Skip to content
OpenAdvisories

Archive

17 October 2008

Vulnerabilities first published on this day (UTC), newest first.

← September 2008 2008 / October /17 November 2008 →
  1. 113
  2. 28
  3. 335
  4. 4 
  5. 5 
  6. 615
  7. 728
  8. 827
  9. 930
  10. 1017
  11. 11 
  12. 12 
  13. 1310
  14. 1457
  15. 1542
  16. 163
  17. 1717
  18. 18 
  19. 19 
  20. 2013
  21. 2147
  22. 2234
  23. 2340
  24. 2410
  25. 25 
  26. 26 
  27. 2716
  28. 2821
  29. 2917
  30. 3012
  31. 3128
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2008-4605 Public exploit

    SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id paramete…

  • Unscored —
    CVE-2008-4603 Public exploit

    SQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-4599 Public exploit

    SQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-4602 Public exploit

    Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and …

  • Unscored —
    CVE-2008-4601 Public exploit

    Cross-site scripting (XSS) vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arb…

  • Unscored —
    CVE-2008-4600 Public exploit

    configure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass authentication and gain…

  • Unscored —
    CVE-2008-4604 Public exploit

    SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-4606 Public exploit

    Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-4595

    Multiple unspecified vulnerabilities in Slaytanic Scripts Content Plus 2.1.1 have unknown impact and remote attack vect…

  • Unscored —
    CVE-2008-4597

    Shindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access, which allows remote atta…

    Web / CMS
  • Unscored —
    CVE-2008-4598

    Unspecified vulnerability in Shindig-Integrator 5.x, a module for Drupal, has unspecified impact and remote attack vect…

    Web / CMS
  • Unscored —
    CVE-2008-4596

    Cross-site scripting (XSS) vulnerability in Shindig-Integrator 5.x, a module for Drupal, allows remote authenticated us…

    Web / CMS
  • Unscored —
    CVE-2008-4594

    Unspecified vulnerability in the SNMPv3 component in Linksys WAP4400N firmware 1.2.14 on the Marvell Semiconductor 88W8…

  • Unscored —
    CVE-2008-4593

    Apple iPhone 2.1 with firmware 5F136, when Require Passcode is enabled and Show SMS Preview is disabled, allows physica…

  • Unscored —
    CVE-2008-4412

    Unspecified vulnerability in HP Systems Insight Manager (SIM) before 5.2 Update 2 (C.05.02.02.00) allows remote attacke…

  • Unscored —
    CVE-2008-4401

    ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with (1) the …

  • Unscored —
    CVE-2008-4473

    Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attacker…