Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
January

CVEs published in January 2008

499 vulnerabilities, 78 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

novemberborn sifrCross-site scripting (XSS) vulnerability in the font rendering functionality in Novemberborn sIFR...CVE-2008-0438Public exploit4.3 MediumJanuary 23, 2008
hp virtual rooms, microsoft activex +1 moreMultiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in...CVE-2008-0437Public exploitEPSS 58.1%10.0 HighJanuary 23, 2008
pd9 software megabbsCross-site scripting (XSS) vulnerability in profile-upload/upload.asp in PD9 Software MegaBBS 1.5...CVE-2008-0436Public exploit4.3 MediumJanuary 23, 2008
ozjournalsDirectory traversal vulnerability in index.php in OZJournals 2.1.1 allows remote attackers to...CVE-2008-0435Public exploit5.0 MediumJanuary 23, 2008
gecad technologies axigen mail serverFormat string vulnerability in the AXIMilter module in AXIGEN Mail Server 5.0.2 allows remote...CVE-2008-0434Public exploitEPSS 10.4%9.3 HighJanuary 23, 2008
agares media phpautovideoPHP remote file inclusion vulnerability in theme/phpAutoVideo/LightTwoOh/sidebar.php in Agares...CVE-2008-0433Public exploit7.5 HighJanuary 23, 2008
agares media phpautovideoCross-site scripting (XSS) vulnerability in index.php in phpAutoVideo 2.21 and earlier allows...CVE-2008-0432Public exploit4.3 MediumJanuary 23, 2008
idmos cmsDirectory traversal vulnerability in administrator/download.php in IDMOS (aka Phoenix) 1.0 allows...CVE-2008-0431Public exploit5.0 MediumJanuary 23, 2008
360 web manager web managerSQL injection vulnerability in form.php in 360 Web Manager 3.0 allows remote attackers to execute...CVE-2008-0430Public exploit7.5 HighJanuary 23, 2008
alstrasoft forum pay per post exchangeSQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange 2.0 allows...CVE-2008-0429Public exploit7.5 HighJanuary 23, 2008
bloofoxcmsMultiple SQL injection vulnerabilities in the login function in system/class_permissions.php in...CVE-2008-0428Public exploit7.5 HighJanuary 23, 2008
bloo bloofoxcmsDirectory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read...CVE-2008-0427Public exploit7.8 HighJanuary 23, 2008
pacercmsMultiple cross-site scripting (XSS) vulnerabilities in submit.php in PacerCMS before 0.6.1 allow...CVE-2008-04264.3 MediumJanuary 23, 2008
frimousseAbsolute path traversal vulnerability in explorerdir.php in Frimousse 0.0.2 allows remote...CVE-2008-0425Public exploit5.0 MediumJanuary 23, 2008
mooseguy blog system mgbsSQL injection vulnerability in blog.php in Mooseguy Blog System (MGBS) 1.0 allows remote...CVE-2008-0424Public exploit7.5 HighJanuary 23, 2008
lama softwareMultiple PHP remote file inclusion vulnerabilities in Lama Software allow remote attackers to...CVE-2008-0423Public exploitEPSS 37.1%6.8 MediumJanuary 23, 2008
boastmachineSQL injection vulnerability in mail.php in boastMachine (aka bMachine) 3.1 and earlier allows...CVE-2008-0422Public exploit7.5 HighJanuary 23, 2008
invision power services gallerySQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to...CVE-2008-0421Public exploit7.5 HighJanuary 23, 2008
cisco application velocity systemCisco Application Velocity System (AVS) before 5.1.0 is installed with default passwords for some...CVE-2008-002910.0 HighJanuary 23, 2008
cisco adaptive security appliance software, pix firewall software +1 moreUnspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive...CVE-2008-00287.1 HighJanuary 23, 2008
hp hp-uxUnspecified vulnerability in HP-UX B.11.31, when running ARPA Transport, allows remote attackers...CVE-2007-642510.0 HighJanuary 23, 2008
mantisCross-site scripting (XSS) vulnerability in Mantis before 1.1.1 allows remote attackers to inject...CVE-2008-04044.3 MediumJanuary 23, 2008
belkin f5d9230-4The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication...CVE-2008-0403Public exploit5.5 MediumJanuary 23, 2008
ibm websphere business modelerUnspecified vulnerability in IBM WebSphere Business Modeler Basic and Advanced 6.0.2.1 before...CVE-2008-04026.0 MediumJanuary 23, 2008
