Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
January

CVEs published in January 2008

499 vulnerabilities, 78 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

8e6 r3000 internet filter8e6 R3000 Internet Filter 2.0.05.33, and other versions before 2.0.11, allows remote attackers to...CVE-2008-0372Public exploit5.0 MediumJanuary 22, 2008
alilg alitalkMultiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic_quotes_gpc is disabled,...CVE-2008-0371Public exploit6.8 MediumJanuary 22, 2008
cpanelCross-site scripting (XSS) vulnerability in dohtaccess.html in cPanel before 11.17 build 19417...CVE-2008-03704.3 MediumJanuary 22, 2008
winamp nullsoft winampMultiple stack-based buffer overflows in in_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote...CVE-2008-0065Public exploitEPSS 61.3%10.0 HighJanuary 22, 2008
debian linuxscponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and...CVE-2007-64158.5 HighJanuary 21, 2008
apache tomcatThe SingleSignOn Valve (org.apache.catalina.authenticator.SingleSignOn) in Apache Tomcat before 5...CVE-2008-0128Public exploitEPSS 19.6%5.0 MediumJanuary 20, 2008
ibm informix dynamic serverMultiple unspecified programs in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allow...CVE-2008-03696.9 MediumJanuary 18, 2008
ibm informix dynamic serveronedcu in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allows local users to create...CVE-2008-03687.2 HighJanuary 18, 2008
mozilla firefoxMozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic...CVE-2008-03675.0 MediumJanuary 18, 2008
core security technologies forceCORE FORCE before 0.95.172 does not properly validate arguments to SSDT hook handler functions in...CVE-2008-03667.2 HighJanuary 18, 2008
core security technologies forceMultiple buffer overflows in CORE FORCE before 0.95.172 allow local users to cause a denial of...CVE-2008-0365Public exploit7.2 HighJanuary 18, 2008
bittorrent, utorrent +1 moreBuffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier, and 1.8...CVE-2008-0364Public exploit5.0 MediumJanuary 18, 2008
x.org xserver, sun solaris libfont, solaris libxfont +2 moreBuffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on...CVE-2008-0006Fix available7.5 HighJanuary 18, 2008
x.org evi, mit-shm, xserver +2 moreMultiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to...CVE-2007-6429Fix available9.3 HighJanuary 18, 2008
x.org tog-cup, xserver +1 moreThe ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4...CVE-2007-6428Fix available5.0 MediumJanuary 18, 2008
apple mac os x, canonical ubuntu linux, debian linux +7 more +9 moreThe XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute...CVE-2007-6427Fix available9.3 HighJanuary 18, 2008
x.org xserverX.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a...CVE-2007-5958Public exploitFix available5.0 MediumJanuary 18, 2008
x.org xserver, xfree86 project xfree86-misc +1 moreArray index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context...CVE-2007-5760Fix available9.3 HighJanuary 18, 2008
clever copy copyMultiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to...CVE-2008-03637.5 HighJanuary 18, 2008
clever copy copyCross-site scripting (XSS) vulnerability in gallery.php in Clever Copy 3.0 and earlier allows...CVE-2008-03624.3 MediumJanuary 18, 2008
instituto politicnico nacional gradmanDirectory traversal vulnerability in agregar_info.php in GradMan 0.1.3 and earlier allows remote...CVE-2008-0361Public exploit4.3 MediumJanuary 18, 2008
blog cms cmsMultiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute...CVE-2008-0360Public exploit7.5 HighJanuary 18, 2008
blog cms cmsMultiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to...CVE-2008-0359Public exploit4.3 MediumJanuary 18, 2008
pixelpostSQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to execute...CVE-2008-0358Public exploit6.8 MediumJanuary 18, 2008
galaxyscripts mini file hostDirectory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and...CVE-2008-0357Public exploit4.3 MediumJanuary 18, 2008
