Skip to content
OpenAdvisories

Archive

September 2008

Vulnerabilities first published in this month (UTC), newest first.

← August 2008 2008 / September October 2008 →
  1. 1 
  2. 217
  3. 328
  4. 436
  5. 522
  6. 6 
  7. 7 
  8. 8 
  9. 914
  10. 1039
  11. 1119
  12. 126
  13. 13 
  14. 14 
  15. 1523
  16. 1625
  17. 1711
  18. 1818
  19. 1926
  20. 20 
  21. 21 
  22. 2218
  23. 2317
  24. 2431
  25. 257
  26. 2619
  27. 2716
  28. 28 
  29. 2917
  30. 3041
All Critical High Medium Low Exploited only Public exploit

450 results · Feed

  • Unscored —
    CVE-2008-4366 Public exploit

    Unrestricted file upload vulnerability in the image upload component in Camera Life 2.6.2b4 allows remote authenticated…

  • Unscored —
    CVE-2008-4361 Public exploit

    Directory traversal vulnerability in PowerPortal 2.0.13 allows remote attackers to list and possibly read arbitrary fil…

  • Unscored —
    CVE-2008-4362 Public exploit

    The Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (sys…

  • Unscored —
    CVE-2008-4365

    Cross-site scripting (XSS) vulnerability in search.php in Siteman 1.1.11 and earlier allows remote attackers to inject …

  • Unscored —
    CVE-2008-4364 Public exploit

    SQL injection vulnerability in default.aspx in ParsaGostar ParsaWeb CMS allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-4363 Public exploit

    DLMFENC.sys 1.0.0.28 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) or potentially ex…

  • Unscored —
    CVE-2008-4356 Public exploit

    Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-4349 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject …

  • Unscored —
    CVE-2008-4348

    SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2008-4350 Public exploit

    SQL injection vulnerability in main.php in vbLOGIX Tutorial Script 1.0 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2008-4355 Public exploit

    SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows …

  • Unscored —
    CVE-2008-4354 Public exploit

    SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arb…

  • Unscored —
    CVE-2008-4346 Public exploit

    Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrar…

  • Unscored —
    CVE-2008-4347 Public exploit

    SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-4357 Public exploit

    SQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-4358

    Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and att…

  • Unscored —
    CVE-2008-4352 Public exploit

    SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-4351 Public exploit

    Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitr…

  • Unscored —
    CVE-2008-4345 Public exploit

    SQL injection vulnerability in download.php in WebPortal CMS 0.7.4 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-4353 Public exploit

    SQL injection vulnerability in link.php in Linkarity allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2008-4339

    Unspecified vulnerability in the Java Administration GUI (jnbSA) in Symantec Veritas NetBackup Server and NetBackup Ent…

  • Unscored —
    CVE-2008-4330 Public exploit

    Directory traversal vulnerability in index.php in LanSuite 3.3.2 allows remote attackers to include and execute arbitra…

  • Unscored —
    CVE-2008-4333 Public exploit

    Cross-site scripting (XSS) vulnerability in PHP infoBoard V.7 Plus allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2008-4341 Public exploit

    add.php in MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication and gain administrative access by …

  • Unscored —
    CVE-2008-4335 Public exploit

    SQL injection vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to execute arbit…

  • High —
    CVE-2008-4094

    Rails ActiveRecord gem vulnerable to SQL injection

    Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) :limit and (2) :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer.

    rails activerecord Debian RubyGems
  • Unscored —
    CVE-2008-4336 Public exploit

    Cross-site scripting (XSS) vulnerability in album.php in Atomic Photo Album (APA) 1.1.0pre4 allows remote attackers to …

  • Unscored —
    CVE-2008-4334 Public exploit

    PHP infoBoard V.7 Plus allows remote attackers to bypass authentication and gain administrative access by setting the i…

  • Unscored —
    CVE-2008-4343 Public exploit

    The Chilkat XML ChilkatUtil.CkData.1 ActiveX control (ChilkatUtil.dll) 3.0.3.0 and earlier allows remote attackers to c…

  • Unscored —
    CVE-2008-4344 Public exploit

    SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the C…

  • Unscored —
    CVE-2008-4338

    SQL injection vulnerability in the brilliant_gallery_checklist_save function in the bgchecklist/save script in Brillian…

    Web / CMS
  • Unscored —
    CVE-2008-4329 Public exploit

    PHP remote file inclusion vulnerability in cms/system/openengine.php in openEngine 2.0 beta4 and earlier allows remote …

  • Unscored —
    CVE-2008-4337

    Cross-site scripting (XSS) vulnerability in Bitweaver 2.0.2 allows remote attackers to inject arbitrary web script or H…

  • Unscored —
    CVE-2008-4331 Public exploit

    Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attack…

  • Unscored —
    CVE-2008-4340 Public exploit

    Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service (memory consumption) via a…

  • Unscored —
    CVE-2008-4332 Public exploit

    SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers…

  • Unscored —
    CVE-2008-4328 Public exploit

    SQL injection vulnerability in site_search.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-4342 Public exploit EPSS 17%

    NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used…

  • Unscored —
    CVE-2008-4326

    The PMA_escapeJsString function in libraries/js_escape.lib.php in phpMyAdmin before 2.11.9.2, when Internet Explorer is…

    phpmyadmin Debian
  • Unscored —
    CVE-2008-4327 Public exploit EPSS 16%

    gdiplus.dll in GDI+ in Microsoft Windows XP SP3 does not properly handle crafted .ico files, which allows remote attack…