Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
January

CVEs published in January 2008

499 vulnerabilities, 78 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

afterlogic mailbee webmail proDirectory traversal vulnerability in download_view_attachment.aspx in AfterLogic MailBee WebMail...CVE-2008-0333Public exploitEPSS 11.7%5.0 MediumJanuary 17, 2008
ariaDirectory traversal vulnerability in arias/help/effect.php in aria 0.99-6 allows remote attackers...CVE-2008-0332Public exploit5.0 MediumJanuary 17, 2008
funkwerk system softwareUnspecified vulnerability in Funkwerk System Software before 7.4.1 PATCH 9 for certain Funkwerk...CVE-2008-03317.8 HighJanuary 17, 2008
radiator radius serverOpen System Consultants (OSC) Radiator before 4.0 allows remote attackers to cause a denial of...CVE-2008-03307.8 HighJanuary 17, 2008
julien plesniak lulieblogLulieBlog 1.0.1 and 1.0.2 does not restrict access to (1) article_suppr.php, (2) comment_accepter...CVE-2008-0329Public exploit5.0 MediumJanuary 17, 2008
fascript fanameSQL injection vulnerability in page.php in FaScript FaName 1.0 allows remote attackers to execute...CVE-2008-0328Public exploit7.5 HighJanuary 17, 2008
fascript famp3SQL injection vulnerability in show.php in FaScript FaMp3 1.0 allows remote attackers to execute...CVE-2008-0327Public exploit7.5 HighJanuary 17, 2008
fascript fapersianhackSQL injection vulnerability in class/show.php in FaScript FaPersianHack 1.0 allows remote...CVE-2008-0326Public exploit7.5 HighJanuary 17, 2008
fascript fapersian petitionSQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to...CVE-2008-0325Public exploit7.5 HighJanuary 17, 2008
cisco vpn clientCisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.0090 allows local users to cause a...CVE-2008-0324Public exploit4.9 MediumJanuary 17, 2008
cisco unified communications manager, unified callmanager +1 moreHeap-based buffer overflow in the Certificate Trust List (CTL) Provider service (CTLProvider.exe)...CVE-2008-0027EPSS 57.1%10.0 HighJanuary 17, 2008
menalto gallery webcam moduleUnspecified vulnerability in the WebCam module in Menalto Gallery before 2.2.4 has unknown impact...CVE-2007-669310.0 HighJanuary 17, 2008
menalto galleryOpen redirect vulnerability in Menalto Gallery before 2.2.4 allows remote attackers to redirect...CVE-2007-66926.4 MediumJanuary 17, 2008
menalto galleryMultiple unspecified vulnerabilities in Menalto Gallery before 2.2.4 have unknown impact, related...CVE-2007-669110.0 HighJanuary 17, 2008
menalto galleryThe Gallery Remote module in Menalto Gallery before 2.2.4 does not check permissions for...CVE-2007-669010.0 HighJanuary 17, 2008
menalto galleryMenalto Gallery before 2.2.4 does not properly check for malicious file extensions during file...CVE-2007-66897.5 HighJanuary 17, 2008
menalto galleryUnspecified vulnerability in the Installation application in Menalto Gallery before 2.2.4 has...CVE-2007-668810.0 HighJanuary 17, 2008
menalto galleryMultiple cross-site scripting (XSS) vulnerabilities in Menalto Gallery before 2.2.4 allow remote...CVE-2007-66874.3 MediumJanuary 17, 2008
menalto galleryThe URL rewrite module in Menalto Gallery before 2.2.4 allows attackers to include and execute...CVE-2007-668610.0 HighJanuary 17, 2008
menalto gallery publish xp moduleUnspecified vulnerability in the Publish XP module Menalto Gallery before 2.2.4 allows attackers...CVE-2007-668510.0 HighJanuary 17, 2008
debian apt-listchangesUntrusted search path vulnerability in apt-listchanges.py in apt-listchanges before 2.82 allows...CVE-2008-0302Fix available7.2 HighJanuary 17, 2008
videolan vlcThe RTSP module in VideoLAN VLC 0.8.6d allows remote attackers to cause a denial of service ...CVE-2007-6684Fix available5.0 MediumJanuary 17, 2008
videolan vlcThe browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files...CVE-2007-6683Fix available5.0 MediumJanuary 17, 2008
videolan vlcFormat string vulnerability in the httpd_FileCallBack function (network/httpd.c) in VideoLAN VLC...CVE-2007-6682Public exploitFix availableEPSS 15.1%7.5 HighJanuary 17, 2008
