Skip to content
OpenAdvisories

Archive

November 2008

Vulnerabilities first published in this month (UTC), newest first.

← October 2008 2008 / November December 2008 →
  1. 1 
  2. 2 
  3. 314
  4. 438
  5. 537
  6. 628
  7. 79
  8. 8 
  9. 9 
  10. 1033
  11. 11 
  12. 1211
  13. 1338
  14. 1419
  15. 15 
  16. 16 
  17. 1730
  18. 1847
  19. 1914
  20. 206
  21. 2126
  22. 22 
  23. 23 
  24. 2410
  25. 2525
  26. 2623
  27. 275
  28. 2813
  29. 296
  30. 30 
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium —
    CVE-2008-5189

    rails is vulnerable to CRLF injection

    CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirect_to function.

    rails rails Debian RubyGems
  • Medium 5.3
    CVE-2008-5180 Public exploit EPSS 68%

    Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of se…

  • Medium —
    CVE-2008-5153

    Moodle vulnerable to symlink attack

    spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/spell-check-debug.log, (2) /tmp/spell-check-before, or (3) /tmp/spell-check-after temporary file.

    moodle/moodle Packagist
  • Medium 5.5
    CVE-2008-4996

    init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramf…

    initramfs-tools Debian