Skip to content
OpenAdvisories

Archive

October 2008

Vulnerabilities first published in this month (UTC), newest first.

← September 2008 2008 / October November 2008 →
  1. 113
  2. 28
  3. 335
  4. 4 
  5. 5 
  6. 615
  7. 728
  8. 827
  9. 930
  10. 1017
  11. 11 
  12. 12 
  13. 1310
  14. 1457
  15. 1542
  16. 163
  17. 1717
  18. 18 
  19. 19 
  20. 2013
  21. 2147
  22. 2234
  23. 2340
  24. 2410
  25. 25 
  26. 26 
  27. 2716
  28. 2821
  29. 2917
  30. 3012
  31. 3128
All Critical High Medium Low Exploited only Public exploit

540 results · Feed

  • Unscored —
    CVE-2008-4381 EPSS 18%

    Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (application crash) via Javascript t…

  • Unscored —
    CVE-2008-4382

    Konqueror in KDE 3.5.9 allows remote attackers to cause a denial of service (application crash) via Javascript that cal…

  • Unscored —
    CVE-2008-3520

    Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a cr…

    ghostscript Debian
  • Unscored —
    CVE-2008-3522

    Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-…

    ghostscript Debian
  • Unscored —
    CVE-2008-3542

    Unspecified vulnerability in HP Insight Diagnostics before 7.9.1.2402 allows remote attackers to read arbitrary files v…

  • Unscored —
    CVE-2008-3521

    Race condition in the jas_stream_tmpfile function in libjasper/base/jas_stream.c in JasPer 1.900.1 allows local users t…

  • Unscored —
    CVE-2008-2831

    Multiple cross-site scripting (XSS) vulnerabilities in the delegated spam management feature in the Spam Quarantine Man…

  • Unscored —
    CVE-2008-4370 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2008-4373 Public exploit

    SQL injection vulnerability in job_seeker/applynow.php in AvailScript Job Portal Script allows remote attackers to exec…

  • Unscored —
    CVE-2008-4378 Public exploit

    SQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to e…

  • Unscored —
    CVE-2008-4379 Public exploit

    Cross-site scripting (XSS) vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote a…

  • Unscored —
    CVE-2008-4380 Public exploit

    The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed H…

  • Unscored —
    CVE-2008-4371 Public exploit

    SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-4374 Public exploit

    SQL injection vulnerability in index.php in CMS Buzz allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2008-4372 Public exploit

    Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to injec…

  • Unscored —
    CVE-2008-4369 Public exploit

    SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-4377 Public exploit

    SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-4376 Public exploit

    SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-4375 Public exploit

    SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-4368

    The default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction policy that limits Ja…