Skip to content
OpenAdvisories

Archive

September 2008

Vulnerabilities first published in this month (UTC), newest first.

450 results · Feed

  • Unscored —

    Unspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote attackers to execute arbit…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2008-3879 Public exploit

    The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Cont…

  • Unscored —
    CVE-2008-3878 Public exploit EPSS 36%

    Stack-based buffer overflow in the Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 in Ultra Sharewar…

  • Unscored —

    Apple iPhone 2.0.2, in some configurations, allows physically proximate attackers to bypass intended access restriction…

  • Unscored —

    Unspecified vulnerability in HP Enterprise Discovery 2.0 through 2.52 on Windows allows remote authenticated users to e…

  • Unscored —

    Multiple buffer overflows in packet_ncp2222.inc in Wireshark (formerly Ethereal) 0.9.7 through 1.0.2 allow attackers to…

  • Unscored —

    The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and th…

  • Unscored —

    libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-depend…