Skip to content
OpenAdvisories

Archive

December 2008

Vulnerabilities first published in this month (UTC), newest first.

← November 2008 2008 / December January 2009 →
  1. 120
  2. 26
  3. 317
  4. 4 
  5. 541
  6. 6 
  7. 7 
  8. 820
  9. 930
  10. 1041
  11. 1118
  12. 1249
  13. 131
  14. 14 
  15. 1526
  16. 1624
  17. 1772
  18. 1817
  19. 1926
  20. 20 
  21. 21 
  22. 2211
  23. 238
  24. 2410
  25. 25 
  26. 2627
  27. 27 
  28. 28 
  29. 297
  30. 3031
  31. 3126
All Critical High Medium Low Exploited only Public exploit

528 results · Feed

  • Unscored —
    CVE-2008-5775 Public exploit

    SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-5770 Public exploit

    Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attackers to inje…

  • Unscored —
    CVE-2008-5778 Public exploit

    SQL injection vulnerability in report.php in Free Links Directory Script (FLDS) 1.2a allows remote attackers to execute…

  • Unscored —
    CVE-2008-5772 Public exploit

    Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbi…

  • Unscored —
    CVE-2008-5774 Public exploit

    Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2008-5764 Public exploit EPSS 45%

    PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows r…

  • Unscored —
    CVE-2008-5763 Public exploit EPSS 39%

    PHP remote file inclusion vulnerability in slogin_lib.inc.php in Simple Text-File Login Script (SiTeFiLo) 1.0.6 allows …

  • Unscored —
    CVE-2008-5760

    Cross-site scripting (XSS) vulnerability in error413.php in Kerio MailServer before 6.6.2 allows remote attackers to in…

  • Unscored —
    CVE-2008-5757

    Cross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6 and earlier allows re…

  • Unscored —
    CVE-2008-5758

    Cross-site request forgery (CSRF) vulnerability in PHParanoid before 0.5 allows remote attackers to perform unspecified…

  • Unscored —
    CVE-2008-5759 Public exploit

    Cross-site scripting (XSS) vulnerability in FlatnuX CMS (aka Flatnuke3) 2008-12-11 allows remote attackers to inject ar…

  • Unscored —
    CVE-2008-5753 Public exploit

    Stack-based buffer overflow in BulletProof FTP Client 2.63 and 2010 allows user-assisted attackers to execute arbitrary…

  • Unscored —
    CVE-2008-5752 Public exploit

    Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPres…

  • Unscored —
    CVE-2008-5751 Public exploit

    SQL injection vulnerability in index.php in AlstraSoft Web Email Script Enterprise (ESE) allows remote attackers to exe…

  • Unscored —
    CVE-2008-5755 Public exploit

    Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote attackers to execute arbitrary code via a MAP …

  • Unscored —
    CVE-2008-5756 Public exploit

    Buffer overflow in BreakPoint Software Hex Workshop 5.1.4 allows user-assisted attackers to cause a denial of service a…

  • Unscored —
    CVE-2008-5754 Public exploit

    Stack-based buffer overflow in BulletProof FTP Client allows user-assisted attackers to execute arbitrary code via a .b…

  • Unscored —
    CVE-2008-4539

    Heap-based buffer overflow in the Cirrus VGA implementation in (1) KVM before kvm-82 and (2) QEMU on Debian GNU/Linux a…

    qemu Debian
  • Unscored —
    CVE-2008-5750 Public exploit EPSS 21%

    Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to e…

  • Unscored —
    CVE-2008-5746

    Sun SNMP Management Agent (SUNWmasf) 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privi…

  • Unscored —
    CVE-2008-5745 Public exploit EPSS 21%

    Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, inclu…

  • Unscored —
    CVE-2008-5747

    F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a "co…

  • Unscored —
    CVE-2008-5748 Public exploit EPSS 10%

    Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to re…

  • Unscored —
    CVE-2008-5749 Public exploit

    Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-5743

    pdfjam creates the (1) pdf90, (2) pdfjoin, and (3) pdfnup files with a predictable name, which allows local users to ov…

  • Unscored —
    CVE-2008-5744

    Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout…

  • Unscored —
    CVE-2008-5498 Public exploit

    Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the c…

  • Unscored —
    CVE-2008-5742 Public exploit

    Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbi…

  • Unscored —
    CVE-2008-5737 Public exploit

    SQL injection vulnerability in index.php in Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-5738 Public exploit

    Nodstrum MySQL Calendar 1.1 and 1.2 allows remote attackers to bypass authentication and gain administrative access by …

  • Unscored —
    CVE-2008-5736 Public exploit

    Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-…

  • Unscored —
    CVE-2008-5739 Public exploit

    SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2008-5735 Public exploit

    Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2008-5727 Public exploit

    SQL injection vulnerability in modules/auth/password_recovery.php in AIST NetCat 3.12 and earlier, when magic_quotes_gp…

  • Unscored —
    CVE-2008-5721

    SapporoWorks BlackJumboDog (BJD) before 4.2.3 allows remote attackers to bypass authentication and obtain sensitive inf…

  • Unscored —
    CVE-2008-5732 Public exploit EPSS 13%

    Unrestricted file upload vulnerability in lib/image_upload.php in KafooeyBlog 1.55b allows remote attackers to execute …

  • Medium —
    CVE-2008-5720

    Mayaa Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and po…

    com.github.seasarorg.mayaa:mayaa Maven
  • Unscored —
    CVE-2008-5734

    Cross-site scripting (XSS) vulnerability in WebMail Pro in IceWarp Software Merak Mail Server 9.3.2 allows remote attac…

  • Unscored —
    CVE-2008-5719

    Cross-site scripting (XSS) vulnerability in Hitachi Groupmax Web Workflow SDK Set for Active Server Pages before 06-52-…

  • Unscored —
    CVE-2008-5733 Public exploit

    SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to…