Skip to content
OpenAdvisories

Archive

July 2008

Vulnerabilities first published in this month (UTC), newest first.

← June 2008 2008 / July August 2008 →
  1. 113
  2. 234
  3. 39
  4. 4 
  5. 5 
  6. 6 
  7. 757
  8. 815
  9. 943
  10. 1026
  11. 1112
  12. 12 
  13. 13 
  14. 1426
  15. 1554
  16. 169
  17. 1712
  18. 1830
  19. 19 
  20. 20 
  21. 2117
  22. 2212
  23. 23 
  24. 2417
  25. 2531
  26. 26 
  27. 2710
  28. 2822
  29. 295
  30. 3027
  31. 3139
All Critical High Medium Low Exploited only Public exploit

520 results · Feed

  • Unscored —
    CVE-2008-3386 Public exploit

    SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute a…

  • Unscored —
    CVE-2008-3385 Public exploit

    Directory traversal vulnerability in include/head_chat.inc.php in php Help Agent 1.0 and 1.1 Full allows remote attacke…

  • Medium 6.1
    CVE-2008-3381

    MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    moin PyPI
  • Unscored —
    CVE-2008-3387 Public exploit

    SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-3383 Public exploit

    SQL injection vulnerability in mojoAuto.cgi in MojoAuto allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2008-3384 Public exploit

    Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1…

  • Unscored —
    CVE-2008-3382 Public exploit

    SQL injection vulnerability in mojoClassified.cgi in MojoClassifieds 2.0 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-3380 Public exploit

    Cross-site scripting (XSS) vulnerability in ajaxp_backend.php in MyioSoft EasyBookMarker 4.0 trial edition (tr) allows …

  • Unscored —
    CVE-2008-3378 Public exploit

    SQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-3372 Public exploit

    SQL injection vulnerability in search_form.php in Getacoder Clone allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-3371 Public exploit

    Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remo…

  • Unscored —
    CVE-2008-3369 Public exploit

    SQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-3379

    Cross-site scripting (XSS) vulnerability in Snark VisualPic 0.3.1 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2008-3377 Public exploit

    SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-3368 Public exploit

    PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote auth…

  • Unscored —
    CVE-2008-3367

    Cross-site scripting (XSS) vulnerability in RTE_popup_link.asp in Web Wiz Rich Text Editor (RTE) 3.x and 4.x before 4.0…

  • Unscored —
    CVE-2008-3370 Public exploit

    SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access (CUA) 4.0_4735.p4 allows remote att…

  • Unscored —
    CVE-2008-3376

    Multiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors.

  • Unscored —
    CVE-2008-3373

    The files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2008-3365 Public exploit

    Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows …

  • Unscored —
    CVE-2008-3375 Public exploit

    The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authen…

  • Unscored —
    CVE-2008-3374 Public exploit

    SQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-3366 Public exploit

    SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-3362 Public exploit EPSS 17%

    Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress …

  • Unscored —
    CVE-2008-3364 Public exploit EPSS 33%

    Buffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020 in Trend Micro Office…

  • Unscored —
    CVE-2008-3363 Public exploit

    Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote att…

  • Unscored —
    CVE-2008-1667

    The Probe Builder Service (aka PBOVISServer.exe) in European Performance Systems (EPS) Probe Builder 2.2 before A.02.20…

  • Unscored —
    CVE-2008-3360 Public exploit

    Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2008-3100 Public exploit

    Cross-site scripting (XSS) vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledge…

  • Unscored —
    CVE-2008-3361 Public exploit

    Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Ser…

  • Unscored —
    CVE-2008-3359

    SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and ea…

  • Unscored —
    CVE-2008-1946

    The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a …

    coreutils Debian
  • Unscored —
    CVE-2008-3064

    Unspecified vulnerability in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10.5 before build 6.0.12…

  • Unscored —
    CVE-2008-3353

    Multiple cross-site scripting (XSS) vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject…

  • Unscored —
    CVE-2008-3352 Public exploit

    SQL injection vulnerability in index.php in Live Music Plus 1.1.0 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2008-3350

    dnsmasq 2.43 allows remote attackers to cause a denial of service (daemon crash) by (1) sending a DHCPINFORM while lack…

    dnsmasq Debian
  • Unscored —
    CVE-2008-3354 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the Newbb Plus (newbb_plus) module 0.93 in RunCMS 1.6.1 allow rem…

  • Unscored —
    CVE-2008-3323

    setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which allows remote Cygwin …

  • Unscored —
    CVE-2008-3349

    Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote at…

  • Unscored —
    CVE-2008-3066

    Stack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer Enterprise, RealPlaye…