Skip to content
OpenAdvisories

Archive

20 October 2008

Vulnerabilities first published on this day (UTC), newest first.

13 results · Feed

  • Unscored —

    The Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27 does not properly hand…

  • Unscored —
    CVE-2008-4619 Public exploit EPSS 12%

    The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted re…

  • Unscored —
    CVE-2008-4617 Public exploit

    SQL injection vulnerability in the actualite module 1.0 for Joomla! allows remote attackers to execute arbitrary SQL co…

  • Unscored —

    Unspecified vulnerability in i_utils.asp in PortalApp before 4.01a has unknown impact and attack vectors.

  • Unscored —
    CVE-2008-4612 Public exploit

    Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTM…

  • Unscored —
    CVE-2008-4613 Public exploit

    SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-4616 Public exploit

    The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-s…

  • Unscored —
    CVE-2008-4614 Public exploit

    PortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which allows remote attackers to …

  • Unscored —
    CVE-2008-4611 Public exploit

    SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-4610 Public exploit

    MPlayer allows remote attackers to cause a denial of service (application crash) via (1) a malformed AAC file, as demon…

  • Unscored —
    CVE-2008-4609 Public exploit EPSS 32%

    The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and pr…

  • Unscored —

    The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux and (2) sys/dev/pci/d…

  • Unscored —

    MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and application crash) via (1) …