Skip to content
OpenAdvisories

Archive

June 2008

Vulnerabilities first published in this month (UTC), newest first.

← May 2008 2008 / June July 2008 →
  1. 1 
  2. 228
  3. 327
  4. 431
  5. 516
  6. 620
  7. 7 
  8. 8 
  9. 91
  10. 1033
  11. 111
  12. 1227
  13. 1321
  14. 14 
  15. 15 
  16. 1631
  17. 175
  18. 1831
  19. 1913
  20. 2013
  21. 21 
  22. 22 
  23. 2320
  24. 2416
  25. 2527
  26. 2620
  27. 2717
  28. 28 
  29. 29 
  30. 3039
All Critical High Medium Low Exploited only Public exploit

437 results · Feed

  • Unscored —
    CVE-2008-2862 Public exploit

    Multiple SQL injection vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote attackers to exe…

  • Unscored —
    CVE-2008-2851

    Multiple buffer overflows in OFF System before 0.19.14 allow remote attackers to have an unknown impact via unspecified…

  • Unscored —
    CVE-2008-2855 Public exploit

    Cross-site scripting (XSS) vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2008-2847 Public exploit

    SQL injection vulnerability in the Trade module in Maxtrade AIO 1.3.23 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-2854 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2008-2845 Public exploit

    SQL injection vulnerability in index.php in MyBizz-Classifieds allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-2861 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in eLineStudio Site Composer (ESC) 2.6 and earlier allow remote att…

  • Unscored —
    CVE-2008-2857 Public exploit

    AlstraSoft AskMe Pro 2.1 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent …

  • Unscored —
    CVE-2008-2865 Public exploit

    SQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-2858 Public exploit

    SQL injection vulnerability in index.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-2846 Public exploit

    SQL injection vulnerability in index.php in BoatScripts Classifieds allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-2866 Public exploit

    SQL injection vulnerability in csc_article_details.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to ex…

  • Unscored —
    CVE-2008-2859 Public exploit

    Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denia…

  • Unscored —
    CVE-2008-2860 Public exploit

    SQL injection vulnerability in category.php in AJSquare AJ Auction Pro web 2.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-2863 Public exploit

    Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6 allow remote attackers to creat…

  • Unscored —
    CVE-2008-2849

    Cross-site scripting (XSS) vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote authentic…

  • Unscored —
    CVE-2008-2864 Public exploit

    eLineStudio Site Composer (ESC) 2.6 and earlier allows remote attackers to obtain sensitive information via a direct re…

  • Unscored —
    CVE-2008-2850

    SQL injection vulnerability in the TrailScout module 5.x before 5.x-1.4 for Drupal allows remote attackers to execute a…

  • Unscored —
    CVE-2008-2844 Public exploit

    SQL injection vulnerability in index.php in Carscripts Classifieds allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-2853 Public exploit

    SQL injection vulnerability in index.php in Easy Webstore 1.2 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-2856 Public exploit

    SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-2852

    Cross-site scripting (XSS) vulnerability in CGIWrap before 4.1, when an Internet Explorer based browser is used, allows…

  • Unscored —
    CVE-2008-2843 Public exploit

    Multiple SQL injection vulnerabilities in doITLive CMS 2.50 and earlier allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-2664

    The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.…

  • Unscored —
    CVE-2008-2839 Public exploit

    Cross-site scripting (XSS) vulnerability in the search module in Traindepot 0.1 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2008-2834 Public exploit

    SQL injection vulnerability in projects.php in Scientific Image DataBase 0.41 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-2841 Public exploit EPSS 15%

    Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote …

  • Unscored —
    CVE-2008-2837 Public exploit

    SQL injection vulnerability in index.php in CMS-BRD allows remote attackers to execute arbitrary SQL commands via the m…

  • Unscored —
    CVE-2008-2725

    Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8…

  • Unscored —
    CVE-2008-2427 Public exploit EPSS 16%

    Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD …

  • Unscored —
    CVE-2008-2663

    Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 befor…

  • Unscored —
    CVE-2008-2836 Public exploit

    PHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote attackers to execute a…

  • Unscored —
    CVE-2008-2835 Public exploit

    SQL injection vulnerability in cgi-bin/igsuite in IGSuite 3.2.4 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-2832 Public exploit EPSS 12%

    Unrestricted file upload vulnerability in calendar_admin.asp in Full Revolution aspWebCalendar 2008 allows remote attac…

  • Unscored —
    CVE-2008-2833 Public exploit

    admin/upload.php in le.cms 1.4 and earlier allows remote attackers to bypass administrative authentication, and upload …

  • Unscored —
    CVE-2008-2838 Public exploit

    Directory traversal vulnerability in index.php in Traindepot 0.1 allows remote attackers to read arbitrary files via a …

  • Unscored —
    CVE-2008-2726

    Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8…

  • Unscored —
    CVE-2008-2662

    Multiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 …

  • Unscored —
    CVE-2008-2840

    Multiple directory traversal vulnerabilities in Exero CMS 1.0.0 and 1.0.1 allow remote attackers to include and execute…

  • Unscored —
    CVE-2008-2306

    Apple Safari before 3.1.2 on Windows does not properly interpret the URLACTION_SHELL_EXECUTE_HIGHRISK Internet Explorer…