Skip to content
OpenAdvisories

Archive

26 December 2008

Vulnerabilities first published on this day (UTC), newest first.

← November 2008 2008 / December /26 January 2009 →
  1. 120
  2. 26
  3. 317
  4. 4 
  5. 541
  6. 6 
  7. 7 
  8. 820
  9. 930
  10. 1041
  11. 1118
  12. 1249
  13. 131
  14. 14 
  15. 1526
  16. 1624
  17. 1772
  18. 1817
  19. 1926
  20. 20 
  21. 21 
  22. 2211
  23. 238
  24. 2410
  25. 25 
  26. 2627
  27. 27 
  28. 28 
  29. 297
  30. 3031
  31. 3126
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Unscored —
    CVE-2008-5498 Public exploit

    Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the c…

  • Unscored —
    CVE-2008-5742 Public exploit

    Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbi…

  • Unscored —
    CVE-2008-5737 Public exploit

    SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-5738 Public exploit

    Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by …

  • Unscored —
    CVE-2008-5736 Public exploit

    Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-…

  • Unscored —
    CVE-2008-5739 Public exploit

    SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-5735 Public exploit

    Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2008-5727 Public exploit

    SQL injection vulnerability in modules/auth/password_recovery.php in AIST NetCat 3.12 and earlier, when magic_quotes_gp…

  • Unscored —
    CVE-2008-5732 Public exploit EPSS 13%

    Unrestricted file upload vulnerability in lib/image_upload.php in KafooeyBlog 1.55b allows remote attackers to execute …

  • Unscored —
    CVE-2008-5733 Public exploit

    SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to…

  • Unscored —
    CVE-2008-5722 Public exploit EPSS 15%

    Buffer overflow in SAWStudio 3.9i allows user-assisted remote attackers to cause a denial of service (application crash…

  • Unscored —
    CVE-2008-5730 Public exploit

    Multiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to have an unknown impac…

  • Unscored —
    CVE-2008-5728 Public exploit

    Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and reg…

  • Unscored —
    CVE-2008-5726 Public exploit

    SQL injection vulnerability in thread.php in stormBoards 1.0.1 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2008-5724 Public exploit

    The Personal Firewall driver (aka epfw.sys) 3.0.672.0 and earlier in ESET Smart Security 3.0.672 and earlier allows loc…

  • Unscored —
    CVE-2008-5729 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to inject ar…

  • Unscored —
    CVE-2008-5731 Public exploit

    The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows …

  • Unscored —
    CVE-2008-5725 Public exploit

    The NT kernel-mode driver (aka pstrip.sys) 5.0.1.1 and earlier in EnTech Taiwan PowerStrip 3.84 and earlier allows loca…