Skip to content
OpenAdvisories

Archive

13 August 2008

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2008-3673 Public exploit

    SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-3674 Public exploit

    SQL injection vulnerability in ugroups.php in PozScripts TubeGuru Video Sharing Script allows remote attackers to execu…

  • Unscored —
    CVE-2008-3670 Public exploit

    SQL injection vulnerability in authordetail.php in Article Friendly Pro allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-3669 Public exploit

    SQL injection vulnerability in comments.php in ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script (a…

  • Unscored —
    CVE-2008-3672 Public exploit

    SQL injection vulnerability in showcategory.php in PozScripts Classified Ads allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-3667 Public exploit

    Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a …

  • Unscored —
    CVE-2008-3668 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote …

  • Unscored —
    CVE-2008-3656 Public exploit EPSS 70%

    Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFil…

  • Unscored —
    CVE-2008-3657 Public exploit EPSS 14%

    The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does…

  • Unscored —
    CVE-2008-3655 Public exploit EPSS 14%

    Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly res…

  • Unscored —
    CVE-2008-3649 Public exploit

    SQL injection vulnerability in categorydetail.php in Article Friendly Standard allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-2245 Public exploit EPSS 46%

    Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Manag…

  • Medium —
    CVE-2008-2938 Public exploit EPSS 100%

    Apache Tomcat Directory Traversal vulnerability

    Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the …