Skip to content
OpenAdvisories

Archive

29 October 2008

Vulnerabilities first published on this day (UTC), newest first.

← September 2008 2008 / October /29 November 2008 →
  1. 113
  2. 28
  3. 335
  4. 4 
  5. 5 
  6. 615
  7. 728
  8. 827
  9. 930
  10. 1017
  11. 11 
  12. 12 
  13. 1310
  14. 1457
  15. 1542
  16. 163
  17. 1717
  18. 18 
  19. 19 
  20. 2013
  21. 2147
  22. 2234
  23. 2340
  24. 2410
  25. 25 
  26. 26 
  27. 2716
  28. 2821
  29. 2917
  30. 3012
  31. 3128
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2008-4790

    The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictio…

  • Unscored —
    CVE-2008-4788

    Microsoft Internet Explorer 6 omits high-bit URL-encoded characters when displaying the address bar, which allows remot…

  • Unscored —
    CVE-2008-4789

    The validation functionality in the core upload module in Drupal 6.x before 6.5 allows remote authenticated users to by…

  • Unscored —
    CVE-2008-4787 Public exploit EPSS 14%

    Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a…

  • Unscored —
    CVE-2008-4792

    The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fie…

  • High —
    CVE-2008-4793

    Drupal Node Validation Bypass in the node module API

    The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have unspecified other impact via unknown vectors related to contributed modules.

    drupal/drupal Packagist
  • Unscored —
    CVE-2008-4791

    The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might allow remote authenticated users to bypass intended …

  • Unscored —
    CVE-2008-4785 Public exploit

    SQL injection vulnerability in newuser.php in the alternate_profiles plugin, possibly 0.2, for e107 allows remote attac…

  • Unscored —
    CVE-2008-4786 Public exploit

    SQL injection vulnerability in easyshop.php in the EasyShop plugin for e107 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-4778 Public exploit

    SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-4779 Public exploit EPSS 65%

    Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary…

  • Unscored —
    CVE-2008-4781 Public exploit

    Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrar…

  • Unscored —
    CVE-2008-4783 Public exploit

    tlAds 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the tlAds_login co…

  • Unscored —
    CVE-2008-4782 Public exploit

    SQL injection vulnerability in public/code/cp_polls_results.php in All In One Control Panel (AIOCP) 1.4 allows remote a…

  • Unscored —
    CVE-2008-4780 Public exploit

    Directory traversal vulnerability in admin/centre.php in MyForum 1.3, when register_globals is enabled, allows remote a…

  • Unscored —
    CVE-2008-4777 Public exploit

    SQL injection vulnerability in the Showroom Joomlearn LMS (com_lms) component for Joomla! and Mambo allows remote attac…

  • Unscored —
    CVE-2008-4784 Public exploit

    aflog 1.01 allows remote attackers to bypass authentication and gain administrative access by setting the aflog_auth_a …