Skip to content
OpenAdvisories

Archive

3 December 2008

Vulnerabilities first published on this day (UTC), newest first.

← November 2008 2008 / December /3 January 2009 →
  1. 120
  2. 26
  3. 317
  4. 4 
  5. 541
  6. 6 
  7. 7 
  8. 820
  9. 930
  10. 1041
  11. 1118
  12. 1249
  13. 131
  14. 14 
  15. 1526
  16. 1624
  17. 1772
  18. 1817
  19. 1926
  20. 20 
  21. 21 
  22. 2211
  23. 238
  24. 2410
  25. 25 
  26. 2627
  27. 27 
  28. 28 
  29. 297
  30. 3031
  31. 3126
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2008-5320 Public exploit

    SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute…

  • Unscored —
    CVE-2008-5322 Public exploit

    Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, w…

  • Unscored —
    CVE-2008-5321 Public exploit

    SQL injection vulnerability in index.php in GesGaleri, a module for XOOPS, allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-5323 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2008-5319

    Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to tiki-error.php, a dif…

  • Unscored —
    CVE-2008-5080

    awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to condu…

    awstats Debian
  • Unscored —
    CVE-2008-5318

    Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to "size of user-provide…

  • Unscored —
    CVE-2008-3059

    member/settings_account.php in Octeth Oempro 3.5.5.1, and possibly other versions before 4, uses cleartext to transmit …

  • Unscored —
    CVE-2008-3058 Public exploit

    Multiple SQL injection vulnerabilities in Octeth Oempro 3.5.5.1, and possibly other versions before 4, allow remote att…

  • Unscored —
    CVE-2008-3057

    Octeth Oempro 3.5.5.1, and possibly other versions before 4, does not set the secure flag for the PHPSESSID cookie in a…

  • Unscored —
    CVE-2008-5276

    Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 …

    vlc Debian
  • Unscored —
    CVE-2008-5314 Public exploit

    Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denia…

    clamav Debian
  • Unscored —
    CVE-2008-5315

    Directory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility 1.0 on Windows allows …

  • Unscored —
    CVE-2008-5316

    Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 a…

  • Unscored —
    CVE-2008-5313

    mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symli…

  • Unscored —
    CVE-2008-5317

    Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1…

  • Unscored —
    CVE-2008-5312

    mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a syml…