSS) vulnerability in the Taxonomy Image module 5.x before 5.x-1.3 and 6.x before 6.x-1.3, a modu…

    Web / CMS
  • Unscored —
    CVE-2008-2764

    Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Absolute Live Support XE 5.1 allows remote authen…

  • Unscored —
    CVE-2008-2771

    The Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly implement access check…

  • Unscored —
    CVE-2008-2753 Public exploit

    Multiple SQL injection vulnerabilities in Pooya Site Builder (PSB) 6.0 allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-2759

    Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow remote attackers to i…

  • Unscored —
    CVE-2008-2767

    SQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated users with administrator…

  • Unscored —
    CVE-2008-2772

    The Magic Tabs module 5.x before 5.x-1.1 for Drupal allows remote attackers to execute arbitrary PHP code via unspecifi…

  • Unscored —
    CVE-2008-2757

    SQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote authenticated administrat…

  • Unscored —
    CVE-2008-2754 Public exploit

    SQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, when magic_quotes_gpc is disabled, allows remote…

  • Unscored —
    CVE-2008-2762

    SQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote authenticated administr…

  • Unscored —
    CVE-2008-2755 Public exploit

    SQL injection vulnerability in index.php in JAMM CMS allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2008-2766

    Cross-site scripting (XSS) vulnerability in Xigla Absolute Image Gallery XE allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2008-2763

    SQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote authenticated administrat…

  • Unscored —
    CVE-2008-2760

    SQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows remote authenticated ad…

  • Unscored —
    CVE-2008-0925

    Cross-site scripting (XSS) vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and …

  • Unscored —
    CVE-2008-2751 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application …

  • Unscored —
    CVE-2008-2060

    Unspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2, when …

  • Unscored —
    CVE-2008-2752 Public exploit EPSS 28%

    Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted…

  • Unscored —
    CVE-2008-2750

    The pppol2tp_recvmsg function in drivers/net/pppol2tp.c in the Linux kernel 2.6 before 2.6.26-rc6 allows remote attacke…

  • Unscored —
    CVE-2008-2640

    Multiple cross-site scripting (XSS) vulnerabilities in the Flex 3 History Management feature in Adobe Flex 3.0.1 SDK an…

  • Unscored —
    CVE-2008-2428

    Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-2749

    Unspecified vulnerability in cshttpd in Sun Java System Calendar Server 6 and 6.3, and Sun ONE Calendar Server 6.0, whe…

  • Unscored —
    CVE-2008-2747

    No-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLM\SOFTWARE\Vitalwerks\DUC registry …

  • Unscored —
    CVE-2008-2748 Public exploit

    Skulltag 0.97d2-RC2 and earlier allows remote attackers to cause a denial of service (daemon hang) via a series of long…