Skip to content
OpenAdvisories

Archive

July 2008

Vulnerabilities first published in this month (UTC), newest first.

← June 2008 2008 / July August 2008 →
  1. 113
  2. 234
  3. 39
  4. 4 
  5. 5 
  6. 6 
  7. 757
  8. 815
  9. 943
  10. 1026
  11. 1112
  12. 12 
  13. 13 
  14. 1426
  15. 1554
  16. 169
  17. 1712
  18. 1830
  19. 19 
  20. 20 
  21. 2117
  22. 2212
  23. 23 
  24. 2417
  25. 2531
  26. 26 
  27. 2710
  28. 2822
  29. 295
  30. 3027
  31. 3139
All Critical High Medium Low Exploited only Public exploit

520 results · Feed

  • Unscored —
    CVE-2008-3256 Public exploit

    SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier,…

  • Unscored —
    CVE-2008-3259

    OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, whic…

  • Unscored —
    CVE-2008-3254 Public exploit

    SQL injection vulnerability in index.php in preCMS 1 allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2008-3252

    Stack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows remote attackers to execut…

  • Unscored —
    CVE-2008-3249

    The client in Lenovo System Update before 3.14 does not properly validate the certificate when establishing an SSL conn…

  • Unscored —
    CVE-2008-3250 Public exploit

    SQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-3251 Public exploit

    Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-3240 Public exploit

    SQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-3246

    Unspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in BlackBerry Unite! 1.0 …

  • Unscored —
    CVE-2008-3241 Public exploit

    SQL injection vulnerability in players-detail.php in UltraStats 0.2.136, 0.2.140, and 0.2.142 allows remote attackers t…

  • Unscored —
    CVE-2008-3235

    Unspecified vulnerability in the PropFilePasswordEncoder utility in the Security component in IBM WebSphere Application…

  • Unscored —
    CVE-2008-3237 Public exploit

    Cross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold allows remote attackers to inje…

  • Unscored —
    CVE-2008-3244

    The scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2008-3238 Public exploit

    Multiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-3243

    Multiple unspecified vulnerabilities in the scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allow remot…

  • Unscored —
    CVE-2008-3242 Public exploit EPSS 16%

    Heap-based buffer overflow in the PPMedia Class ActiveX control in PPMPlayer.dll in PPMate 2.3.1.93 allows remote attac…

  • Unscored —
    CVE-2008-3245 Public exploit

    SQL injection vulnerability in phpHoo3.php in phpHoo3 4.3.9, 4.3.10, 4.4.8, and 5.2.6 allows remote attackers to execut…

  • Unscored —
    CVE-2008-3236

    Unspecified vulnerability in Wsadmin in the System Management/Repository component in IBM WebSphere Application Server …

  • Unscored —
    CVE-2008-3187

    zypp-refresh-patches in zypper in SUSE openSUSE 10.2, 10.3, and 11.0 does not ask the user before accepting repository …

  • Unscored —
    CVE-2008-3239 Public exploit

    Unrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in PHPizabi 0.848b C1 HF…

  • Unscored —
    CVE-2008-3225

    Joomla! before 1.5.4 allows attackers to access administration functionality, which has unknown impact and attack vecto…

  • Unscored —
    CVE-2008-3214

    dnsmasq 2.25 allows remote attackers to cause a denial of service (daemon crash) by (1) renewing a nonexistent lease or…

    dnsmasq Debian
  • Unscored —
    CVE-2008-3233 Public exploit

    Cross-site scripting (XSS) vulnerability in WordPress before 2.6, SVN development versions only, allows remote attacker…

  • Unscored —
    CVE-2008-3230

    The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted G…

    ffmpeg Debian
  • Unscored —
    CVE-2008-3223

    SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-3232

    Unrestricted file upload vulnerability in ecrire/images.php in Dotclear 1.2.7.1 and earlier allows remote authenticated…

  • Unscored —
    CVE-2008-3219

    The Drupal filter_xss_admin function in 5.x before 5.8 and 6.x before 6.3 does not "prevent use of the object HTML tag …

  • Unscored —
    CVE-2008-3222

    Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules "terminate the cur…

  • Unscored —
    CVE-2008-3220

    Cross-site request forgery (CSRF) vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3 allows remote attackers to …

  • Unscored —
    CVE-2008-3231

    xine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted OGG file, as demonstr…

  • Unscored —
    CVE-2008-3224

    Unspecified vulnerability in phpBB before 3.0.1 has unknown impact and attack vectors related to "urls gone through red…

  • Unscored —
    CVE-2008-3234 Public exploit

    sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain a…

    openssh Debian
  • Unscored —
    CVE-2008-3217

    PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, whi…

    pdns-recursor Debian
  • Unscored —
    CVE-2008-3221

    Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrat…

  • Medium —
    CVE-2008-3218

    Drupal vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) un…

    drupal/drupal Packagist
  • Unscored —
    CVE-2008-3216

    The save function in br/prefmanager.d in projectl 1.001 creates a projectL.prf file in the current working directory, w…

    projectl Debian
  • Medium —
    CVE-2008-3228

    Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs

    Joomla! before 1.5.4 does not configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs, which has unknown impact and remote attack vectors.

    joomla/joomla-platform Packagist
  • High —
    CVE-2008-3227

    Joomla! Open Redirect vulnerability

    Unspecified vulnerability in Joomla! before 1.5.4 has unknown impact and attack vectors related to a "User Redirect Spam fix," possibly an open redirect vulnerability.

    joomla/framework Packagist
  • Unscored —
    CVE-2008-3229

    Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privi…

  • Medium —
    CVE-2008-3226

    Joomla! allows attackers to access cached pages

    The file caching implementation in Joomla! before 1.5.4 allows attackers to access cached pages via unknown attack vectors.

    joomla/joomla-platform Packagist