Max CVSS | 10.0 | Min CVSS | 2.6 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2008-3188 | 5.0 |
libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords.
|
09-02-2024 - 03:19 | 22-07-2008 - 16:41 | |
CVE-2008-3326 | 2.6 |
Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the etitle parameter (blog entry title).
|
01-12-2020 - 14:43 | 25-07-2008 - 16:41 | |
CVE-2008-3325 | 6.0 |
Cross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to modify profile settings and gain privileges as other users via a link or IMG tag to the user edit profile page.
|
01-11-2018 - 15:10 | 25-07-2008 - 16:41 | |
CVE-2008-2641 | 10.0 |
Unspecified vulnerability in Adobe Reader and Acrobat 7.0.9 and earlier, and 8.0 through 8.1.2, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to an "input vali
|
08-08-2017 - 01:31 | 25-06-2008 - 12:36 | |
CVE-2008-3078 | 7.8 |
Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote attackers to read uninitialized memory contents by using JavaScript to read a canvas image.
|
08-08-2017 - 01:31 | 09-07-2008 - 00:41 | |
CVE-2008-0668 | 9.3 |
The excel_read_HLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer s
|
08-03-2011 - 03:05 | 11-02-2008 - 21:00 |