Skip to content
OpenAdvisories

Archive

9 July 2008

Vulnerabilities first published on this day (UTC), newest first.

← June 2008 2008 / July /9 August 2008 →
  1. 113
  2. 234
  3. 39
  4. 4 
  5. 5 
  6. 6 
  7. 757
  8. 815
  9. 943
  10. 1026
  11. 1112
  12. 12 
  13. 13 
  14. 1426
  15. 1554
  16. 169
  17. 1712
  18. 1830
  19. 19 
  20. 20 
  21. 2117
  22. 2212
  23. 23 
  24. 2417
  25. 2531
  26. 26 
  27. 2710
  28. 2822
  29. 295
  30. 3027
  31. 3139
All Critical High Medium Low Exploited only Public exploit

43 results · Feed

  • Unscored —
    CVE-2008-3115

    Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly…

  • Unscored —
    CVE-2008-3105

    Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Updat…

  • Unscored —
    CVE-2008-3103

    Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE…

  • Unscored —
    CVE-2008-3107

    Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7…

  • Unscored —
    CVE-2008-3104

    Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JR…

  • Unscored —
    CVE-2008-3106

    Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5…

  • Unscored —
    CVE-2008-3114

    Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and…

  • Unscored —
    CVE-2008-3112 EPSS 26%

    Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update…

  • Unscored —
    CVE-2008-3111

    Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and…

  • Unscored —
    CVE-2008-3109

    Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6…

  • Unscored —
    CVE-2008-3110

    Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6…

  • Unscored —
    CVE-2008-3113

    Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_…

  • Unscored —
    CVE-2008-3108

    Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4…

  • Unscored —
    CVE-2008-2244 EPSS 32%

    Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malforme…

  • Unscored —
    CVE-2008-3097

    Cross-site scripting (XSS) vulnerability in the Tinytax module (aka Tinytax taxonomy block) 5.x before 5.x-1.10-1 for D…

  • Unscored —
    CVE-2008-3096

    The Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's authentication level to match t…

  • Unscored —
    CVE-2008-3090

    Multiple SQL injection vulnerabilities in index.php in BlognPlus (BURO GUN +) 2.5.5 MySQL and PostgreSQL editions allow…

  • Unscored —
    CVE-2008-3094

    The Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote attack…

    Web / CMS
  • Unscored —
    CVE-2008-3088 Public exploit

    Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attacke…

  • Unscored —
    CVE-2008-3087 Public exploit

    Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. (dot d…

  • Unscored —
    CVE-2008-3092

    SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated…

  • Unscored —
    CVE-2008-3091

    Cross-site scripting (XSS) vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote …

  • Unscored —
    CVE-2008-3089 Public exploit

    SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote attackers to execute …

  • Unscored —
    CVE-2008-3095

    Cross-site scripting (XSS) vulnerability in the Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC…

    Web / CMS
  • Unscored —
    CVE-2008-3093 Public exploit

    Unrestricted file upload vulnerability in ImperialBB 2.3.5 and earlier allows remote authenticated users to upload and …

  • Medium 6.1
    CVE-2008-2991 EPSS 17%

    Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2008-2931

    The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the…

  • Unscored —
    CVE-2008-1663

    Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) 2.1.10 and 2.1.11 on Linux and Windows …

  • Unscored —
    CVE-2008-3078

    Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote a…

  • Unscored —
    CVE-2008-3080 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to pe…

  • Unscored —
    CVE-2008-3083 Public exploit

    SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers t…

  • Unscored —
    CVE-2008-3079

    Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vector…

  • Unscored —
    CVE-2008-3081

    Multiple unspecified "input validation" vulnerabilities in the Web management interface (aka Messaging Administration i…

  • Unscored —
    CVE-2008-3082

    Cross-site scripting (XSS) vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and…

  • Unscored —
    CVE-2008-3077

    arch/x86/kernel/ptrace.c in the Linux kernel before 2.6.25.10 on the x86_64 platform leaks task_struct references into …

  • Unscored —
    CVE-2008-2812

    The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial …

  • Unscored —
    CVE-2008-2375

    Memory leak in a certain Red Hat deployment of vsftpd before 2.0.5 on Red Hat Enterprise Linux (RHEL) 3 and 4, when PAM…

  • Unscored —
    CVE-2008-2376

    Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attacker…

  • Unscored —
    CVE-2007-1899 Public exploit

    Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL com…

  • Critical 9.8
    CVE-2007-3652

    SQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to exec…