Skip to content
OpenAdvisories

Archive

30 August 2025

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.7
    CVE-2012-10062 Public exploit

    XAMPP WebDAV PHP Upload Authentication Bypass RCE

    A vulnerability in XAMPP, developed by Apache Friends, version 1.7.3's default WebDAV configuration allows remote authenticated attackers to upload and execute arbitrary PHP code. The WebDAV service, accessible via /webdav/, accepts HTTP PUT requests using de…

  • High 8.4
    CVE-2010-10017 Public exploit

    WM Downloader 3.1.2.2 Buffer Overflow via Malformed M3U File

    WM Downloader version 3.1.2.2 is vulnerable to a buffer overflow when processing a specially crafted .m3u playlist file. The application fails to properly validate input length, allowing an attacker to overwrite structured exception handler (SEH) records and …

  • High 8.6
    CVE-2009-20008 Public exploit

    Green Dam 3.17 URL Processing Buffer Overflow

    Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-…

  • High 8.7
    CVE-2005-10004 Public exploit

    Cacti graph_view.php RCE via graph_start Parameter Injection

    Cacti versions prior to 0.8.6-d contain a remote command execution vulnerability in the graph_view.php script. An authenticated user can inject arbitrary shell commands via the graph_start GET parameter, which is improperly handled during graph rendering. Thi…

  • High 7.5
    CVE-2008-20001 Public exploit

    activePDF WebGrabber ActiveX Control Buffer Overflow

    activePDF WebGrabber version 3.8.2.0 contains a stack-based buffer overflow vulnerability in the GetStatus() method of the APWebGrb.ocx ActiveX control. By passing an overly long string to this method, a remote attacker can execute arbitrary code in the conte…