CVEs published in May 2008

384 vulnerabilities, 52 critical, 0 exploited.

• wordpress upload file plugin SQL injection vulnerability in wp-uploadfile.php in the Upload File plugin for WordPress allows... CVE-2008-2510 Public exploit 7.5 HighMay 29, 2008
• excuse online online SQL injection vulnerability in pwd.asp in Excuse Online allows remote attackers to execute... CVE-2008-2509 Public exploit 7.5 HighMay 29, 2008
• tr script news script news Cross-site scripting (XSS) vulnerability in news.php in Tr Script News 2.1 allows remote... CVE-2008-2508 Public exploit 4.3 MediumMay 29, 2008
• brown bear software calcium Cross-site scripting (XSS) vulnerability in Calcium40.pl in Brown Bear Software Calcium 3.10 and... CVE-2008-2507 Public exploit 4.3 MediumMay 29, 2008
• simpel side weblosning Multiple SQL injection vulnerabilities in Simpel Side Weblosning 1 through 4 allow remote... CVE-2008-2506 Public exploit 7.5 HighMay 29, 2008
• simpel side weblosninger Cross-site scripting (XSS) vulnerability in result.php in Simpel Side Weblosning 1 through 4... CVE-2008-2505 Public exploit 4.3 MediumMay 29, 2008
• simpel side netbutik Multiple SQL injection vulnerabilities in Simpel Side Netbutik 1 through 4 allow remote attackers... CVE-2008-2504 Public exploit 7.5 HighMay 29, 2008
• sourceforge emule x-ray Buffer overflow in Uploadlist in eMule X-Ray before 1.4 has unknown impact and remote attack... CVE-2008-2503 9.3 HighMay 29, 2008
• emule x ray Unspecified vulnerability in the web server in eMule X-Ray before 1.4 allows remote attackers to... CVE-2008-2502 7.5 HighMay 29, 2008
• henning stoverud phphotoalbum Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute... CVE-2008-2501 Public exploit 7.5 HighMay 29, 2008
• mambo mostlyce Cross-site scripting (XSS) vulnerability in the MOStlyContent Editor (MOStlyCE) component before... CVE-2008-2500 4.3 MediumMay 29, 2008
• ibm lotus sametime Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM... CVE-2008-2499 Public exploit EPSS 77.5% 7.5 HighMay 29, 2008
• emc corporation alphastor Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent... CVE-2008-2158 Public exploit EPSS 58.4% 10.0 HighMay 29, 2008
• emc corporation alphastor robotd in the Library Manager in EMC AlphaStor 3.1 SP1 for Windows allows remote attackers to... CVE-2008-2157 EPSS 35.8% 10.0 HighMay 29, 2008
• cisco ciscoworks common services Unspecified vulnerability in Cisco CiscoWorks Common Services 3.0.3 through 3.1.1 allows remote... CVE-2008-2054 9.3 HighMay 29, 2008
• samba, canonical ubuntu linux, debian linux +2 more Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through... CVE-2008-1105 Public exploitFix available EPSS 69.1% 7.5 HighMay 29, 2008
• alivemedia alive mp3 wav converter, orion studios cinematicmp3, ussun power audio cd burner +3 more +5 more Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft... CVE-2008-0959 6.8 MediumMay 29, 2008
• nctsoft nctaudioeditor activex control Multiple stack-based buffer overflows in the Online Media Technologies NCTSoft NCTAudioGrabber2... CVE-2008-0958 9.3 HighMay 29, 2008
• creative software autoupdate engine Stack-based buffer overflow in the Creative Software AutoUpdate Engine ActiveX control in CTSUEng... CVE-2008-0955 Public exploit EPSS 41.2% 9.3 HighMay 29, 2008
• openssl, canonical ubuntu linux +1 more OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS... CVE-2008-1672 Fix available 4.3 MediumMay 29, 2008
• openssl Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are... CVE-2008-0891 Fix available 4.3 MediumMay 29, 2008
• mambo-foundation mambo Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magic_quotes_gpc... CVE-2008-2498 7.5 HighMay 28, 2008
• mambo-foundation mambo CRLF injection vulnerability in Mambo before 4.6.4 allows remote attackers to inject arbitrary... CVE-2008-2497 5.0 MediumMay 28, 2008
• quate cms Multiple cross-site scripting (XSS) vulnerabilities in Quate CMS 0.3.4 allow remote attackers to... CVE-2008-2496 Public exploit 4.3 MediumMay 28, 2008
