Skip to content
OpenAdvisories

Archive

18 December 2008

Vulnerabilities first published on this day (UTC), newest first.

← November 2008 2008 / December /18 January 2009 →
  1. 120
  2. 26
  3. 317
  4. 4 
  5. 541
  6. 6 
  7. 7 
  8. 820
  9. 930
  10. 1041
  11. 1118
  12. 1249
  13. 131
  14. 14 
  15. 1526
  16. 1624
  17. 1772
  18. 1817
  19. 1926
  20. 20 
  21. 21 
  22. 2211
  23. 238
  24. 2410
  25. 25 
  26. 2627
  27. 27 
  28. 28 
  29. 297
  30. 3031
  31. 3126
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2008-5677 Public exploit

    Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS_PATH is located in the web root,…

  • Unscored —
    CVE-2008-5678 Public exploit

    Fretwell-Downing Informatics (FDI) OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive informat…

  • Unscored —
    CVE-2008-5676

    Multiple unspecified vulnerabilities in the ModSecurity (aka mod_security) module 2.5.0 through 2.5.5 for the Apache HT…

  • Unscored —
    CVE-2008-5675

    Unspecified vulnerability in IBM WebSphere Portal 6.0 before 6.0.1.5 has unknown impact and attack vectors related to "…

  • Unscored —
    CVE-2008-5666 Public exploit EPSS 21%

    WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of s…

  • Unscored —
    CVE-2008-5665 Public exploit

    SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2008-5668

    Multiple cross-site scripting (XSS) vulnerabilities in Textpattern (aka Txp CMS) 4.0.5 allow remote attackers to inject…

  • Unscored —
    CVE-2008-5663 Public exploit

    Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execu…

  • Unscored —
    CVE-2008-5670

    Textpattern (aka Txp CMS) 4.0.5 does not ask for the old password during a password reset, which makes it easier for re…

  • Unscored —
    CVE-2008-5673

    PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown…

  • Unscored —
    CVE-2008-5674 Public exploit

    Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and…

  • Unscored —
    CVE-2008-5664 Public exploit EPSS 36%

    Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allow…

  • Unscored —
    CVE-2008-5672

    Multiple cross-site request forgery (CSRF) vulnerabilities in PHParanoid before 0.4 allow remote attackers to hijack th…

  • Unscored —
    CVE-2008-5667 Public exploit

    The scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2008-5669

    index.php in the comments preview section in Textpattern (aka Txp CMS) 4.0.5 allows remote attackers to cause a denial …

  • Unscored —
    CVE-2008-5671

    PHP remote file inclusion vulnerability in index.php in Joomla! 1.0.11 through 1.0.14, when RG_EMULATION is enabled in …

  • Unscored —
    CVE-2008-5499 Public exploit EPSS 79%

    Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attacker…