Skip to content
OpenAdvisories

Archive

18 September 2008

Vulnerabilities first published on this day (UTC), newest first.

← August 2008 2008 / September /18 October 2008 →
  1. 1 
  2. 217
  3. 328
  4. 436
  5. 522
  6. 6 
  7. 7 
  8. 8 
  9. 914
  10. 1039
  11. 1119
  12. 126
  13. 13 
  14. 14 
  15. 1523
  16. 1625
  17. 1711
  18. 1818
  19. 1926
  20. 20 
  21. 21 
  22. 2218
  23. 2317
  24. 2431
  25. 257
  26. 2619
  27. 2716
  28. 28 
  29. 2917
  30. 3041
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • High 8.1
    CVE-2008-4128 Exploited Public exploit EPSS 34%

    Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on th…

    KEV Jul 13, 2026
  • Unscored —
    CVE-2008-4129

    Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing symbolic links, which allo…

  • Unscored —
    CVE-2008-4130

    Cross-site scripting (XSS) vulnerability in Gallery 2.x before 2.2.6 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2008-3662

    Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, wh…

  • Unscored —
    CVE-2008-2470

    The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2008-4125

    The search function in phpBB 2.x provides a search_id value that leaks the state of PHP's PRNG, which allows remote att…

  • Unscored —
    CVE-2008-4107

    The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allow…

  • Unscored —
    CVE-2008-4103

    The mailto (aka com_mailto) component in Joomla! 1.5 before 1.5.7 sends e-mail messages without validating the URL, whi…

  • Unscored —
    CVE-2008-4099

    PyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or transaction IDs for DNS r…

  • Unscored —
    CVE-2008-4126

    PyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for DNS requests and does no…

  • Unscored —
    CVE-2008-4106

    WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maxi…

    wordpress Debian
  • Unscored —
    CVE-2008-4102

    Joomla! 1.5 before 1.5.7 initializes PHP's PRNG with a weak seed, which makes it easier for attackers to guess the pseu…

  • Unscored —
    CVE-2008-4127 EPSS 16%

    Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers…

  • Unscored —
    CVE-2008-4100

    GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easie…

    adns Debian
  • Unscored —
    CVE-2008-4101 Public exploit

    Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) exe…

    vim Debian
  • Unscored —
    CVE-2008-4108

    Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow local users to overwri…

    python-defaults Debian
  • Medium —
    CVE-2008-4104

    Joomla! Open Redirect vulnerability

    Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a "passed in" URL.

    joomla/framework Packagist
  • Unscored —
    CVE-2008-4105

    JRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest::setVar, which allows remo…