Skip to content
OpenAdvisories

Archive

15 October 2008

Vulnerabilities first published on this day (UTC), newest first.

← September 2008 2008 / October /15 November 2008 →
  1. 113
  2. 28
  3. 335
  4. 4 
  5. 5 
  6. 615
  7. 728
  8. 827
  9. 930
  10. 1017
  11. 11 
  12. 12 
  13. 1310
  14. 1457
  15. 1542
  16. 163
  17. 1717
  18. 18 
  19. 19 
  20. 2013
  21. 2147
  22. 2234
  23. 2340
  24. 2410
  25. 25 
  26. 26 
  27. 2716
  28. 2821
  29. 2917
  30. 3012
  31. 3128
All Critical High Medium Low Exploited only Public exploit

42 results · Feed

  • Unscored —
    CVE-2008-4587 Public exploit EPSS 11%

    Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100…

  • Unscored —
    CVE-2008-4585

    Belong Software Site Builder 0.1 beta allows remote attackers to bypass intended access restrictions and perform admini…

  • Unscored —
    CVE-2008-4589

    Heap-based buffer overflow in the tvtumin.sys kernel driver in Lenovo Rescue and Recovery 4.20, including 4.20.0511 and…

  • Unscored —
    CVE-2008-4588 Public exploit

    Stack-based buffer overflow in the FTP server in Etype Eserv 3.x, possibly 3.26, allows remote attackers to cause a den…

  • Unscored —
    CVE-2008-4583 Public exploit

    Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll) allows remote attackers to ove…

  • Unscored —
    CVE-2008-4586 Public exploit

    Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Mac…

  • Unscored —
    CVE-2008-4584 Public exploit

    Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrit…

  • Unscored —
    CVE-2008-4579

    The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running …

  • Unscored —
    CVE-2008-4580

    fence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink…

  • Unscored —
    CVE-2008-4581

    The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated user…

  • Unscored —
    CVE-2008-4577

    The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allow…

    dovecot Debian
  • Unscored —
    CVE-2008-4582 Public exploit EPSS 10%

    Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Wind…

  • Unscored —
    CVE-2008-4578

    The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right t…

    dovecot Debian
  • Unscored —
    CVE-2008-4553

    qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink…

    qemu Debian
  • Unscored —
    CVE-2008-4554

    The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have…

  • Unscored —
    CVE-2008-4576

    sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that …

  • Unscored —
    CVE-2008-4575

    Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denia…

    jhead Debian
  • Unscored —
    CVE-2008-4574 Public exploit

    SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-4572 Public exploit EPSS 61%

    GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possi…

  • Unscored —
    CVE-2008-4569 Public exploit

    SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers t…

  • Unscored —
    CVE-2008-4570 Public exploit

    SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL co…

  • Medium —
    CVE-2008-4571

    Plone Cross-site Scripting vulnerability in the LiveSearch module

    Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG ta…

    plone PyPI
  • Unscored —
    CVE-2008-4573 Public exploit

    SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-1446 EPSS 46%

    Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (II…

  • Unscored —
    CVE-2008-4038 EPSS 39%

    Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server…

  • High 8.4
    CVE-2008-4036

    Integer overflow in Memory Manager in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, an…

  • Unscored —
    CVE-2008-4023 EPSS 39%

    Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, w…

  • Unscored —
    CVE-2008-4019 EPSS 34%

    Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; O…

  • Unscored —
    CVE-2008-4020 EPSS 24%

    Cross-site scripting (XSS) vulnerability in Microsoft Office XP SP3 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2008-3466 Public exploit EPSS 78%

    Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, whi…

  • Unscored —
    CVE-2008-3477 EPSS 36%

    Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache w…

  • Unscored —
    CVE-2008-3476 EPSS 31%

    Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle errors associated with access to uninitialized memo…

  • Unscored —
    CVE-2008-3473 EPSS 32%

    Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, wh…

  • Unscored —
    CVE-2008-3472 EPSS 33%

    Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, wh…

  • Unscored —
    CVE-2008-3479 EPSS 44%

    Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 al…

  • Medium 6.5
    CVE-2008-3474 EPSS 28%

    Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, wh…

  • Unscored —
    CVE-2008-3471 EPSS 52%

    Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Exce…

  • Unscored —
    CVE-2008-3475 EPSS 40%

    Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml obj…

  • Unscored —
    CVE-2008-3464 Public exploit

    afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP…

  • Unscored —
    CVE-2008-2252

    The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 …