Skip to content
OpenAdvisories

Archive

28 July 2008

Vulnerabilities first published on this day (UTC), newest first.

← June 2008 2008 / July /28 August 2008 →
  1. 113
  2. 234
  3. 39
  4. 4 
  5. 5 
  6. 6 
  7. 757
  8. 815
  9. 943
  10. 1026
  11. 1112
  12. 12 
  13. 13 
  14. 1426
  15. 1554
  16. 169
  17. 1712
  18. 1830
  19. 19 
  20. 20 
  21. 2117
  22. 2212
  23. 23 
  24. 2417
  25. 2531
  26. 26 
  27. 2710
  28. 2822
  29. 295
  30. 3027
  31. 3139
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2008-1946

    The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a …

    coreutils Debian
  • Unscored —
    CVE-2008-3064

    Unspecified vulnerability in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12…

  • Unscored —
    CVE-2008-3353

    Multiple cross-site scripting (XSS) vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject…

  • Unscored —
    CVE-2008-3352 Public exploit

    SQL injection vulnerability in index.php in Live Music Plus 1.1.0 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-3350

    dnsmasq 2.43 allows remote attackers to cause a denial of service (daemon crash) by (1) sending a DHCPINFORM while lack…

    dnsmasq Debian
  • Unscored —
    CVE-2008-3354 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the Newbb Plus (newbb_plus) module 0.93 in RunCMS 1.6.1 allow rem…

  • Unscored —
    CVE-2008-3323

    setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin …

  • Unscored —
    CVE-2008-3349

    Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote at…

  • Unscored —
    CVE-2008-3066

    Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlaye…

  • Unscored —
    CVE-2008-3355 Public exploit

    SQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-3351 Public exploit

    SQL injection vulnerability in atomPhotoBlog.php in Atom PhotoBlog 1.0.9.1 and 1.1.5b1 allows remote attackers to execu…

  • Unscored —
    CVE-2007-5400

    Heap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer 10.5 Build 6.0.12.148…

  • Unscored —
    CVE-2008-3344

    Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 tri…

  • Unscored —
    CVE-2008-3345 Public exploit

    SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition (tr) and 3.10…

  • Unscored —
    CVE-2008-3343 Public exploit

    SQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr (trial edition) allows r…

  • Unscored —
    CVE-2008-3347 Public exploit

    SQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial edition (tr) a…

  • Unscored —
    CVE-2008-3341

    Multiple SQL injection vulnerabilities in search_result.cfm in Jobbex JobSite allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-3339

    search_result.cfm in Jobbex JobSite allows remote attackers to obtain sensitive information via unspecified vectors tha…

  • Unscored —
    CVE-2008-3340

    Cross-site scripting (XSS) vulnerability in search_result.cfm in Jobbex JobSite allows remote attackers to inject arbit…

  • Unscored —
    CVE-2008-3348

    Cross-site scripting (XSS) vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3.0 trial e…

  • Unscored —
    CVE-2008-3342

    Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr allows remo…

  • Unscored —
    CVE-2008-3346 Public exploit

    SQL injection vulnerability in product_detail.php in ShopCart DX allows remote attackers to execute arbitrary SQL comma…