Skip to content
OpenAdvisories

Archive

July 2008

Vulnerabilities first published in this month (UTC), newest first.

← June 2008 2008 / July August 2008 →
  1. 113
  2. 234
  3. 39
  4. 4 
  5. 5 
  6. 6 
  7. 757
  8. 815
  9. 943
  10. 1026
  11. 1112
  12. 12 
  13. 13 
  14. 1426
  15. 1554
  16. 169
  17. 1712
  18. 1830
  19. 19 
  20. 20 
  21. 2117
  22. 2212
  23. 23 
  24. 2417
  25. 2531
  26. 26 
  27. 2710
  28. 2822
  29. 295
  30. 3027
  31. 3139
All Critical High Medium Low Exploited only Public exploit

520 results · Feed

  • Unscored —
    CVE-2008-3429

    Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers to cause a denial of …

    httrack Debian
  • Unscored —
    CVE-2008-3428

    Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting t…

  • Unscored —
    CVE-2008-3424

    Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRI…

  • Unscored —
    CVE-2008-3426

    Unspecified vulnerability in the Solaris Platform Information and Control Library daemon (picld) in Sun Solaris 8 throu…

  • Unscored —
    CVE-2008-3425

    Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 …

  • Unscored —
    CVE-2008-3430 Public exploit

    Buffer overflow in the CoVideoWindow.ocx ActiveX control 5.0.907.1 in Eyeball MessengerSDK, as used in products such as…

  • Unscored —
    CVE-2008-3422

    Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote…

    mono Debian
  • Unscored —
    CVE-2008-3411

    The Axesstel AXW-D800 modem with D2_ETH_109_01_VEBR Jun-14-2006 software does not require authentication for (1) etc/co…

  • Unscored —
    CVE-2008-3417 Public exploit

    SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-3421

    Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attacker…

  • Unscored —
    CVE-2008-3414 Public exploit

    SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2008-3408 Public exploit

    Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to e…

  • Unscored —
    CVE-2008-3412 Public exploit

    SQL injection vulnerability in Comsenz EPShop (aka ECShop) before 3.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-3418 Public exploit

    SQL injection vulnerability in browse.php in TriO 2.1 and earlier allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-3413 Public exploit

    SQL injection vulnerability in category.php in Greatclone GC Auction Platinum allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-3410

    Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference…

  • Unscored —
    CVE-2008-3419 Public exploit

    SQL injection vulnerability in ugroups.php in Youtuber Clone allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2008-3416 Public exploit

    SQL injection vulnerability in modules/members.php in IceBB before 1.0-rc9.3 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-3415 Public exploit

    Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attacke…

  • Unscored —
    CVE-2008-3409 Public exploit EPSS 11%

    Buffer overflow in Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (memor…

  • Unscored —
    CVE-2008-3420 Public exploit

    Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2008-3403 Public exploit

    SQL injection vulnerability in mojoClassified.cgi in MojoPersonals allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-3406 Public exploit

    SQL injection vulnerability in showcat.php in phpLinkat 0.1 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-3392

    Cross-site request forgery (CSRF) vulnerability in Web Wiz Forum 9.5 allows remote attackers to log out a user via a li…

  • Unscored —
    CVE-2008-3398 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2008-3402 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics (HBS) 2.0 allow remote attackers to execu…

  • Unscored —
    CVE-2008-3404 Public exploit

    Cross-site scripting (XSS) vulnerability in guestbook.js.php in MJGuest 6.8 GT allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2008-3396 Public exploit

    Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of service (NULL pointer der…

  • Medium 6.1
    CVE-2008-3397

    Cross-site scripting (XSS) vulnerability in Runesoft Cerberus CMS before 3_1.4_0.9 allows remote attackers to inject ar…

  • Unscored —
    CVE-2008-3407 Public exploit

    phpLinkat 0.1 allows remote attackers to bypass authentication and access unspecified pages under admin/ by sending a l…

  • Unscored —
    CVE-2008-3405 Public exploit

    Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and…

  • Unscored —
    CVE-2008-3399 Public exploit

    PHP remote file inclusion vulnerability in activities/workflow-activities.php in XRMS CRM 1.99.2, when register_globals…

  • Unscored —
    CVE-2008-3395

    Calacode @Mail 5.41 on Linux uses weak world-readable permissions for (1) webmail/libs/Atmail/Config.php and (2) webmai…

  • Unscored —
    CVE-2008-3400 Public exploit

    XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, whi…

  • Unscored —
    CVE-2008-3393

    SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2008-3390 Public exploit

    Directory traversal vulnerability in libraries/general.init.php in Minishowcase Image Gallery 09b136, when register_glo…

  • Unscored —
    CVE-2008-3401 Public exploit

    PHP remote file inclusion vulnerability in hioxRandomAd.php in HIOX Random Ad (HRA) 1.3 allows remote attackers to exec…

  • Unscored —
    CVE-2008-3391 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2008-3394

    Multiple cross-site scripting (XSS) vulnerabilities in search.cfm in BookMine allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2008-3388 Public exploit

    Multiple SQL injection vulnerabilities in Def-Blog 1.0.3 allow remote attackers to execute arbitrary SQL commands via t…