Skip to content
OpenAdvisories

Archive

September 2008

Vulnerabilities first published in this month (UTC), newest first.

← August 2008 2008 / September October 2008 →
  1. 1 
  2. 217
  3. 328
  4. 436
  5. 522
  6. 6 
  7. 7 
  8. 8 
  9. 914
  10. 1039
  11. 1119
  12. 126
  13. 13 
  14. 14 
  15. 1523
  16. 1625
  17. 1711
  18. 1818
  19. 1926
  20. 20 
  21. 21 
  22. 2218
  23. 2317
  24. 2431
  25. 257
  26. 2619
  27. 2716
  28. 28 
  29. 2917
  30. 3041
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High —
    CVE-2008-4094

    Rails ActiveRecord gem vulnerable to SQL injection

    Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) :limit and (2) :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer.

    rails activerecord Debian RubyGems
  • High 8.1
    CVE-2008-4128 Exploited Public exploit EPSS 34%

    Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on th…

    KEV Jul 13, 2026
  • High 8.8
    CVE-2008-3938

    Cross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors Database (OpenDb) 1.0.6 allo…

  • High 7.5
    CVE-2008-3939

    Directory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7 allows remote attackers …

  • High 7.5
    CVE-2008-3909

    Django cross-site request forgery (CSRF) vulnerability

    The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or…

    python-django django Debian PyPI