• pancake zina Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an... CVE-2008-2495 7.5 HighMay 28, 2008
• pancake zina Cross-site scripting (XSS) vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to... CVE-2008-2494 4.3 MediumMay 28, 2008
• badongo campus bulletin board Cross-site scripting (XSS) vulnerability in post3/Book.asp in Campus Bulletin Board 3.4 allows... CVE-2008-2493 Public exploit 4.3 MediumMay 28, 2008
• badongo campus bulletin board Multiple SQL injection vulnerabilities in Campus Bulletin Board 3.4 allow remote attackers to... CVE-2008-2492 Public exploit 7.5 HighMay 28, 2008
• hotscripts ablespace SQL injection vulnerability in adv_cat.php in AbleSpace 1.0 allows remote attackers to execute... CVE-2008-2491 Public exploit 7.5 HighMay 28, 2008
• typo3 kj imagelightbox2 Cross-site scripting (XSS) vulnerability in the KJ Image Lightbox 2 (aka kj_imagelightbox2)... CVE-2008-2490 4.3 MediumMay 28, 2008
• typo3 sg zfelib SQL injection vulnerability in the Library for Frontend Plugins (aka sg_zfelib) extension 1.1.512... CVE-2008-2489 7.5 HighMay 28, 2008
• beaussier roomphplanning admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which... CVE-2008-2488 Public exploit 6.5 MediumMay 28, 2008
• maxsite SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to... CVE-2008-2487 Public exploit 7.5 HighMay 28, 2008
• emule plus Unspecified vulnerability in eMule Plus before 1.2d has unknown impact and attack vectors related... CVE-2008-2486 10.0 HighMay 28, 2008
• pcpin chat Cross-site scripting (XSS) vulnerability in the URL redirection script (inc/url_redirection.inc... CVE-2008-2485 4.3 MediumMay 28, 2008
• xomol cms SQL injection vulnerability in index.php in Xomol CMS 1.20071213, when magic_quotes_gpc is... CVE-2008-2484 Public exploit 6.8 MediumMay 28, 2008
• xomol cms Directory traversal vulnerability in index.php in Xomol CMS 1.20071213 allows remote attackers to... CVE-2008-2483 Public exploit 6.8 MediumMay 28, 2008
• insanevisions onecms Directory traversal vulnerability in install_mod.php in insanevisions OneCMS 2.5 allows remote... CVE-2008-2482 Public exploit 7.5 HighMay 28, 2008
• phpraider PHP remote file inclusion vulnerability in authentication/phpbb3/phpbb3.functions.php in... CVE-2008-2481 Public exploit 10.0 HighMay 28, 2008
• plusphp short url multi-user script PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6... CVE-2008-2480 Public exploit 10.0 HighMay 28, 2008
• badongo phpfix Multiple SQL injection vulnerabilities in phpFix 2.0 allow remote attackers to execute arbitrary... CVE-2008-2479 Public exploit 6.8 MediumMay 28, 2008
• cpanel ** DISPUTED ** scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and... CVE-2008-2478 Public exploitDisputed 8.5 HighMay 28, 2008
• mx-system mxbb portal SQL injection vulnerability in index.php in MxBB (aka MX-System) Portal 2.7.3 allows remote... CVE-2008-2477 Public exploit 7.5 HighMay 28, 2008
• netious cms SQL injection vulnerability in index.php in Netious CMS 0.4 allows remote attackers to execute... CVE-2008-2461 Public exploit 7.5 HighMay 27, 2008
• vbulletin SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute... CVE-2008-2460 7.5 HighMay 27, 2008
• entertainmentscript Directory traversal vulnerability in page.php in EntertainmentScript 1.4.0 allows remote... CVE-2008-2459 Public exploit 6.8 MediumMay 27, 2008
• 4shared starsgames control panel Cross-site scripting (XSS) vulnerability in index.php in Starsgames Control Panel 4.6.2 and... CVE-2008-2458 Public exploit 4.3 MediumMay 27, 2008
• bitmixsoft php-jokesite SQL injection vulnerability in jokes_category.php in PHP-Jokesite 2.0 allows remote attackers to... CVE-2008-2457 Public exploit 7.5 HighMay 27, 2008
• comicshout SQL injection vulnerability in index.php in ComicShout 2.5 and earlier allows remote attackers to... CVE-2008-2456 Public exploit 7.5 HighMay 27, 2008
• e107coders e107 blog engine SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows... CVE-2008-2455 Public exploit 7.5 HighMay 27, 2008
• Show olderLoading…