Skip to content
OpenAdvisories

Archive

4 November 2008

Vulnerabilities first published on this day (UTC), newest first.

← October 2008 2008 / November /4 December 2008 →
  1. 1 
  2. 2 
  3. 314
  4. 438
  5. 537
  6. 628
  7. 79
  8. 8 
  9. 9 
  10. 1033
  11. 11 
  12. 1211
  13. 1338
  14. 1419
  15. 15 
  16. 16 
  17. 1730
  18. 1847
  19. 1914
  20. 206
  21. 2126
  22. 22 
  23. 23 
  24. 2410
  25. 2525
  26. 2623
  27. 275
  28. 2813
  29. 296
  30. 30 
All Critical High Medium Low Exploited only Public exploit

22 results · Clear filters · Feed

  • Unscored —
    CVE-2008-4919 Public exploit

    Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows rem…

  • Unscored —
    CVE-2008-4924 Public exploit

    Multiple insecure method vulnerabilities in MW6 Technologies 1D Barcode ActiveX control (BARCODELib.MW6Barcode, Barcode…

  • Unscored —
    CVE-2008-4925 Public exploit

    Multiple insecure method vulnerabilities in MW6 Technologies DataMatrix ActiveX control (DATAMATRIXLib.MW6DataMatrix, D…

  • Unscored —
    CVE-2008-4918 Public exploit

    Cross-site scripting (XSS) vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 an…

  • Unscored —
    CVE-2008-4923 Public exploit

    Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control (AZTECLib.MW6Aztec, Aztec.dll) 3.0.0…

  • Unscored —
    CVE-2008-4926 Public exploit

    Multiple insecure method vulnerabilities in MW6 Technologies PDF417 ActiveX control (MW6PDF417Lib.PDF417, MW6PDF417.dll…

  • Unscored —
    CVE-2008-4922 Public exploit EPSS 33%

    Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attacker…

  • High 7.8
    CVE-2008-2992 Exploited · Ransomware Public exploit EPSS 100%

    Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary …

    KEV Mar 3, 2022
  • Unscored —
    CVE-2008-4913 Public exploit

    Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to delete arbitrary…

  • Unscored —
    CVE-2008-4910 Public exploit EPSS 10%

    The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a …

  • Unscored —
    CVE-2008-4911 Public exploit

    PHP remote file inclusion vulnerability in read.php in Chattaitaliano Istant-Replay allows remote attackers to execute …

  • Unscored —
    CVE-2008-4912 Public exploit

    SQL injection vulnerability in popup_img.php in the fotogalerie module in RS MAXSOFT allows remote attackers to execute…

  • Unscored —
    CVE-2008-4900 Public exploit

    SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-4896 Public exploit

    Cross-site scripting (XSS) vulnerability in fichiers/add_url.php in Logz CMS 1.3.1 allows remote attackers to inject ar…

  • Unscored —
    CVE-2008-4895 Public exploit

    SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-4906 Public exploit

    SQL injection vulnerability in lyrics_song.php in the Lyrics (lyrics_menu) plugin 0.42 for e107 allows remote attackers…

  • Unscored —
    CVE-2008-4894 Public exploit

    Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.1…

  • Unscored —
    CVE-2008-4907 Public exploit

    The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allow…

    dovecot Debian
  • Unscored —
    CVE-2008-4893 Public exploit

    Cross-site scripting (XSS) vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CM…

  • Unscored —
    CVE-2008-4901 Public exploit

    SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-4902 Public exploit

    SQL injection vulnerability in contact_author.php in Article Publisher Pro 1.5 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-4897 Public exploit

    SQL injection vulnerability in fichiers/add_url.php in Logz podcast CMS 1.3.1, when magic_quotes_gpc is disabled, allow…