Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
February

CVEs published in February 2008

524 vulnerabilities, 79 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

thecus n5200pro nas server control panelPHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows...CVE-2008-0804Public exploit6.8 MediumFebruary 18, 2008
openca pkiCross-site request forgery (CSRF) vulnerability in OpenCA PKI 0.9.2.5, and possibly earlier...CVE-2008-05567.5 HighFebruary 18, 2008
apache mod jk, f5 big-ip +1 moreMultiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module...CVE-2007-6258Public exploitEPSS 41.5%7.5 HighFebruary 18, 2008
pcreBuffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a...CVE-2008-0674Fix available7.5 HighFebruary 18, 2008
mysql community serverMySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity...CVE-2007-63136.5 MediumFebruary 18, 2008
lookstrike lan managerMultiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote...CVE-2008-0803Public exploitEPSS 32.7%7.5 HighFebruary 15, 2008
joomla com mediaslideSQL injection vulnerability in index.php in the MediaSlide (com_mediaslide) 0.5 component for...CVE-2008-0802Public exploit7.5 HighFebruary 15, 2008
paxxgallery com paxxgallerySQL injection vulnerability in index.php in the PAXXGallery (com_paxxgallery) 0.2 component for...CVE-2008-0801Public exploit7.5 HighFebruary 15, 2008
joomla com mcquizSQL injection vulnerability in index.php in the McQuiz (com_mcquiz) 0.9 Final component for...CVE-2008-0800Public exploit7.5 HighFebruary 15, 2008
joomla com quizSQL injection vulnerability in index.php in the Quiz (com_quiz) 0.81 and earlier component for...CVE-2008-0799Public exploit7.5 HighFebruary 15, 2008
artmedic webdesign weblogMultiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when...CVE-2008-0798Public exploit4.3 MediumFebruary 15, 2008
itheoraDirectory traversal vulnerability in lib/download.php in iTheora 1.0 rc1 allows remote attackers...CVE-2008-07975.0 MediumFebruary 15, 2008
nuboardSQL injection vulnerability in threads.php in Nuboard 0.5 allows remote attackers to execute...CVE-2008-0796Public exploit7.5 HighFebruary 15, 2008
joomla, mambo, mgfi xfaq +2 moreSQL injection vulnerability in index.php in the MGFi XfaQ (com_xfaq) 1.2 component for Mambo and...CVE-2008-0795Public exploit7.5 HighFebruary 15, 2008
affiliate market marketDirectory traversal vulnerability in user/header.php in Affiliate Market 0.1 BETA allows remote...CVE-2008-0794Public exploit6.4 MediumFebruary 15, 2008
tendenci cmsMultiple cross-site scripting (XSS) vulnerabilities in search.asp in Tendenci CMS allow remote...CVE-2008-07934.3 MediumFebruary 15, 2008
f-secure anti-virus, internet security, anti-virus client security +5 more +7 moreMultiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus...CVE-2008-07925.8 MediumFebruary 15, 2008
intermate winipdsipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to cause a denial of...CVE-2008-07915.0 MediumFebruary 15, 2008
intermate winipdsDirectory traversal vulnerability in ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows...CVE-2008-0790Public exploit5.0 MediumFebruary 15, 2008
li-scripts li-countdownSQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers...CVE-2008-07897.5 HighFebruary 15, 2008
freebsdThe sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file...CVE-2008-07774.9 MediumFebruary 15, 2008
cisco session initiation protocol \(sip\) firmware, skinny client control protocol \(sccp\) firmware +1 moreHeap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP...CVE-2008-05319.3 HighFebruary 15, 2008
cisco session initiation protocol \(sip\) firmware, skinny client control protocol \(sccp\) firmware +1 moreBuffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP...CVE-2008-053010.0 HighFebruary 15, 2008
cisco session initiation protocol \(sip\) firmware, skinny client control protocol \(sccp\) firmware +1 moreBuffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G,...CVE-2008-052910.0 HighFebruary 15, 2008
