Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
fedoraproject fedora 8 vulnerabilities and exploits
(subscribe to this query)
605
VMScore
CVE-2008-2575
cbrPager prior to 0.9.17 allows user-assisted remote malicious users to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.
Jcoppens Cbrpager
Fedoraproject Fedora 9
Fedoraproject Fedora 8
Fedoraproject Fedora 7
516
VMScore
CVE-2008-2951
Open redirect vulnerability in the search script in Trac prior to 0.10.5 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.
Edgewall Trac
Fedoraproject Fedora 9
Fedoraproject Fedora 8
516
VMScore
CVE-2008-3222
Session fixation vulnerability in Drupal 5.x prior to 5.9 and 6.x prior to 6.3, when contributed modules "terminate the current request during a login event," allows remote malicious users to hijack web sessions via unknown vectors.
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
668
VMScore
CVE-2008-3223
SQL injection vulnerability in the Schema API in Drupal 6.x prior to 6.3 allows remote malicious users to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
383
VMScore
CVE-2008-3220
Cross-site request forgery (CSRF) vulnerability in Drupal 5.x prior to 5.8 and 6.x prior to 6.3 allows remote malicious users to perform administrative actions via vectors involving deletion of "translated strings."
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
383
VMScore
CVE-2008-3218
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x prior to 6.3 allow remote malicious users to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) unspecified Ope...
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
383
VMScore
CVE-2008-3219
The Drupal filter_xss_admin function in 5.x prior to 5.8 and 6.x prior to 6.3 does not "prevent use of the object HTML tag in administrator input," which has unknown impact and attack vectors, probably related to an insufficient cross-site scripting (XSS) protection mec...
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
383
VMScore
CVE-2008-3221
Cross-site request forgery (CSRF) vulnerability in Drupal 6.x prior to 6.3 allows remote malicious users to perform administrative actions via vectors involving deletion of OpenID identities.
Drupal Drupal
Fedoraproject Fedora 8
Fedoraproject Fedora 9
605
VMScore
CVE-2007-6013
Wordpress 1.5 up to and including 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows malicious users to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from that hash.
Wordpress Wordpress
Fedoraproject Fedora 8
Fedoraproject Fedora 7
505
VMScore
CVE-2008-1145
Directory traversal vulnerability in WEBrick in Ruby 1.8 prior to 1.8.5-p115 and 1.8.6-p114, and 1.9 up to and including 1.9.0-1, when running on systems that support backslash (\) path separators or case-insensitive file names, allows remote malicious users to access arbitrary f...
Ruby-lang Webrick -
Fedoraproject Fedora 8
Fedoraproject Fedora 7
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
CVE-2006-4304
wireless
CVE-2023-23022
local file inclusion
CVE-2024-27058
CVE-2024-33820
open redirect
CVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »