Skip to content
OpenAdvisories

Archive

October 2008

Vulnerabilities first published in this month (UTC), newest first.

← September 2008 2008 / October November 2008 →
  1. 113
  2. 28
  3. 335
  4. 4 
  5. 5 
  6. 615
  7. 728
  8. 827
  9. 930
  10. 1017
  11. 11 
  12. 12 
  13. 1310
  14. 1457
  15. 1542
  16. 163
  17. 1717
  18. 18 
  19. 19 
  20. 2013
  21. 2147
  22. 2234
  23. 2340
  24. 2410
  25. 25 
  26. 26 
  27. 2716
  28. 2821
  29. 2917
  30. 3012
  31. 3128
All Critical High Medium Low Exploited only Public exploit

540 results · Feed

  • Unscored —
    CVE-2008-4790

    The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictio…

  • Unscored —
    CVE-2008-4788

    Microsoft Internet Explorer 6 omits high-bit URL-encoded characters when displaying the address bar, which allows remot…

  • Unscored —
    CVE-2008-4789

    The validation functionality in the core upload module in Drupal 6.x before 6.5 allows remote authenticated users to by…

  • Unscored —
    CVE-2008-4787 Public exploit EPSS 14%

    Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a…

  • Unscored —
    CVE-2008-4792

    The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fie…

  • High —
    CVE-2008-4793

    Drupal Node Validation Bypass in the node module API

    The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have unspecified other impact via unknown vectors related to contributed modules.

    drupal/drupal Packagist
  • Unscored —
    CVE-2008-4791

    The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might allow remote authenticated users to bypass intended …

  • Unscored —
    CVE-2008-4785 Public exploit

    SQL injection vulnerability in newuser.php in the alternate_profiles plugin, possibly 0.2, for e107 allows remote attac…

  • Unscored —
    CVE-2008-4786 Public exploit

    SQL injection vulnerability in easyshop.php in the EasyShop plugin for e107 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-4778 Public exploit

    SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-4779 Public exploit EPSS 65%

    Stack-based buffer overflow in TUGzip 3.5.0.0 allows remote attackers to denial of service (crash) or execute arbitrary…

  • Unscored —
    CVE-2008-4781 Public exploit

    Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrar…

  • Unscored —
    CVE-2008-4783 Public exploit

    tlAds 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the tlAds_login co…

  • Unscored —
    CVE-2008-4782 Public exploit

    SQL injection vulnerability in public/code/cp_polls_results.php in All In One Control Panel (AIOCP) 1.4 allows remote a…

  • Unscored —
    CVE-2008-4780 Public exploit

    Directory traversal vulnerability in admin/centre.php in MyForum 1.3, when register_globals is enabled, allows remote a…

  • Unscored —
    CVE-2008-4777 Public exploit

    SQL injection vulnerability in the Showroom Joomlearn LMS (com_lms) component for Joomla! and Mambo allows remote attac…

  • Unscored —
    CVE-2008-4784 Public exploit

    aflog 1.01 allows remote attackers to bypass authentication and gain administrative access by setting the aflog_auth_a …

  • Unscored —
    CVE-2008-4772 Public exploit

    SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2008-4775 Public exploit

    Cross-site scripting (XSS) vulnerability in pmd_pdf.php in phpMyAdmin 3.0.0, and possibly other versions including 2.11…

    phpmyadmin Debian
  • Unscored —
    CVE-2008-4773 Public exploit

    Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files vi…

  • Unscored —
    CVE-2008-4774 Public exploit

    Cross-site scripting (XSS) vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2008-4776

    libgadu before 1.8.2 allows remote servers to cause a denial of service (crash) via a contact description with a large …

    libgadu Debian
  • Unscored —
    CVE-2008-4771 Public exploit

    Stack-based buffer overflow in VATDecoder.VatCtrl.1 ActiveX control in (1) 4xem VatCtrl Class (VATDecoder.dll 1.0.0.27 …

  • Unscored —
    CVE-2008-4769 Public exploit

    Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and…

    wordpress Debian
  • Unscored —
    CVE-2008-4767 Public exploit

    Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-4768 Public exploit

    SQL injection vulnerability in TLM CMS 3.1 allows remote attackers to execute arbitrary SQL commands via the nom parame…

  • Unscored —
    CVE-2008-4763

    Multiple cross-site scripting (XSS) vulnerabilities in sample.php in WiKID wClient-PHP 3.0-2 and earlier allow remote a…

  • Unscored —
    CVE-2008-4764 Public exploit Scanner template EPSS 17%

    Directory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0 RC2 and earlier in Joomla! allows remot…

  • Unscored —
    CVE-2008-4766

    SQL injection vulnerability in member.php in Oxygen Bulletin Board 1.1.3 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-4765 Public exploit

    SQL injection vulnerability in pollBooth.php in osCommerce Poll Booth Add-On 2.0 allows remote attackers to execute arb…

  • Unscored —
    CVE-2008-4760 Public exploit

    SQL injection vulnerability in lecture.php in Graphiks MyForum 1.3, when register_globals is enabled, allows remote att…

  • Unscored —
    CVE-2008-4758 Public exploit

    Directory traversal vulnerability in download_file.php in PHP-Daily allows remote attackers to read arbitrary local fil…

  • Unscored —
    CVE-2008-4755 Public exploit

    SQL injection vulnerability in gotourl.php in PozScripts Classified Auctions Script allows remote attackers to execute …

  • Unscored —
    CVE-2008-4757 Public exploit

    Multiple SQL injection vulnerabilities in PHP-Daily allow remote attackers to execute arbitrary SQL commands via the (1…

  • Unscored —
    CVE-2008-4761 Public exploit

    Cross-site scripting (XSS) vulnerability in includes/htmlArea/plugins/HtmlTidy/html-tidy-logic.php in Kayako eSupport 3…

  • Unscored —
    CVE-2008-4756 Public exploit

    Cross-site scripting (XSS) vulnerability in add_prest_date.php in PHP-Daily allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2008-4762 Public exploit EPSS 14%

    Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service (service c…

  • Unscored —
    CVE-2008-4759 Public exploit

    Directory traversal vulnerability in download.php in BuzzyWall 1.3.1 allows remote attackers to read arbitrary local fi…

  • Unscored —
    CVE-2008-4749 Public exploit

    Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laborat…

  • Unscored —
    CVE-2008-4751 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary…