Skip to content
OpenAdvisories

Archive

September 2008

Vulnerabilities first published in this month (UTC), newest first.

← August 2008 2008 / September October 2008 →
  1. 1 
  2. 217
  3. 328
  4. 436
  5. 522
  6. 6 
  7. 7 
  8. 8 
  9. 914
  10. 1039
  11. 1119
  12. 126
  13. 13 
  14. 14 
  15. 1523
  16. 1625
  17. 1711
  18. 1818
  19. 1926
  20. 20 
  21. 21 
  22. 2218
  23. 2317
  24. 2431
  25. 257
  26. 2619
  27. 2716
  28. 28 
  29. 2917
  30. 3041
All Critical High Medium Low Exploited only Public exploit

178 results · Clear filters · Feed

  • Unscored —
    CVE-2008-3942 Public exploit

    SQL injection vulnerability in landsee.php in Full PHP Emlak Script allows remote attackers to execute arbitrary SQL co…

  • Medium 6.1
    CVE-2008-3937 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Open Media Collectors Database (OpenDb) 1.0.6 allow remote attac…

  • Unscored —
    CVE-2008-3944 Public exploit

    SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-3943 Public exploit

    SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-3922 Public exploit EPSS 53%

    awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequence…

  • Unscored —
    CVE-2008-3926 Public exploit

    Multiple directory traversal vulnerabilities in Content Management Made Easy (CMME) 1.12 allow remote attackers to (1) …

  • Unscored —
    CVE-2008-3924 Public exploit

    The "Make a backup" functionality in Content Management Made Easy (CMME) 1.12 stores sensitive information under the we…

  • Unscored —
    CVE-2008-3925 Public exploit

    Cross-site request forgery (CSRF) vulnerability in admin.php in Content Management Made Easy (CMME) 1.12 allows remote …

  • Unscored —
    CVE-2008-3917 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2008-3923 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in statistics.php in Content Management Made Easy (CMME) 1.12 allow…

  • Unscored —
    CVE-2008-3918 Public exploit

    SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-3906 Public exploit

    CRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject arbitrary HTTP header…

    mono Debian
  • Unscored —
    CVE-2008-3101 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2008-3892 Public exploit EPSS 24%

    Buffer overflow in a certain ActiveX control in the COM API in VMware Workstation 5.5.x before 5.5.8 build 108000, VMwa…

  • Unscored —
    CVE-2008-3877 Public exploit

    Stack-based buffer overflow in Acoustica Mixcraft 4.1 Build 96 and 4.2 Build 98 allows user-assisted attackers to execu…

  • Unscored —
    CVE-2008-3888 Public exploit

    SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-3879 Public exploit

    The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Cont…

  • Unscored —
    CVE-2008-3878 Public exploit EPSS 36%

    Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Sharewar…