videolan vlcStack-based buffer overflow in modules/demux/subtitle.c in VideoLAN VLC 0.8.6d allows remote...CVE-2007-6681Public exploitFix availableEPSS 17.3%7.5 HighJanuary 17, 2008
python software foundation paramikoParamiko Unsafe randomness usage may allow access to sensitive informationCVE-2008-0299Fix available4.3 MediumJanuary 16, 2008
apple safariKHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service ...CVE-2008-0298Public exploit4.3 MediumJanuary 16, 2008
keil software photokornPhotoKorn allows remote attackers to obtain database credentials via a direct request to update...CVE-2008-0297Public exploit5.0 MediumJanuary 16, 2008
microsoft excel, office, excel viewer +2 moreUnspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office...CVE-2008-0081Public exploitEPSS 57.9%9.8 CriticalJanuary 16, 2008
videolan vlc media playerHeap-based buffer overflow in the libaccess_realrtsp plugin in VideoLAN VLC Media Player 0.8.6d...CVE-2008-0296Public exploitFix availableEPSS 14.6%10.0 HighJanuary 16, 2008
videolan vlc media playerHeap-based buffer overflow in modules/access/rtsp/real_sdpplin.c in the Xine library, as used in...CVE-2008-0295Public exploitFix availableEPSS 11.1%8.5 HighJanuary 16, 2008
freeseatUnspecified vulnerability in the seat-locking implementation in FreeSeat before 1.1.5d allows...CVE-2008-02945.0 MediumJanuary 16, 2008
freeseatUnspecified vulnerability in cron.php in FreeSeat before 1.1.5d, when format.php has certain...CVE-2008-02936.8 MediumJanuary 16, 2008
dansie photo albumCross-site scripting (XSS) vulnerability in photo_album.pl in Dansie Photo Album 1.0 allows...CVE-2008-02924.3 MediumJanuary 16, 2008
hangzhou rui-qiang richstrong cmsSQL injection vulnerability in showproduct.asp in RichStrong CMS allows remote attackers to...CVE-2008-0291Public exploit7.5 HighJanuary 16, 2008
apple quicktimeBuffer overflow in Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code...CVE-2008-00366.8 MediumJanuary 16, 2008
apple quicktimeUnspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial...CVE-2008-00339.3 HighJanuary 16, 2008
apple quicktimeApple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file...CVE-2008-00325.8 MediumJanuary 16, 2008
tibco enterprise message service, rtworks, smartsockets rtserver +2 moreHeap-based buffer overflow in TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4...CVE-2007-565810.0 HighJanuary 16, 2008
tibco enterprise message service, rtworks, smartsockets rtserver +2 moreTIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message...CVE-2007-565710.0 HighJanuary 16, 2008
tibco enterprise message service, rtworks, smartsockets rtserver +2 moreTIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message...CVE-2007-565610.0 HighJanuary 16, 2008
tibco enterprise message service, rtworks, smartsockets rtserver +2 moreTIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message...CVE-2007-565510.0 HighJanuary 16, 2008
digitalhiveMultiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow (1) remote...CVE-2008-0290Public exploit7.5 HighJanuary 16, 2008
mansion productions member area systemPHP remote file inclusion vulnerability in view_func.php in Member Area System (MAS) 1.7 and...CVE-2008-0289Public exploit6.8 MediumJanuary 16, 2008
imagealbumMultiple SQL injection vulnerabilities in ImageAlbum 2.0.0b2 allow remote attackers to execute...CVE-2008-0288Public exploit7.5 HighJanuary 16, 2008
visionburst vcartPHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to...CVE-2008-0287Public exploit6.8 MediumJanuary 16, 2008
freebsdThe script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo...CVE-2008-02176.9 MediumJanuary 16, 2008
freebsdThe ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a...CVE-2008-02162.1 LowJanuary 16, 2008
isc bindOff-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used...CVE-2008-0122Fix availableEPSS 12.4%10.0 HighJanuary 16, 2008
apple safariUnspecified vulnerability in Foundation, as used in Apple iPhone 1.0 through 1.1.2, iPod touch 1...CVE-2008-00356.8 MediumJanuary 16, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open