Archive
23 October 2008
Vulnerabilities first published on this day (UTC), newest first.
40 results · Feed
-
Unscored —CVE-2008-4729 Public exploit
Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Con…
-
Unscored —
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 i…
-
Unscored —CVE-2008-4727 Public exploit
Cross-site scripting (XSS) vulnerability in the contact update page (ss/bwgkoemr.P_UpdateEmrgContacts) in SunGard Banne…
-
Unscored —
Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome 0.2.149.30 allow remote attackers to inject arbitr…
-
Unscored —
Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to creat…
-
Unscored —
Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicti…
-
Unscored —
The Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a javascript: URL in the con…
-
Unscored —
Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26 allows remote authentica…
-
Critical 9.8
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2…
KEV May 20, 2026 -
Unscored —
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 3.0.1 through 3.0.3 allow remote attackers to in…
-
Unscored —CVE-2008-4694 Public exploit
Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash)…
-
Unscored —CVE-2008-4725 Public exploit
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web scr…
-
Unscored —
Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, wh…
-
Unscored —
Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2(4)9 a…
-
Unscored —
Memory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 8.0 before 8.0(4) and 8…
-
Unscored —CVE-2008-3862 EPSS 18%
Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other bu…
-
Unscored —
Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 befor…
-
Unscored —
Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows rem…
-
Unscored —
The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.6…
-
Unscored —CVE-2008-4720 Public exploit
Multiple PHP remote file inclusion vulnerabilities in The Gemini Portal 4.7 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2008-4719 Public exploit
PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when register_g…
-
Unscored —CVE-2008-4716 Public exploit
SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2008-4721 Public exploit
PHP Jabbers Post Comment 3.0 allows remote attackers to bypass authentication and gain administrative access by setting…
-
Unscored —CVE-2008-4718 Public exploit
Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include a…
-
Unscored —CVE-2008-4717 Public exploit
SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2008-4704 Public exploit
PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute ar…
-
Unscored —CVE-2008-4714 Public exploit
Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and apa_cookie_password cookies, which prob…
-
Unscored —CVE-2008-4709 Public exploit
SQL injection vulnerability in news_read.php in Pilot Group (PG) eTraining allows remote attackers to execute arbitrary…
-
Unscored —CVE-2008-4705 Public exploit
SQL injection vulnerability in success_story.php in php Online Dating Software MyPHPDating allows remote attackers to e…
-
Unscored —CVE-2008-4712 Public exploit
Directory traversal vulnerability in pages/showblog.php in LnBlog 0.9.0 and earlier, when magic_quotes_gpc is disabled,…
-
Unscored —CVE-2008-4706 Public exploit
SQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows remote attackers to execut…
-
Unscored —CVE-2008-4707 Public exploit
Directory traversal vulnerability in index.php in BbZL.PhP 0.92 allows remote attackers to access unauthorized director…
-
Unscored —CVE-2008-4711 Public exploit
SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to e…
-
Unscored —CVE-2008-4713 Public exploit
SQL injection vulnerability in view.php in 212cafe Board 0.07 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2008-4703 Public exploit
SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the stock quotes page in Stock 6.x before 6.x-1.0, a module for Drupal, all…
-
Unscored —CVE-2008-4715 Public exploit
SQL injection vulnerability in the Jpad (com_jpad) 1.0 component for Joomla! allows remote attackers to execute arbitra…
-
Unscored —CVE-2008-4708 Public exploit
BbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by setting the phorum_adm…