Archive
October 2008
Vulnerabilities first published in this month (UTC), newest first.
540 results · Feed
-
Unscored —CVE-2008-4752 Public exploit
TlNews 2.2 allows remote attackers to bypass authentication and gain administrative access by setting the tlNews_login …
-
Unscored —
Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attack…
-
Unscored —CVE-2008-4748 Public exploit
Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC U…
-
Unscored —CVE-2008-4753 Public exploit
SQL injection vulnerability in EditUrl.php in AJ Square RSS Reader allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2008-4750 Public exploit
Stack-based buffer overflow in the VImpX.VImpAX ActiveX control (VImpX.ocx) 4.8.8.0 in DB Software Laboratory VImp X, p…
-
Unscored —CVE-2008-4754 Public exploit
SQL injection vulnerability in forum.php in Scripts for Sites (SFS) Ez Forum allows remote attackers to execute arbitra…
-
Unscored —
Multiple SQL injection vulnerabilities in Uniwin eCart Professional 2.0.17 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2008-4740 Public exploit
Directory traversal vulnerability in templater.php in the ZZ_Templater module in TinyCMS 1.1.2, when register_globals i…
-
Unscored —CVE-2008-4744 Public exploit
SQL injection vulnerability in product_detail.php in DXShopCart 4.30mc allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2008-4741 Public exploit
Directory traversal vulnerability in index.php in FAR-PHP 1.00, when magic_quotes_gpc is disabled, allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in emailFriend.asp in Uniwin eCart Professional 2.0.17 allows remote attackers…
-
Unscored —CVE-2008-4743 Public exploit
SQL injection vulnerability in index.php in QuidaScript FAQ Management Script allows remote attackers to execute arbitr…
-
Unscored —CVE-2008-4742 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in interface/Login.php in TimeTrex 2.2.11 allow remote attackers to…
-
Unscored —CVE-2006-7234 Public exploit
Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via maliciou…
-
Unscored —
Multiple unspecified vulnerabilities in YaCy before 0.61 have unknown impact and attack vectors.
-
Unscored —CVE-2008-4739 Public exploit
Directory traversal vulnerability in index.php in PlugSpace 0.1, when magic_quotes_gpc is disabled, allows remote attac…
-
Unscored —CVE-2008-4738 Public exploit
SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2008-4732 Public exploit
SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remot…
-
Unscored —
Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress al…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the wpcr_do_options_page function in WP Comment Remix plugin before …
-
Unscored —CVE-2008-4736 Public exploit
SQL injection vulnerability in index.php in RPG.Board 0.8 Beta2 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2008-4735 Public exploit
PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system (CoAST) 0.95 allows…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2008-4737 Public exploit
Cross-site scripting (XSS) vulnerability in wholite.cgi in WhoDomLite 1.1.3 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2008-4729 Public exploit
Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Con…
-
Unscored —
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 i…
-
Unscored —CVE-2008-4727 Public exploit
Cross-site scripting (XSS) vulnerability in the contact update page (ss/bwgkoemr.P_UpdateEmrgContacts) in SunGard Banne…
-
Unscored —
Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome 0.2.149.30 allow remote attackers to inject arbitr…
-
Unscored —
Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to creat…
-
Unscored —
Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicti…
-
Unscored —
The Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a javascript: URL in the con…
-
Unscored —
Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26 allows remote authentica…
-
Critical 9.8
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2…
KEV May 20, 2026 -
Unscored —
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 3.0.1 through 3.0.3 allow remote attackers to in…
-
Unscored —CVE-2008-4694 Public exploit
Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash)…
-
Unscored —CVE-2008-4725 Public exploit
Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web scr…
-
Unscored —
Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, wh…
-
Unscored —
Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2(4)9 a…