| Max CVSS | 9.3 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-4246 | 5.0 |
Unspecified vulnerability in Denora IRC Stats Server before 1.4.1 allows remote IRC servers to cause a denial of service (application crash) via a crafted CTCP response.
|
14-02-2024 - 01:17 | 25-09-2008 - 19:25 | |
| CVE-2008-2470 | 9.3 |
The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service (memory corruption and browser crash) and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results i
|
04-02-2020 - 18:48 | 18-09-2008 - 18:00 | |
| CVE-2008-4151 | 5.0 |
Directory traversal vulnerability in collect.php in CYASK 3.x allows remote attackers to read arbitrary files via a .. (dot dot) in the neturl parameter.
|
11-10-2018 - 20:51 | 24-09-2008 - 05:41 | |
| CVE-2008-3662 | 5.0 |
Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie.
|
11-10-2018 - 20:49 | 18-09-2008 - 18:00 | |
| CVE-2008-4173 | 7.5 |
SQL injection vulnerability in ProArcadeScript 1.3 allows remote attackers to execute arbitrary SQL commands via the random parameter to the default URI.
|
29-09-2017 - 01:32 | 22-09-2008 - 18:34 | |
| CVE-2008-6459 | 7.5 |
SQL injection vulnerability in the auto BE User Registration (autobeuser) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
17-08-2017 - 01:29 | 13-03-2009 - 10:30 | |
| CVE-2008-4153 | 5.0 |
The Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, does not perform access checks for a node before displaying comments, which allows remote attackers to obtain sensitive information.
|
08-08-2017 - 01:32 | 24-09-2008 - 05:41 | |
| CVE-2008-4147 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Mailsave module 5.x before 5.x-3.3 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an attached file that has a modi
|
08-08-2017 - 01:32 | 24-09-2008 - 05:41 | |
| CVE-2008-4152 | 3.5 |
Cross-site scripting (XSS) vulnerability in the Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via a node title.
|
08-08-2017 - 01:32 | 24-09-2008 - 05:41 | |
| CVE-2008-4148 | 7.5 |
SQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to composing queries without using the Dr
|
08-08-2017 - 01:32 | 24-09-2008 - 05:41 | |
| CVE-2008-4129 | 4.0 |
Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing symbolic links, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files via vectors related to the archive up
|
08-08-2017 - 01:32 | 18-09-2008 - 20:00 | |
| CVE-2008-4130 | 4.3 |
Cross-site scripting (XSS) vulnerability in Gallery 2.x before 2.2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted Flash animation, related to the ability of the animation to "interact with the embedding page."
|
08-08-2017 - 01:32 | 18-09-2008 - 20:00 | |
| CVE-2008-3230 | 1.9 |
The ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application crash) via a crafted GIF file, possibly related to gstreamer, as demonstrated by lol-giftopnm.gif.
|
08-08-2017 - 01:31 | 18-07-2008 - 16:41 | |
| CVE-2016-4875 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the IVYWE (1) Assist plugin before 1.1.2.test20160906, (2) dataBox plugin before 0.0.0.20160906, and (3) userBox plugin before 0.0.0.20160906 for Geeklog allow remote attackers to inject arbitrar
|
21-04-2017 - 17:42 | 14-04-2017 - 18:59 | |
| CVE-2001-1289 | 5.0 |
Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters.
|
10-09-2008 - 19:10 | 29-07-2001 - 04:00 |