Skip to content
OpenAdvisories

Archive

November 2008

Vulnerabilities first published in this month (UTC), newest first.

← October 2008 2008 / November December 2008 →
  1. 1 
  2. 2 
  3. 314
  4. 438
  5. 537
  6. 628
  7. 79
  8. 8 
  9. 9 
  10. 1033
  11. 11 
  12. 1211
  13. 1338
  14. 1419
  15. 15 
  16. 16 
  17. 1730
  18. 1847
  19. 1914
  20. 206
  21. 2126
  22. 22 
  23. 23 
  24. 2410
  25. 2525
  26. 2623
  27. 275
  28. 2813
  29. 296
  30. 30 
All Critical High Medium Low Exploited only Public exploit

432 results · Feed

  • Unscored —
    CVE-2008-5211 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in Sphider 1.3.4, when the search suggestion feature is enabled,…

  • Unscored —
    CVE-2008-5215 Public exploit

    SQL injection vulnerability in service/profil.php in ClanLite 2.2006.05.20 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-5198 Public exploit

    SQL injection vulnerability in memberlist.php in Acmlmboard 1.A2 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-5197 Public exploit

    SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2008-5205

    Cross-site scripting (XSS) vulnerability in edit.php in wellyblog allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2008-5192 Public exploit

    SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2008-5191 Public exploit EPSS 18%

    Multiple SQL injection vulnerabilities in SePortal 2.4 allow remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2008-5207

    Multiple directory traversal vulnerabilities in Jonascms 1.2 allow remote attackers to include and execute arbitrary lo…

  • Unscored —
    CVE-2008-5190 Public exploit

    SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2008-5200 Public exploit

    SQL injection vulnerability in the Xe webtv (com_xewebtv) component for Joomla! allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-5201 Public exploit

    Directory traversal vulnerability in index.php in OTManager CMS 24a allows remote attackers to include and execute arbi…

  • Unscored —
    CVE-2008-5199 Public exploit

    PHP remote file inclusion vulnerability in include.php in PHPOutsourcing IdeaBox (aka IdeBox) 1.1 allows remote attacke…

  • Unscored —
    CVE-2008-5202 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in OTManager CMS 24a allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-5203 Public exploit

    Cross-site scripting (XSS) vulnerability in external_vote.php in PowerAward 1.1.0 RC1 allows remote attackers to inject…

  • Unscored —
    CVE-2008-5195 Public exploit

    Multiple SQL injection vulnerabilities in SebracCMS (sbcms) 0.4 allow remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-5194 Public exploit

    SQL injection vulnerability in checkavail.php in SoftVisions Software Online Booking Manager (obm) 2.2 allows remote at…

  • Unscored —
    CVE-2008-5204 Public exploit

    Multiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when register_globals is enabled, allow remote at…

  • Unscored —
    CVE-2008-5206

    PHP remote file inclusion vulnerability in modules/mod_mainmenu.php in MosXML 1 Alpha allows remote attackers to execut…

  • Unscored —
    CVE-2008-5193 Public exploit

    Cross-site scripting (XSS) vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to inje…

  • Unscored —
    CVE-2008-5196 Public exploit

    SQL injection vulnerability in kroax.php in the Kroax (the_kroax) 4.42 and earlier module for PHP-Fusion allows remote …

  • Medium —
    CVE-2008-5189

    rails is vulnerable to CRLF injection

    CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirect_to function.

    rails rails Debian RubyGems
  • Unscored —
    CVE-2008-5184

    The web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the guest username when a user is not logged on to the we…

    cups Debian
  • Unscored —
    CVE-2008-5186

    The set_language_path function in geshi.php in Generic Syntax Highlighter (GeSHi) before 1.0.8.1 might allow remote att…

    dokuwiki geshi Debian
  • Unscored —
    CVE-2008-5182

    The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown …

  • Unscored —
    CVE-2008-5183 Public exploit

    cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a denial of service (daemon…

    cups Debian
  • Unscored —
    CVE-2008-5185 Public exploit

    The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service …

    geshi Debian
  • Unscored —
    CVE-2008-5187

    The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial o…

    imlib2 Debian
  • Unscored —
    CVE-2008-5188

    The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryp…

    ecryptfs-utils Debian
  • Medium 5.3
    CVE-2008-5180 Public exploit EPSS 68%

    Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of se…

  • Unscored —
    CVE-2008-5181 EPSS 13%

    Microsoft Communicator allows remote attackers to cause a denial of service (application or device outage) via instant …

  • Unscored —
    CVE-2008-5176

    Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2008-5177 Public exploit EPSS 17%

    Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to (1) execute a…

  • Unscored —
    CVE-2008-5178 Public exploit EPSS 32%

    Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:/…

  • Unscored —
    CVE-2008-5179 EPSS 16%

    Unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Live Messen…

  • Unscored —
    CVE-2008-5165

    Multiple SQL injection vulnerabilities in eTicket 1.5.7 allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2008-5173

    Unspecified vulnerability in testMaker before 3.0p16 allows remote authenticated users to execute arbitrary PHP code vi…

  • Unscored —
    CVE-2008-5175 Public exploit

    Directory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80.3 allows remote FTP s…

  • Unscored —
    CVE-2008-5169 Public exploit

    SQL injection vulnerability in drinks/drink.php in Drinks Complete Website 2.1.0 allows remote attackers to execute arb…

  • Unscored —
    CVE-2008-5166 Public exploit

    SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-5172

    Multiple cross-site scripting (XSS) vulnerabilities in Yazd Forum Software 3.x allow remote attackers to inject arbitra…