Skip to content
OpenAdvisories

Archive

17 December 2008

Vulnerabilities first published on this day (UTC), newest first.

← November 2008 2008 / December /17 January 2009 →
  1. 120
  2. 26
  3. 317
  4. 4 
  5. 541
  6. 6 
  7. 7 
  8. 820
  9. 930
  10. 1041
  11. 1118
  12. 1249
  13. 131
  14. 14 
  15. 1526
  16. 1624
  17. 1772
  18. 1817
  19. 1926
  20. 20 
  21. 21 
  22. 2211
  23. 238
  24. 2410
  25. 25 
  26. 2627
  27. 27 
  28. 28 
  29. 297
  30. 3031
  31. 3126
All Critical High Medium Low Exploited only Public exploit

72 results · Feed

  • Unscored —
    CVE-2008-5512

    Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x befor…

  • Unscored —
    CVE-2008-5510

    The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMon…

  • Unscored —
    CVE-2008-5502

    The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14…

  • Unscored —
    CVE-2008-5503

    The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey…

  • Unscored —
    CVE-2008-5508

    Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1…

  • Unscored —
    CVE-2008-5506

    Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1…

  • Unscored —
    CVE-2008-5501

    The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14…

  • Unscored —
    CVE-2008-5513

    Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 al…

  • Unscored —
    CVE-2008-5507

    Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1…

  • Unscored —
    CVE-2008-5500

    The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and Sea…

  • Unscored —
    CVE-2008-5504

    Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vect…

  • Unscored —
    CVE-2008-5511

    Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1…

  • Unscored —
    CVE-2008-5505

    Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions by using the persist a…

  • Unscored —
    CVE-2008-5657

    CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other user…

    quassel Debian
  • Low —
    CVE-2008-5656

    typo3/cms-felogin Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

    typo3/cms-felogin Packagist
  • Unscored —
    CVE-2008-5658

    Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-depende…

  • Unscored —
    CVE-2008-5662

    Multiple buffer overflows in Sun Java Wireless Toolkit (WTK) for CLDC 2.5.2 and earlier allow downloaded programs to ex…

  • Unscored —
    CVE-2008-5659 Public exploit

    The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system t…

  • Unscored —
    CVE-2008-5660 Public exploit

    Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.…

    vinagre Debian
  • Unscored —
    CVE-2008-5661

    The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv_47 through snv_82, with certain patches installed, al…

  • Unscored —
    CVE-2008-5652 Public exploit

    SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyBookMarker 4.0 allows remote attacker…

  • Unscored —
    CVE-2008-5655 Public exploit

    Multiple SQL injection vulnerabilities in MyioSoft EasyBookMarker 4.0 allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-5645

    Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to r…

  • High 7.5
    CVE-2008-5646

    Trac vulnerable to denial of service

    Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup."

    trac trac Debian PyPI
  • Unscored —
    CVE-2008-5651 Public exploit

    SQL injection vulnerability in plugins/bookmarker/bookmarker_backend.php in MyioSoft EasyBookMarker 4.0 allows remote a…

  • Unscored —
    CVE-2008-5653 Public exploit

    SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft AjaxPortal 3.0 allows remote attackers to…

  • Unscored —
    CVE-2008-5648 Public exploit

    SQL injection vulnerability in admin/login.php in DeltaScripts PHP Shop 1.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-5643 Public exploit

    SQL injection vulnerability in the Books (com_books) component for Joomla! allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-5650 Public exploit

    SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute …

  • Unscored —
    CVE-2008-5654 Public exploit

    SQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0 allows remote attackers …

  • Unscored —
    CVE-2008-5649 Public exploit

    SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows remote attackers to execute…

  • Medium —
    CVE-2008-5644

    TYPO3 Cross-site Scripting vulnerability in the file backend module

    Cross-site scripting (XSS) vulnerability in the file backend module in TYPO3 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

    typo3/cms-backend Packagist
  • Medium 5.4
    CVE-2008-5647

    Trac has vulnerability in HTML sanitizer filter

    Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors.

    trac trac Debian PyPI
  • Unscored —
    CVE-2008-5637 Public exploit

    SQL injection vulnerability in blog.asp in ParsBlogger (Pb) allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-5639 Public exploit

    Directory traversal vulnerability in index.php in TxtBlog 1.0 Alpha allows remote attackers to read arbitrary files via…

  • Unscored —
    CVE-2008-5628 Public exploit

    SQL injection vulnerability in index.php in CMS little 0.0.1 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2008-5627 Public exploit

    SQL injection vulnerability in account.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2008-5638 Public exploit

    Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-5626 Public exploit EPSS 36%

    XM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service via a crafted argument…

  • Unscored —
    CVE-2008-5641 Public exploit

    SQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to execute arbitrary SQL…