citrix access essentials, desktop server, metaframe presentation server +1 more +3 moreBuffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation...CVE-2008-0356EPSS 73.0%10.0 HighJanuary 18, 2008
phpecho cms cmsSQL injection vulnerability in index.php in the forum module in PHPEcho CMS, probably 2.0-rc3 and...CVE-2008-0355Public exploit7.5 HighJanuary 18, 2008
ibm lotus sametimeCross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1...CVE-2008-03544.3 MediumJanuary 18, 2008
php-residenceSQL injection vulnerability in visualizza_tabelle.php in php-residence 0.7.2 and 1.0 allows...CVE-2008-0353Public exploit7.5 HighJanuary 18, 2008
linux kernelThe Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service ...CVE-2008-0352Public exploitEPSS 10.4%7.8 HighJanuary 17, 2008
evilsentineladmin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA...CVE-2008-0351Public exploit5.0 MediumJanuary 17, 2008
evilsentineladmin/index.php in Evilsentinel 1.0.9 and earlier sends a redirect to the web browser but does...CVE-2008-0350Public exploit7.5 HighJanuary 17, 2008
oracle application server, collaboration suite, database server +2 more +4 moreUnspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD...CVE-2008-034910.0 HighJanuary 17, 2008
oracle application server, collaboration suite, database server +2 more +4 moreMultiple unspecified vulnerabilities in the PeopleTools component in Oracle PeopleSoft Enterprise...CVE-2008-034810.0 HighJanuary 17, 2008
oracle application server, collaboration suite, application server 9i +3 more +5 moreUnspecified vulnerability in the Oracle Ultra Search component in Oracle Collaboration Suite 10.1...CVE-2008-034710.0 HighJanuary 17, 2008
oracle application server, e-business suite, collaboration suite +2 more +4 moreUnspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1...CVE-2008-034610.0 HighJanuary 17, 2008
oracle application server, collaboration suite, database server +2 more +4 moreUnspecified vulnerability in the Core RDBMS component in Oracle Database 11.1.0.6 has unknown...CVE-2008-034510.0 HighJanuary 17, 2008
oracle application server, collaboration suite, database server +2 more +4 moreUnspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 and 10.2.0...CVE-2008-034410.0 HighJanuary 17, 2008
oracle application server, collaboration suite, database server +2 more +4 moreUnspecified vulnerability in the Oracle Spatial component in Oracle Database 9.0.1.5 FIPS+, 9.2.0...CVE-2008-034310.0 HighJanuary 17, 2008
oracle database serverUnspecified vulnerability in the Upgrade/Downgrade component in Oracle Database 9.2.0.8, 10.1.0.5...CVE-2008-034210.0 HighJanuary 17, 2008
oracle database serverUnspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+ and...CVE-2008-034110.0 HighJanuary 17, 2008
oracle application server, collaboration suite, database server +2 more +4 moreMultiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0...CVE-2008-034010.0 HighJanuary 17, 2008
oracle database serverUnspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5...CVE-2008-0339Public exploitEPSS 14.5%10.0 HighJanuary 17, 2008
boostThe get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost...CVE-2008-01725.0 MediumJanuary 17, 2008
boost, boost regex library +1 moreregex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1...CVE-2008-0171Fix available5.0 MediumJanuary 17, 2008
miniweb http server http serverDirectory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP...CVE-2008-0338Public exploit5.0 MediumJanuary 17, 2008
miniweb http server http serverHeap-based buffer overflow in the _mwProcessReadSocket function in http.c in MiniWeb HTTP Server...CVE-2008-0337Public exploit7.5 HighJanuary 17, 2008
bugtracker.netMultiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow...CVE-2008-03364.3 MediumJanuary 17, 2008
bugtracker.netCross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote attackers...CVE-2008-03354.3 MediumJanuary 17, 2008
pmachine proCross-site scripting (XSS) vulnerability in pm/language/spanish/preferences.php in PMachine Pro 2...CVE-2008-0334Public exploit2.6 LowJanuary 17, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open