Skip to content
OpenAdvisories

Archive

23 October 2008

Vulnerabilities first published on this day (UTC), newest first.

← September 2008 2008 / October /23 November 2008 →
  1. 113
  2. 28
  3. 335
  4. 4 
  5. 5 
  6. 615
  7. 728
  8. 827
  9. 930
  10. 1017
  11. 11 
  12. 12 
  13. 1310
  14. 1457
  15. 1542
  16. 163
  17. 1717
  18. 18 
  19. 19 
  20. 2013
  21. 2147
  22. 2234
  23. 2340
  24. 2410
  25. 25 
  26. 26 
  27. 2716
  28. 2821
  29. 2917
  30. 3012
  31. 3128
All Critical High Medium Low Exploited only Public exploit

27 results · Clear filters · Feed

  • Unscored —
    CVE-2008-4729 Public exploit

    Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Con…

  • Unscored —
    CVE-2008-4728 Public exploit EPSS 32%

    Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 i…

  • Unscored —
    CVE-2008-4727 Public exploit

    Cross-site scripting (XSS) vulnerability in the contact update page (ss/bwgkoemr.P_UpdateEmrgContacts) in SunGard Banne…

  • Unscored —
    CVE-2008-4726 Public exploit EPSS 44%

    Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbi…

  • Critical 9.8
    CVE-2008-4250 Exploited Public exploit EPSS 99%

    The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2…

    KEV May 20, 2026
  • Unscored —
    CVE-2008-4696 Public exploit EPSS 46%

    Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-4694 Public exploit

    Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash)…

  • Unscored —
    CVE-2008-4725 Public exploit

    Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2008-2469 Public exploit EPSS 22%

    Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows rem…

    libspf2 Debian
  • Unscored —
    CVE-2008-4720 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in The Gemini Portal 4.7 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-4719 Public exploit

    PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when register_g…

  • Unscored —
    CVE-2008-4716 Public exploit

    SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-4721 Public exploit

    PHP Jabbers Post Comment 3.0 allows remote attackers to bypass authentication and gain administrative access by setting…

  • Unscored —
    CVE-2008-4718 Public exploit

    Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include a…

  • Unscored —
    CVE-2008-4717 Public exploit

    SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2008-4704 Public exploit

    PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-4714 Public exploit

    Atomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and apa_cookie_password cookies, which prob…

  • Unscored —
    CVE-2008-4709 Public exploit

    SQL injection vulnerability in news_read.php in Pilot Group (PG) eTraining allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-4705 Public exploit

    SQL injection vulnerability in success_story.php in php Online Dating Software MyPHPDating allows remote attackers to e…

  • Unscored —
    CVE-2008-4712 Public exploit

    Directory traversal vulnerability in pages/showblog.php in LnBlog 0.9.0 and earlier, when magic_quotes_gpc is disabled,…

  • Unscored —
    CVE-2008-4706 Public exploit

    SQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows remote attackers to execut…

  • Unscored —
    CVE-2008-4707 Public exploit

    Directory traversal vulnerability in index.php in BbZL.PhP 0.92 allows remote attackers to access unauthorized director…

  • Unscored —
    CVE-2008-4711 Public exploit

    SQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to e…

  • Unscored —
    CVE-2008-4713 Public exploit

    SQL injection vulnerability in view.php in 212cafe Board 0.07 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-4703 Public exploit

    SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-4715 Public exploit

    SQL injection vulnerability in the Jpad (com_jpad) 1.0 component for Joomla! allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-4708 Public exploit

    BbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by setting the phorum_adm…