Skip to content
OpenAdvisories

Archive

24 October 2008

Vulnerabilities first published on this day (UTC), newest first.

← September 2008 2008 / October /24 November 2008 →
  1. 113
  2. 28
  3. 335
  4. 4 
  5. 5 
  6. 615
  7. 728
  8. 827
  9. 930
  10. 1017
  11. 11 
  12. 12 
  13. 1310
  14. 1457
  15. 1542
  16. 163
  17. 1717
  18. 18 
  19. 19 
  20. 2013
  21. 2147
  22. 2234
  23. 2340
  24. 2410
  25. 25 
  26. 26 
  27. 2716
  28. 2821
  29. 2917
  30. 3012
  31. 3128
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Unscored —
    CVE-2008-4731

    Multiple unspecified vulnerabilities in YaCy before 0.61 have unknown impact and attack vectors.

  • Unscored —
    CVE-2008-4739 Public exploit

    Directory traversal vulnerability in index.php in PlugSpace 0.1, when magic_quotes_gpc is disabled, allows remote attac…

  • Unscored —
    CVE-2008-4738 Public exploit

    SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-4732 Public exploit

    SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remot…

  • Unscored —
    CVE-2008-4733

    Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress al…

  • Unscored —
    CVE-2008-4734

    Cross-site request forgery (CSRF) vulnerability in the wpcr_do_options_page function in WP Comment Remix plugin before …

  • Unscored —
    CVE-2008-4736 Public exploit

    SQL injection vulnerability in index.php in RPG.Board 0.8 Beta2 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-4735 Public exploit

    PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system (CoAST) 0.95 allows…

  • Unscored —
    CVE-2008-4730

    Cross-site scripting (XSS) vulnerability in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2008-4737 Public exploit

    Cross-site scripting (XSS) vulnerability in wholite.cgi in WhoDomLite 1.1.3 allows remote attackers to inject arbitrary…