Skip to content
OpenAdvisories

Archive

24 June 2008

Vulnerabilities first published on this day (UTC), newest first.

← May 2008 2008 / June /24 July 2008 →
  1. 1 
  2. 228
  3. 327
  4. 431
  5. 516
  6. 620
  7. 7 
  8. 8 
  9. 91
  10. 1033
  11. 111
  12. 1227
  13. 1321
  14. 14 
  15. 15 
  16. 1631
  17. 175
  18. 1831
  19. 1913
  20. 2013
  21. 21 
  22. 22 
  23. 2320
  24. 2416
  25. 2527
  26. 2620
  27. 2717
  28. 28 
  29. 29 
  30. 3039
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2008-2664

    The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.…

  • Unscored —
    CVE-2008-2839 Public exploit

    Cross-site scripting (XSS) vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2008-2834 Public exploit

    SQL injection vulnerability in projects.php in Scientific Image DataBase 0.41 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-2841 Public exploit EPSS 15%

    Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote …

  • Unscored —
    CVE-2008-2837 Public exploit

    SQL injection vulnerability in index.php in CMS-BRD allows remote attackers to execute arbitrary SQL commands via the m…

  • Unscored —
    CVE-2008-2725

    Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8…

  • Unscored —
    CVE-2008-2427 Public exploit EPSS 16%

    Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD …

  • Unscored —
    CVE-2008-2663

    Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 befor…

  • Unscored —
    CVE-2008-2836 Public exploit

    PHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote attackers to execute a…

  • Unscored —
    CVE-2008-2835 Public exploit

    SQL injection vulnerability in cgi-bin/igsuite in IGSuite 3.2.4 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-2832 Public exploit EPSS 12%

    Unrestricted file upload vulnerability in calendar_admin.asp in Full Revolution aspWebCalendar 2008 allows remote attac…

  • Unscored —
    CVE-2008-2833 Public exploit

    admin/upload.php in le.cms 1.4 and earlier allows remote attackers to bypass administrative authentication, and upload …

  • Unscored —
    CVE-2008-2838 Public exploit

    Directory traversal vulnerability in index.php in Traindepot 0.1 allows remote attackers to read arbitrary files via a …

  • Unscored —
    CVE-2008-2726

    Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8…

  • Unscored —
    CVE-2008-2662

    Multiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 …

  • Unscored —
    CVE-2008-2840

    Multiple directory traversal vulnerabilities in Exero CMS 1.0.0 and 1.0.1 allow remote attackers to include and execute…