Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
January

CVEs published in January 2008

499 vulnerabilities, 78 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

moodleCross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other...CVE-2008-0123Public exploit4.3 MediumJanuary 12, 2008
vlc Debianvlc - multiple vulnerabilitiesDTSA-108-1Fix availableNo scoreJanuary 12, 2008
apache http server, canonical ubuntu linux, fedoraproject fedora +2 moremod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40...CVE-2008-0005Fix availableEPSS 14.7%4.3 MediumJanuary 12, 2008
apache http server** DISPUTED ** Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x...CVE-2007-6423Disputed7.8 HighJanuary 12, 2008
apache http server, canonical ubuntu linux +1 moreCross-site request forgery (CSRF) vulnerability in the balancer-manager in mod_proxy_balancer for...CVE-2007-6420Fix available4.3 MediumJanuary 12, 2008
sun java system identity managerOpen redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1...CVE-2008-02415.8 MediumJanuary 11, 2008
sun java system identity manager/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows...CVE-2008-0240Public exploit4.3 MediumJanuary 11, 2008
sun java system identity managerMultiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1...CVE-2008-0239Public exploit4.3 MediumJanuary 11, 2008
xine xine-libMultiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in...CVE-2008-02387.5 HighJanuary 11, 2008
microsoft rich textbox controlThe Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to...CVE-2008-0237Public exploitEPSS 20.5%6.8 MediumJanuary 11, 2008
microsoft visual foxproAn ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to...CVE-2008-0236Public exploitEPSS 17.4%5.8 MediumJanuary 11, 2008
microsoft vfp ole server activex controlThe Microsoft VFP_OLE_Server ActiveX control allows remote attackers to execute arbitrary code by...CVE-2008-0235EPSS 29.2%10.0 HighJanuary 11, 2008
apple quicktimeBuffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP...CVE-2008-0234Public exploitEPSS 12.4%9.3 HighJanuary 11, 2008
zero cms cmsUnrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers...CVE-2008-0233Public exploit7.5 HighJanuary 11, 2008
horde framework, groupware webmail edition, horde +1 more +3 moreIMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition...CVE-2007-6018Fix available5.8 MediumJanuary 11, 2008
zero cms cmsMultiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute...CVE-2008-0232Public exploit7.5 HighJanuary 11, 2008
tuned studios classic theme, endless, freeze theme +4 more +6 moreMultiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2)...CVE-2008-0231Public exploit7.5 HighJanuary 11, 2008
osdatePHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier...CVE-2008-0230Public exploit7.5 HighJanuary 11, 2008
level one wbr-3460aThe telnet service in LevelOne WBR-3460 4-Port ADSL 2/2+ Wireless Modem Router with firmware 1.00...CVE-2008-022910.0 HighJanuary 10, 2008
linksys wrt54glCross-site request forgery (CSRF) vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G...CVE-2008-0228Public exploit9.3 HighJanuary 10, 2008
yasslyaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote attackers to...CVE-2008-02277.5 HighJanuary 10, 2008
mysql, yassl, apple mac os x +2 more +4 moreMultiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other...CVE-2008-0226Public exploitEPSS 91.6%7.5 HighJanuary 10, 2008
xine xine-libHeap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1...CVE-2008-0225Public exploitFix availableEPSS 15.0%6.4 MediumJanuary 10, 2008
runcmsSQL injection vulnerability in index.php in the Newbb_plus 0.92 and earlier module in RunCMS 1.6...CVE-2008-0224Public exploit7.5 HighJanuary 10, 2008
justsystem ichitaro, ichitaro lite2, ichitaro viewer +2 moreBuffer overflow in JustSystems JSFC.DLL, as used in multiple JustSystems products such as...CVE-2008-02239.3 HighJanuary 10, 2008
wordpress filemanagerUnrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin...CVE-2008-0222Public exploit7.5 HighJanuary 10, 2008
gateway weblaunchDirectory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX...CVE-2008-0221Public exploit9.3 HighJanuary 10, 2008
gateway weblaunch, cweblaunchctl activex control +1 moreMultiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX...CVE-2008-0220Public exploitEPSS 15.7%7.5 HighJanuary 10, 2008
php webquest webquestSQL injection vulnerability in soporte_horizontal_w.php in PHP Webquest 2.6 allows remote...CVE-2008-0219Public exploit7.5 HighJanuary 10, 2008
merak icewarp mail serverCross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows...CVE-2008-0218Public exploit4.3 MediumJanuary 10, 2008
ibm aixTrusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the...CVE-2007-66802.1 LowJanuary 10, 2008
ibm websphere application serverUnspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1...CVE-2007-667910.0 HighJanuary 10, 2008
uebimiau webmailUebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set...CVE-2008-0210Public exploit6.4 MediumJanuary 10, 2008
snitz communications forums 2000Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows...CVE-2008-02095.8 MediumJanuary 10, 2008
snitz communications forums 2000Cross-site scripting (XSS) vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier...CVE-2008-02084.3 MediumJanuary 10, 2008
pro search searchMultiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote...CVE-2008-0207Public exploit4.3 MediumJanuary 10, 2008
wordpress captchaMultiple cross-site scripting (XSS) vulnerabilities in captcha\captcha.php in the Captcha! 2.5d...CVE-2008-02064.3 MediumJanuary 10, 2008
wordpress math comment spam protection pluginMultiple cross-site request forgery (CSRF) vulnerabilities in math-comment-spam-protection.php in...CVE-2008-02054.3 MediumJanuary 10, 2008
wordpress math comment spam protection pluginMultiple cross-site scripting (XSS) vulnerabilities in math-comment-spam-protection.php in the...CVE-2008-02044.3 MediumJanuary 10, 2008
wordpress cryptographpMultiple cross-site scripting (XSS) vulnerabilities in cryptographp/admin.php in the Cryptographp...CVE-2008-02034.3 MediumJanuary 10, 2008
expressionengineCRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote...CVE-2008-02024.3 MediumJanuary 10, 2008
expressionengineCross-site scripting (XSS) vulnerability in index.php in ExpressionEngine 1.2.1 and earlier...CVE-2008-02014.3 MediumJanuary 10, 2008
medialand rotabanner localMultiple cross-site scripting (XSS) vulnerabilities in account/index.html in RotaBanner Local 3...CVE-2008-02004.3 MediumJanuary 10, 2008
pro search searchPRO-Search 0.17 and earlier allows remote attackers to cause a denial of service via certain...CVE-2008-01995.0 MediumJanuary 10, 2008
wp-contactform project wp-contactformMultiple cross-site request forgery (CSRF) vulnerabilities in wp-contact-form/options-contactform...CVE-2008-01984.3 MediumJanuary 10, 2008
wordpress wp-contactformMultiple cross-site scripting (XSS) vulnerabilities in wp-contact-form/options-contactform.php in...CVE-2008-01974.3 MediumJanuary 10, 2008
wordpressMultiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote...CVE-2008-0196Fix available5.0 MediumJanuary 10, 2008
wordpressWordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty...CVE-2008-0195Fix available5.0 MediumJanuary 10, 2008
wordpressDirectory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows...CVE-2008-0194Fix available7.5 HighJanuary 10, 2008
wordpressCross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and...CVE-2008-0193Public exploitFix available4.3 MediumJanuary 10, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open