Skip to content
OpenAdvisories

Archive

9 October 2008

Vulnerabilities first published on this day (UTC), newest first.

← September 2008 2008 / October /9 November 2008 →
  1. 113
  2. 28
  3. 335
  4. 4 
  5. 5 
  6. 615
  7. 728
  8. 827
  9. 930
  10. 1017
  11. 11 
  12. 12 
  13. 1310
  14. 1457
  15. 1542
  16. 163
  17. 1717
  18. 18 
  19. 19 
  20. 2013
  21. 2147
  22. 2234
  23. 2340
  24. 2410
  25. 25 
  26. 26 
  27. 2716
  28. 2821
  29. 2917
  30. 3012
  31. 3128
All Critical High Medium Low Exploited only Public exploit

30 results · Feed

  • Unscored —
    CVE-2008-4530

    Cross-site scripting (XSS) vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote au…

    Web / CMS
  • Unscored —
    CVE-2008-4520

    Cross-site scripting (XSS) vulnerability in bulk_update.pl in AutoNessus before 1.2.2 allows remote attackers to inject…

  • Unscored —
    CVE-2008-4518 Public exploit

    Multiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d (1.9999 d) allow remote attackers to execute arbi…

  • Unscored —
    CVE-2008-4528 Public exploit

    Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM) 1.01 allows remote at…

  • Unscored —
    CVE-2008-4531

    SQL injection vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote attackers to ex…

    Web / CMS
  • Unscored —
    CVE-2008-4526 Public exploit

    Multiple directory traversal vulnerabilities in CCMS 3.1 allow remote attackers to include and execute arbitrary local …

  • Unscored —
    CVE-2008-4527 Public exploit

    SQL injection vulnerability in recept.php in the Recepies (Recept) module 1.1 for PHP-Fusion allows remote attackers to…

  • Unscored —
    CVE-2008-4525 Public exploit

    SQL injection vulnerability in index.php in AmpJuke 0.7.5 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-4519 Public exploit

    Multiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers to include and execute …

  • Unscored —
    CVE-2008-4522 Public exploit

    Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers…

  • Unscored —
    CVE-2008-4521 Public exploit

    SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion (raidtracker_panel) modul…

  • Unscored —
    CVE-2008-4529 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2008-4517 Public exploit

    SQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-4523 Public exploit

    SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-4532 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in MaxiScript Website Directory allows remote attackers to inject…

  • High —
    CVE-2008-4524 Public exploit

    AdaptCMS SQL Injection vulnerability

    SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name parameter.

    adaptcms/adaptcms Packagist
  • Unscored —
    CVE-2008-4513

    Cross-site scripting (XSS) vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2008-4506

    Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) allows a place manager to "demote or dele…

  • Unscored —
    CVE-2008-4514 Public exploit

    The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via a f…

  • Unscored —
    CVE-2008-4504

    Heap-based buffer overflow in Mplayer.exe in Herosoft Inc. Hero DVD Player 3.0.8 allows user-assisted remote attackers …

  • Unscored —
    CVE-2008-4508 Public exploit

    Stack-based buffer overflow in the file parsing function in Tonec Internet Download Manager, possibly 5.14 and earlier,…

  • Unscored —
    CVE-2008-4509 Public exploit

    Unrestricted file upload vulnerability in processFiles.php in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta allow…

  • Unscored —
    CVE-2008-4512

    ASP/MS Access Shoutbox, probably 1.1 beta, stores db/shoutdb.mdb under the web root with insufficient access control, w…

  • Unscored —
    CVE-2008-4515

    Blue Coat K9 Web Protection 4.0.230 Beta relies on client-side JavaScript as a protection mechanism, which allows remot…

  • Unscored —
    CVE-2008-4516 Public exploit

    SQL injection vulnerability in galerie.php in Galerie 3.2 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2008-4507

    Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) allows editors to delete pages that were …

  • Unscored —
    CVE-2008-4511

    Todd Woolums ASP News Management, possibly 2.21, stores db/news.mdb under the web root with insufficient access control…

  • Unscored —
    CVE-2008-4505

    Unspecified vulnerability in IBM Lotus Quickr 8.1 before Fix pack 1 (8.1.0.1) might allow attackers to cause a denial o…

  • Unscored —
    CVE-2008-4503

    The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingl…

  • Unscored —
    CVE-2008-4510 Public exploit

    Microsoft Windows Vista Home and Ultimate Edition SP1 and earlier allows local users to cause a denial of service (page…