Skip to content
OpenAdvisories

Archive

4 August 2008

Vulnerabilities first published on this day (UTC), newest first.

← July 2008 2008 / August /4 September 2008 →
  1. 122
  2. 2 
  3. 3 
  4. 427
  5. 58
  6. 623
  7. 710
  8. 821
  9. 9 
  10. 1024
  11. 1110
  12. 1226
  13. 1339
  14. 1420
  15. 156
  16. 16 
  17. 17 
  18. 1811
  19. 1913
  20. 2018
  21. 2118
  22. 2210
  23. 23 
  24. 24 
  25. 253
  26. 2611
  27. 2735
  28. 287
  29. 2911
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

27 results · Feed

  • Unscored —
    CVE-2008-3454 Public exploit

    JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by s…

  • Unscored —
    CVE-2008-3459

    Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote ser…

    openvpn Debian
  • Unscored —
    CVE-2008-3455 Public exploit

    PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attack…

  • Unscored —
    CVE-2008-3451

    PhpWebGallery 1.7.0 and 1.7.1 allows remote authenticated users with advisor privileges to obtain the real e-mail addre…

  • Unscored —
    CVE-2008-3453

    Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors, related to modules/admin…

  • Unscored —
    CVE-2008-3458

    Vtiger CRM before 5.0.4 stores sensitive information under the web root with insufficient access control, which allows …

  • Unscored —
    CVE-2008-3456

    phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains…

    phpmyadmin Debian
  • Unscored —
    CVE-2008-3452 Public exploit

    SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-3457

    Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers…

    phpmyadmin Debian
  • Unscored —
    CVE-2008-3450

    Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users to gain privileges…

  • Unscored —
    CVE-2008-3447 Public exploit

    The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop)…

  • Unscored —
    CVE-2008-3448 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in common solutions csphonebook 1.02 allows remote attackers to i…

  • Unscored —
    CVE-2008-3445 Public exploit

    SQL injection vulnerability in index.php in phpMyRealty (PMR) 2.0.0 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-3449

    MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service (crash) via multi…

  • Unscored —
    CVE-2008-3446 Public exploit

    Directory traversal vulnerability in inc/wysiwyg.php in LetterIt 2 allows remote attackers to include and execute arbit…

  • Unscored —
    CVE-2004-2760

    sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attem…

    openssh Debian
  • Unscored —
    CVE-2008-3444

    The content layout component in Mozilla Firefox 3.0 and 3.0.1 allows remote attackers to cause a denial of service (NUL…

  • Unscored —
    CVE-2003-1562

    sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication…

    openssh Debian
  • Medium —
    CVE-2008-1232 Public exploit EPSS 76%

    Apache Tomcat Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the Http…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2008-3423

    IBM WebSphere Portal 5.1 through 6.1.0.0 allows remote attackers to bypass authentication and obtain administrative acc…

  • Unscored —
    CVE-2008-2324

    The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file,…

  • Medium —
    CVE-2008-2370 Public exploit EPSS 53%

    Apache Tomcat Path Traversal Vulnerability

    Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attac…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2008-2321 Public exploit EPSS 12%

    Unspecified vulnerability in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-2322

    Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-2325

    QuickLook in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of s…

  • Unscored —
    CVE-2008-2323

    Unspecified vulnerability in Data Detectors Engine in Apple Mac OS X 10.5.4 allows attackers to cause a denial of servi…

  • Unscored —
    CVE-2008-2320

    Stack-based buffer overflow in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.4, iPhone OS 1.0 through 2.2.1, and iPhone…