Skip to content
OpenAdvisories

Archive

November 2008

Vulnerabilities first published in this month (UTC), newest first.

← October 2008 2008 / November December 2008 →
  1. 1 
  2. 2 
  3. 314
  4. 438
  5. 537
  6. 628
  7. 79
  8. 8 
  9. 9 
  10. 1033
  11. 11 
  12. 1211
  13. 1338
  14. 1419
  15. 15 
  16. 16 
  17. 1730
  18. 1847
  19. 1914
  20. 206
  21. 2126
  22. 22 
  23. 23 
  24. 2410
  25. 2525
  26. 2623
  27. 275
  28. 2813
  29. 296
  30. 30 
All Critical High Medium Low Exploited only Public exploit

432 results · Feed

  • Unscored —
    CVE-2008-5168 Public exploit

    SQL injection vulnerability in tip.php in Tips Complete Website 1.2.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-5174 Public exploit

    SQL injection vulnerability in joke.php in Jokes Complete Website 2.1.3 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-5170 Public exploit

    SQL injection vulnerability in item.php in Cheats Complete Website 1.1.1 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-5163 Public exploit

    Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-5164 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2008-5167 Public exploit

    PHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2, when register_global…

  • Unscored —
    CVE-2008-5171 Public exploit

    Multiple directory traversal vulnerabilities in admin/minibb/index.php in phpBLASTER CMS 1.0 RC1, when register_globals…

  • Low 3.7
    CVE-2008-5161 Public exploit EPSS 19%

    Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.…

    openssh Debian
  • Unscored —
    CVE-2008-5159 Public exploit EPSS 60%

    Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and ear…

  • Unscored —
    CVE-2008-5158

    Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform adm…

  • Unscored —
    CVE-2008-5160 Public exploit

    Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service (daemon crash) via mu…

  • Unscored —
    CVE-2008-5139

    updatejail in jailer 0.4 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/#####.updatejai…

  • Unscored —
    CVE-2008-5155

    mail2sms.sh in smsclient 2.0.8z allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/head…

  • Unscored —
    CVE-2008-5154

    bluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/blue.log te…

  • Unscored —
    CVE-2008-5147

    test-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files via a symlink attack o…

  • Unscored —
    CVE-2008-5135

    os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/mounte…

    os-prober Debian
  • Unscored —
    CVE-2008-5145

    ltpmenu in ltp 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/runltp.mainmenu.…

  • Unscored —
    CVE-2008-5137

    tkman in tkman 2.2 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/tkman##### or (2)…

  • Unscored —
    CVE-2008-5141

    flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multi…

    flamethrower Debian
  • Unscored —
    CVE-2008-5157

    tau 2.16.4 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/makefile.tau.*.##### or (…

  • Unscored —
    CVE-2008-5144

    nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink…

    nvidia-cg-toolkit nvidia-cg-toolkit Debian Ubuntu
  • Unscored —
    CVE-2008-5149

    fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/##…

    ncbi-tools6 Debian
  • Unscored —
    CVE-2008-5140

    trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitra…

  • Medium —
    CVE-2008-5153

    Moodle vulnerable to symlink attack

    spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/spell-check-debug.log, (2) /tmp/spell-check-before, or (3) /tmp/spell-check-after temporary file.

    moodle/moodle Packagist
  • Unscored —
    CVE-2008-5134

    Buffer overflow in the lbs_process_bss function in drivers/net/wireless/libertas/scan.c in the libertas subsystem in th…

  • Unscored —
    CVE-2008-5136

    tkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/tkusr.pgm temporar…

  • Unscored —
    CVE-2008-5138

    passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd…

    libpam-mount Debian
  • Unscored —
    CVE-2008-5152

    inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp/inmail…

    mh-book mh-book Debian Ubuntu
  • Unscored —
    CVE-2008-5150

    sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildi…

    maildirsync maildirsync Debian Ubuntu
  • Unscored —
    CVE-2008-5156

    si_mkbootserver in systemimager-server 3.6.3 allows local users to overwrite arbitrary files via a symlink attack on a …

  • Unscored —
    CVE-2008-5151

    test_parser.py in mayavi 1.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/err.log t…

  • Unscored —
    CVE-2008-5148

    sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/#…

  • Unscored —
    CVE-2008-5143

    mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a (1) …

  • Unscored —
    CVE-2008-5146

    add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/acc…

    ctn ctn Debian Ubuntu
  • Unscored —
    CVE-2008-5142

    sendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink a…

  • Unscored —
    CVE-2008-5133

    ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address T…

  • Unscored —
    CVE-2008-5128

    Ocean12 Membership Manager Pro stores sensitive information under the web root with insufficient access control, which …

  • Unscored —
    CVE-2008-5132 Public exploit

    SQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT Portal 4.0.1 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-5130

    Ocean12 Calendar Manager Gold 2.04 stores sensitive information under the web root with insufficient access control, wh…

  • Unscored —
    CVE-2008-5129

    Ocean12 Poll Manager Pro 1.00 stores sensitive information under the web root with insufficient access control, which a…