Skip to content
OpenAdvisories

Archive

3 October 2008

Vulnerabilities first published on this day (UTC), newest first.

← September 2008 2008 / October /3 November 2008 →
  1. 113
  2. 28
  3. 335
  4. 4 
  5. 5 
  6. 615
  7. 728
  8. 827
  9. 930
  10. 1017
  11. 11 
  12. 12 
  13. 1310
  14. 1457
  15. 1542
  16. 163
  17. 1717
  18. 18 
  19. 19 
  20. 2013
  21. 2147
  22. 2234
  23. 2340
  24. 2410
  25. 25 
  26. 26 
  27. 2716
  28. 2821
  29. 2917
  30. 3012
  31. 3128
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Unscored —
    CVE-2008-4428 Public exploit

    Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier…

  • Unscored —
    CVE-2008-4437 Public exploit

    Directory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5, when --attach_path i…

  • Unscored —
    CVE-2008-4423 Public exploit

    SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-4424 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Domain Group Network GooCMS 1.02 allows remote attackers to in…

  • Unscored —
    CVE-2008-4438 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2008-4426 Public exploit

    Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows re…

  • Unscored —
    CVE-2008-4435 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the RMSOFT Downloads Plus (rmdp) module 1.5 and 1.7 for Xoops al…

  • Unscored —
    CVE-2008-4425 Public exploit

    Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote at…

  • Unscored —
    CVE-2008-4432 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attack…

  • Unscored —
    CVE-2008-4436 Public exploit

    SQL injection vulnerability in bblog_plugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-4427 Public exploit

    changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative a…

  • Unscored —
    CVE-2008-4439 Public exploit

    PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote…

  • Unscored —
    CVE-2008-4434 Public exploit EPSS 11%

    Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlie…

  • Unscored —
    CVE-2008-4405 Public exploit

    xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not prope…

  • Unscored —
    CVE-2008-4409 Public exploit

    libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-de…

  • Unscored —
    CVE-2008-3832 Public exploit

    A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5…

  • Unscored —
    CVE-2008-2439 Public exploit EPSS 20%

    Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in t…