Skip to content
OpenAdvisories

Archive

December 2008

Vulnerabilities first published in this month (UTC), newest first.

← November 2008 2008 / December January 2009 →
  1. 120
  2. 26
  3. 317
  4. 4 
  5. 541
  6. 6 
  7. 7 
  8. 820
  9. 930
  10. 1041
  11. 1118
  12. 1249
  13. 131
  14. 14 
  15. 1526
  16. 1624
  17. 1772
  18. 1817
  19. 1926
  20. 20 
  21. 21 
  22. 2211
  23. 238
  24. 2410
  25. 25 
  26. 2627
  27. 27 
  28. 28 
  29. 297
  30. 3031
  31. 3126
All Critical High Medium Low Exploited only Public exploit

229 results · Clear filters · Feed

  • Unscored —
    CVE-2008-5580 Public exploit

    mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metachar…

  • Unscored —
    CVE-2008-5581 Public exploit

    PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to ex…

  • Unscored —
    CVE-2008-5582 Public exploit

    SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to e…

  • Unscored —
    CVE-2008-5560 Public exploit

    PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attack…

  • Unscored —
    CVE-2008-5573 Public exploit

    SQL injection vulnerability in the login feature in Poll Pro 2.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-5561 Public exploit

    SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id paramete…

  • Unscored —
    CVE-2008-5584 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ProjectPier 0.8 and earlier allow remote attackers to inject arb…

  • Unscored —
    CVE-2008-5572 Public exploit

    Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, w…

  • Unscored —
    CVE-2008-5579 Public exploit

    Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read…

  • Unscored —
    CVE-2008-5551 Public exploit EPSS 14%

    The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism…

  • Unscored —
    CVE-2008-5491 Public exploit

    SQL injection vulnerability in edit.php in SlimCMS 1.0.0 and earlier allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2008-5497 Public exploit

    BandSite CMS 1.1.4 allows remote attackers to bypass authentication and gain administrative access by setting the login…

  • Unscored —
    CVE-2008-5493 Public exploit

    SQL injection vulnerability in track.php in PHPStore Wholesales (aka Wholesale) allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-5489 Public exploit

    SQL injection vulnerability in channel_detail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to…

  • Unscored —
    CVE-2008-5490 Public exploit

    SQL injection vulnerability in index.php in PHPStore Yahoo Answers allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-5492 Public exploit EPSS 35%

    Heap-based buffer overflow in the PDFVIEW.PdfviewCtrl.1 ActiveX control in pdfview.ocx 2.0.0.1 in VeryDOC PDF Viewer OC…

  • Unscored —
    CVE-2008-5494 Public exploit

    SQL injection vulnerability in the Contact Information Module (com_contactinfo) component 1.0 for Joomla! allows remote…

  • Unscored —
    CVE-2008-5487 Public exploit

    Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject…

  • Unscored —
    CVE-2008-5486 Public exploit

    SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-5496 Public exploit

    SQL injection vulnerability in showcategory.php in PozScripts Business Directory Script allows remote attackers to exec…

  • Unscored —
    CVE-2008-4844 Public exploit EPSS 67%

    Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet…

  • Unscored —
    CVE-2008-5431 Public exploit

    Teamtek Universal FTP Server 1.0.44 allows remote attackers to cause a denial of service via (1) a certain CWD command,…

  • Unscored —
    CVE-2006-7235 Public exploit

    Teamtek Universal FTP Server 1.0.50 allows remote attackers to cause a denial of service (daemon crash or hang) via (1)…

  • Unscored —
    CVE-2008-4255 Public exploit EPSS 54%

    Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) …

  • Unscored —
    CVE-2008-4841 Public exploit EPSS 43%

    The WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows …

  • Unscored —
    CVE-2008-5418 Public exploit

    Directory traversal vulnerability in login.php in the PunPortal module before 2.0 for PunBB allows remote attackers to …

  • Unscored —
    CVE-2008-5416 Public exploit EPSS 87%

    Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop…

  • Unscored —
    CVE-2008-5304 Public exploit

    Cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2008-5305 Public exploit

    Eval injection vulnerability in TWiki before 4.2.4 allows remote attackers to execute arbitrary Perl code via the %SEAR…

  • Unscored —
    CVE-2008-5409 Public exploit EPSS 11%

    Unspecified vulnerability in the pdf.xmd module in (1) BitDefender Free Edition 10 and Antivirus Standard 10, (2) BullG…

  • Unscored —
    CVE-2008-5406 Public exploit

    Stack-based buffer overflow in Apple QuickTime Player 7.5.5 and iTunes 8.0.2.20 allows remote attackers to cause a deni…

  • Unscored —
    CVE-2008-5405 Public exploit EPSS 47%

    Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier…

  • High —
    CVE-2008-4310 Public exploit EPSS 14%

    WEBrick Denial of Service Vulnerability

    httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request. NOTE: this issue exists because of an incomplete fix for CVE-2008-…

    webrick RubyGems
  • Unscored —
    CVE-2008-5079 Public exploit

    net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of ser…

  • Unscored —
    CVE-2008-5394 Public exploit

    /bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the ut…

    shadow Debian
  • Unscored —
    CVE-2008-5383 Public exploit

    Stack-based buffer overflow in National Instruments Electronics Workbench allows user-assisted attackers to cause a den…

  • Unscored —
    CVE-2008-5377 Public exploit

    pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pstopdf.log temp…

    cups Debian
  • Unscored —
    CVE-2008-5365 Public exploit

    SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute…

  • Unscored —
    CVE-2008-5353 Public exploit EPSS 86%

    The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; …

  • Unscored —
    CVE-2008-5338 Public exploit

    Cross-site scripting (XSS) vulnerability in info.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote atta…