ibm tivoli provisioning manager os deploymentBuffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning...CVE-2008-040110.0 HighJanuary 23, 2008
modern, singapore +1 moreCross-site scripting (XSS) vulnerability in header.tpl.php in the modern template for Singapore 0...CVE-2008-0400Public exploit4.3 MediumJanuary 23, 2008
toshiba surveillixMultiple buffer overflows in Toshiba Surveillance (Surveillix) RecordSend ActiveX control ...CVE-2008-0399Public exploit6.8 MediumJanuary 23, 2008
aflogCross-site scripting (XSS) vulnerability in aflog 1.01, and possibly earlier versions, allows...CVE-2008-0398Public exploit4.3 MediumJanuary 23, 2008
aflog.org aflogMultiple SQL injection vulnerabilities in aflog 1.01, and possibly earlier versions, allow remote...CVE-2008-0397Public exploit6.8 MediumJanuary 23, 2008
bitdefender update serverDirectory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender...CVE-2008-0396Public exploit7.8 HighJanuary 23, 2008
kayako supportsuiteKayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information...CVE-2008-03955.0 MediumJanuary 23, 2008
citadel smtpBuffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute...CVE-2008-0394Public exploitEPSS 11.9%7.5 HighJanuary 23, 2008
gradmanDirectory traversal vulnerability in info.php in GradMan 0.1.3 and earlier allows remote...CVE-2008-0393Public exploit5.8 MediumJanuary 23, 2008
microsoft visual basicMultiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user...CVE-2008-0392Public exploitEPSS 30.5%9.3 HighJanuary 23, 2008
alilg alitalkinc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote...CVE-2008-0391Public exploit7.5 HighJanuary 23, 2008
auracms, auracms mod block statistik +1 morestat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject...CVE-2008-0390Public exploit7.5 HighJanuary 23, 2008
ibm websphere application serverUnspecified vulnerability in the serveServletsByClassnameEnabled feature in IBM WebSphere...CVE-2008-038910.0 HighJanuary 23, 2008
wordpress wp forumSQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to...CVE-2008-0388Public exploit6.8 MediumJanuary 23, 2008
openbsdOpenBSD 4.2 allows local users to cause a denial of service (kernel panic) by calling the...CVE-2008-0384Public exploit4.9 MediumJanuary 22, 2008
mybbMultiple SQL injection vulnerabilities in MyBB 1.2.10 and earlier allow remote moderators and...CVE-2008-0383Public exploit7.5 HighJanuary 22, 2008
mybulletinboardMultiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to...CVE-2008-0382Public exploitEPSS 41.9%7.5 HighJanuary 22, 2008
maharaUnspecified vulnerability in Mahara before 0.9.1 has unknown impact and remote attack vectors,...CVE-2008-03814.3 MediumJanuary 22, 2008
digital data communications rtspvapgdecoder.dllBuffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder...CVE-2008-0380Public exploitEPSS 12.7%10.0 HighJanuary 22, 2008
businessobjects crystal reports xiRace condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in...CVE-2008-0379Public exploit9.3 HighJanuary 22, 2008
nec sockscapStack-based buffer overflow in SocksCap 2.40-051231 and earlier, when "Resolve all names remotely...CVE-2008-03786.8 MediumJanuary 22, 2008
news micronewsMicroNews allows remote attackers to bypass authentication and gain administrative privileges via...CVE-2008-037710.0 HighJanuary 22, 2008
softpedia small axe weblogPHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows...CVE-2008-0376Public exploitEPSS 31.5%6.8 MediumJanuary 22, 2008
oki printing solutions c5510 mfp printerUnspecified vulnerability in OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web...CVE-2008-037510.0 HighJanuary 22, 2008
oki c5510mfp firmwareOKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the...CVE-2008-03747.5 HighJanuary 22, 2008
php f1 maxs file uploaderUnrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to...CVE-2008-03737.5 HighJanuary 22, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open