Skip to content
OpenAdvisories

Archive

26 December 2008

Vulnerabilities first published on this day (UTC), newest first.

← November 2008 2008 / December /26 January 2009 →
  1. 120
  2. 26
  3. 317
  4. 4 
  5. 541
  6. 6 
  7. 7 
  8. 820
  9. 930
  10. 1041
  11. 1118
  12. 1249
  13. 131
  14. 14 
  15. 1526
  16. 1624
  17. 1772
  18. 1817
  19. 1926
  20. 20 
  21. 21 
  22. 2211
  23. 238
  24. 2410
  25. 25 
  26. 2627
  27. 27 
  28. 28 
  29. 297
  30. 3031
  31. 3126
All Critical High Medium Low Exploited only Public exploit

27 results · Feed

  • Unscored —
    CVE-2008-5743

    pdfjam creates the (1) pdf90, (2) pdfjoin, and (3) pdfnup files with a predictable name, which allows local users to ov…

  • Unscored —
    CVE-2008-5744

    Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout…

  • Unscored —
    CVE-2008-5498 Public exploit

    Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the c…

  • Unscored —
    CVE-2008-5742 Public exploit

    Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbi…

  • Unscored —
    CVE-2008-5737 Public exploit

    SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-5738 Public exploit

    Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by …

  • Unscored —
    CVE-2008-5736 Public exploit

    Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-…

  • Unscored —
    CVE-2008-5739 Public exploit

    SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-5735 Public exploit

    Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2008-5727 Public exploit

    SQL injection vulnerability in modules/auth/password_recovery.php in AIST NetCat 3.12 and earlier, when magic_quotes_gp…

  • Unscored —
    CVE-2008-5721

    SapporoWorks BlackJumboDog (BJD) before 4.2.3 allows remote attackers to bypass authentication and obtain sensitive inf…

  • Unscored —
    CVE-2008-5732 Public exploit EPSS 13%

    Unrestricted file upload vulnerability in lib/image_upload.php in KafooeyBlog 1.55b allows remote attackers to execute …

  • Medium —
    CVE-2008-5720

    Mayaa Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and po…

    com.github.seasarorg.mayaa:mayaa Maven
  • Unscored —
    CVE-2008-5734

    Cross-site scripting (XSS) vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attac…

  • Unscored —
    CVE-2008-5719

    Cross-site scripting (XSS) vulnerability in Hitachi Groupmax Web Workflow SDK Set for Active Server Pages before 06-52-…

  • Unscored —
    CVE-2008-5733 Public exploit

    SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to…

  • Unscored —
    CVE-2008-5718

    The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allo…

    netatalk Debian
  • Unscored —
    CVE-2008-5722 Public exploit EPSS 15%

    Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash…

  • Unscored —
    CVE-2008-5730 Public exploit

    Multiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to have an unknown impac…

  • Unscored —
    CVE-2008-5717

    Cross-site scripting (XSS) vulnerability in Hitachi JP1/Integrated Management - Service Support 08-10 through 08-10-05,…

  • Unscored —
    CVE-2008-5728 Public exploit

    Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and reg…

  • Unscored —
    CVE-2008-5726 Public exploit

    SQL injection vulnerability in thread.php in stormBoards 1.0.1 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-5723

    Directory traversal vulnerability in CGI RESCUE KanniBBS2000 (aka KanniBBS2000i, MiniBBS2000, and MiniBBS2000i) before …

  • Unscored —
    CVE-2008-5724 Public exploit

    The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows loc…

  • Unscored —
    CVE-2008-5729 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to inject ar…

  • Unscored —
    CVE-2008-5731 Public exploit

    The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows …

  • Unscored —
    CVE-2008-5725 Public exploit

    The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows loca…