cisco session initiation protocol \(sip\) firmware, skinny client control protocol \(sccp\) firmware +1 moreBuffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might...CVE-2008-052810.0 HighFebruary 15, 2008
cisco session initiation protocol \(sip\) firmware, skinny client control protocol \(sccp\) firmware +1 moreThe HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote...CVE-2008-05277.8 HighFebruary 15, 2008
cisco session initiation protocol \(sip\) firmware, skinny client control protocol \(sccp\) firmware +1 moreCisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers...CVE-2008-05267.8 HighFebruary 15, 2008
mybbMultiple cross-site request forgery (CSRF) vulnerabilities in MyBB 1.2.11 and earlier allow...CVE-2008-07886.8 MediumFebruary 15, 2008
mybulletinboardSQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote...CVE-2008-0787Public exploit6.5 MediumFebruary 15, 2008
adobe robohelpCross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly...CVE-2008-06424.3 MediumFebruary 15, 2008
cactiCRLF injection vulnerability in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k, when running...CVE-2008-0786Fix available4.3 MediumFebruary 14, 2008
cactiMultiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow...CVE-2008-0785Public exploitFix available7.5 HighFebruary 14, 2008
cactigraph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain...CVE-2008-0784Fix available5.0 MediumFebruary 14, 2008
cactiMultiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before...CVE-2008-0783Public exploitFix available4.3 MediumFebruary 14, 2008
moinmoinMoinMoin Directory traversal vulnerabilityCVE-2008-0782Public exploitEPSS 14.9%5.0 MediumFebruary 14, 2008
moinmoinMoinMoin Multiple cross-site scripting (XSS) vulnerabilitiesCVE-2008-07814.3 MediumFebruary 14, 2008
moinmoinMoinMoin Cross-site scripting (XSS) vulnerabilityCVE-2008-0780Fix available4.3 MediumFebruary 14, 2008
fortinet forticlient host securityThe fortimon.sys device driver in Fortinet FortiClient Host Security 3.0 MR5 Patch 3 and earlier...CVE-2008-07797.2 HighFebruary 14, 2008
apple quicktimeMultiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7...CVE-2008-0778Public exploit7.5 HighFebruary 14, 2008
cisco unified callmanager, unified communications manager +1 moreSQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1...CVE-2008-0026Public exploit6.5 MediumFebruary 14, 2008
itechscripts itechbidsSQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to...CVE-2008-0776Public exploit7.5 HighFebruary 13, 2008
simple machines smf shoutboxCross-site scripting (XSS) vulnerability in sboxDB.php in Simple Machines Forum (SMF) Shoutbox 1...CVE-2008-07754.3 MediumFebruary 13, 2008
loris hotel reservation systemCross-site scripting (XSS) vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and...CVE-2008-07744.3 MediumFebruary 13, 2008
phil taylor comments, review script, joomla com comments +2 moreSQL injection vulnerability in Phil Taylor Comments (com_comments, aka Review Script) 0.5.8.5g...CVE-2008-0773Public exploit7.5 HighFebruary 13, 2008
joomla com docSQL injection vulnerability in index.php in the com_doc component for Joomla! and Mambo allows...CVE-2008-0772Public exploit7.5 HighFebruary 13, 2008
site2nite real estate webMultiple SQL injection vulnerabilities in default.asp in Site2Nite allow remote attackers to...CVE-2008-07717.5 HighFebruary 13, 2008
ibproarcadeSQL injection vulnerability in arcade.php in ibProArcade 3.3.0 and earlier allows remote...CVE-2008-0770Public exploit7.5 HighFebruary 13, 2008
opentext livelink ecmCross-site scripting (XSS) vulnerability in Livelink ECM 9.0.0 through 9.7.0 and possibly earlier...CVE-2008-07694.3 MediumFebruary 13, 2008
ibm informix dynamic server, informix storage manager +1 moreMultiple stack-based and heap-based buffer overflows in the Windows RPC components for IBM...CVE-2008-076810.0 HighFebruary 13, 2008
extremez print server, extremez-ip file server +1 moreExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier does not verify that a...CVE-2008-0767Public exploit5.0 MediumFebruary 13, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open