Skip to content
OpenAdvisories

Archive

29 September 2008

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Unscored —
    CVE-2008-4323 Public exploit

    Windows Explorer in Microsoft Windows XP SP3 allows user-assisted attackers to cause a denial of service (application c…

  • Unscored —
    CVE-2008-4324 Public exploit

    The user interface event dispatcher in Mozilla Firefox 3.0.3 on Windows XP SP2 allows remote attackers to cause a denia…

  • Unscored —
    CVE-2008-4321 Public exploit

    Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long re…

  • Unscored —
    CVE-2008-4322 Public exploit EPSS 65%

    Stack-based buffer overflow in RealFlex Technologies Ltd. RealWin Server 2.0, as distributed by DATAC, allows remote at…

  • Unscored —
    CVE-2008-4318 Public exploit EPSS 14%

    Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the quer…

  • Unscored —
    CVE-2008-4320 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2008-4319 Public exploit

    fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass aut…

  • Unscored —
    CVE-2008-4192 Public exploit

    The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitr…

  • Unscored —
    CVE-2008-4210 Public exploit

    fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a f…

  • Unscored —
    CVE-2008-4120 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2008-4302 Public exploit

    fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_t…