Skip to content
OpenAdvisories

Archive

October 2008

Vulnerabilities first published in this month (UTC), newest first.

← September 2008 2008 / October November 2008 →
  1. 113
  2. 28
  3. 335
  4. 4 
  5. 5 
  6. 615
  7. 728
  8. 827
  9. 930
  10. 1017
  11. 11 
  12. 12 
  13. 1310
  14. 1457
  15. 1542
  16. 163
  17. 1717
  18. 18 
  19. 19 
  20. 2013
  21. 2147
  22. 2234
  23. 2340
  24. 2410
  25. 25 
  26. 26 
  27. 2716
  28. 2821
  29. 2917
  30. 3012
  31. 3128
All Critical High Medium Low Exploited only Public exploit

268 results · Clear filters · Feed

  • Unscored —
    CVE-2008-4437 Public exploit

    Directory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5, when --attach_path i…

  • Unscored —
    CVE-2008-4423 Public exploit

    SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-4424 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Domain Group Network GooCMS 1.02 allows remote attackers to in…

  • Unscored —
    CVE-2008-4438 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2008-4426 Public exploit

    Cross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows re…

  • Unscored —
    CVE-2008-4435 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the RMSOFT Downloads Plus (rmdp) module 1.5 and 1.7 for Xoops al…

  • Unscored —
    CVE-2008-4425 Public exploit

    Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM) 1.0 allows remote at…

  • Unscored —
    CVE-2008-4432 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops allows remote attack…

  • Unscored —
    CVE-2008-4436 Public exploit

    SQL injection vulnerability in bblog_plugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-4427 Public exploit

    changepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not require administrative a…

  • Unscored —
    CVE-2008-4439 Public exploit

    PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote…

  • Unscored —
    CVE-2008-4434 Public exploit EPSS 11%

    Stack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3 build 8642 and earlie…

  • Unscored —
    CVE-2008-4405 Public exploit

    xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not prope…

  • Unscored —
    CVE-2008-4409 Public exploit

    libxml2 2.7.0 and 2.7.1 does not properly handle "predefined entities definitions" in entities, which allows context-de…

  • Unscored —
    CVE-2008-3832 Public exploit

    A certain Fedora patch for the utrace subsystem in the Linux kernel before 2.6.26.5-28 on Fedora 8, and before 2.6.26.5…

  • Unscored —
    CVE-2008-2439 Public exploit EPSS 20%

    Directory traversal vulnerability in the UpdateAgent function in TmListen.exe in the OfficeScanNT Listener service in t…

  • Unscored —
    CVE-2008-4370 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2008-4373 Public exploit

    SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows remote attackers to exec…

  • Unscored —
    CVE-2008-4378 Public exploit

    SQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to e…

  • Unscored —
    CVE-2008-4379 Public exploit

    Cross-site scripting (XSS) vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote a…

  • Unscored —
    CVE-2008-4380 Public exploit

    The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed H…

  • Unscored —
    CVE-2008-4371 Public exploit

    SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-4374 Public exploit

    SQL injection vulnerability in index.php in CMS Buzz allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2008-4372 Public exploit

    Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to injec…

  • Unscored —
    CVE-2008-4369 Public exploit

    SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-4377 Public exploit

    SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-4376 Public exploit

    SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-4375 Public exploit

    SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbit…