Skip to content
OpenAdvisories

Archive

28 October 2008

Vulnerabilities first published on this day (UTC), newest first.

← September 2008 2008 / October /28 November 2008 →
  1. 113
  2. 28
  3. 335
  4. 4 
  5. 5 
  6. 615
  7. 728
  8. 827
  9. 930
  10. 1017
  11. 11 
  12. 12 
  13. 1310
  14. 1457
  15. 1542
  16. 163
  17. 1717
  18. 18 
  19. 19 
  20. 2013
  21. 2147
  22. 2234
  23. 2340
  24. 2410
  25. 25 
  26. 26 
  27. 2716
  28. 2821
  29. 2917
  30. 3012
  31. 3128
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Unscored —
    CVE-2008-4772 Public exploit

    SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2008-4775 Public exploit

    Cross-site scripting (XSS) vulnerability in pmd_pdf.php in phpMyAdmin 3.0.0, and possibly other versions including 2.11…

    phpmyadmin Debian
  • Unscored —
    CVE-2008-4773 Public exploit

    Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files vi…

  • Unscored —
    CVE-2008-4774 Public exploit

    Cross-site scripting (XSS) vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2008-4771 Public exploit

    Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class (VATDecoder.dll 1.0.0.27 …

  • Unscored —
    CVE-2008-4769 Public exploit

    Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and…

    wordpress Debian
  • Unscored —
    CVE-2008-4767 Public exploit

    Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-4768 Public exploit

    SQL injection vulnerability in TLM CMS 3.1 allows remote attackers to execute arbitrary SQL commands via the nom parame…

  • Unscored —
    CVE-2008-4764 Public exploit Scanner template EPSS 17%

    Directory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0 RC2 and earlier in Joomla! allows remot…

  • Unscored —
    CVE-2008-4765 Public exploit

    SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arb…

  • Unscored —
    CVE-2008-4760 Public exploit

    SQL injection vulnerability in lecture.php in Graphiks MyForum 1.3, when register_globals is enabled, allows remote att…

  • Unscored —
    CVE-2008-4758 Public exploit

    Directory traversal vulnerability in download_file.php in PHP-Daily allows remote attackers to read arbitrary local fil…

  • Unscored —
    CVE-2008-4755 Public exploit

    SQL injection vulnerability in gotourl.php in PozScripts Classified Auctions Script allows remote attackers to execute …

  • Unscored —
    CVE-2008-4757 Public exploit

    Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the (1…

  • Unscored —
    CVE-2008-4761 Public exploit

    Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3…

  • Unscored —
    CVE-2008-4756 Public exploit

    Cross-site scripting (XSS) vulnerability in add_prest_date.php in PHP-Daily allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2008-4762 Public exploit EPSS 14%

    Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service (service c…

  • Unscored —
    CVE-2008-4759 Public exploit

    Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local fi…