Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
February

CVEs published in February 2008

524 vulnerabilities, 79 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

f-secure anti-virus, internet security, anti-virus client security +5 more +7 moreMultiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus...CVE-2008-09107.5 HighFebruary 22, 2008
schoolwires academic portalCross-site scripting (XSS) vulnerability in browse.asp in Schoolwires Academic Portal allows...CVE-2008-09094.3 MediumFebruary 22, 2008
schoolwires academic portalSQL injection vulnerability in browse.asp in Schoolwires Academic Portal allows remote attackers...CVE-2008-09087.5 HighFebruary 22, 2008
php-nuke inhalt moduleSQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute...CVE-2008-0907Public exploit7.5 HighFebruary 22, 2008
php-nuke module documSQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute...CVE-2008-0906Public exploit7.5 HighFebruary 22, 2008
meo globsyDirectory traversal vulnerability in globsy_edit.php in Globsy 1.0 allows remote attackers to...CVE-2008-0905Public exploit5.0 MediumFebruary 22, 2008
bea systems aqualogic interaction, plumtree collaboration +1 moreUnspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2...CVE-2008-09047.8 HighFebruary 22, 2008
bea systems weblogic server, weblogic express +1 moreUnspecified vulnerability in the BEA WebLogic Server and Express proxy plugin, as distributed...CVE-2008-09034.3 MediumFebruary 22, 2008
bea weblogic serverMultiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 6.1...CVE-2008-09024.3 MediumFebruary 22, 2008
bea weblogic serverBEA WebLogic Server and Express 7.0 through 10.0 allows remote attackers to conduct brute force...CVE-2008-09017.1 HighFebruary 22, 2008
bea weblogic server, bea systems weblogic express +1 moreSession fixation vulnerability in BEA WebLogic Server and Express 8.1 SP4 through SP6, 9.2...CVE-2008-0900EPSS 10.1%6.0 MediumFebruary 22, 2008
bea weblogic serverCross-site scripting (XSS) vulnerability in the Administration Console in BEA WebLogic Server and...CVE-2008-08994.3 MediumFebruary 22, 2008
bea weblogic serverThe distributed queue feature in JMS in BEA WebLogic Server 9.0 through 10.0, in certain...CVE-2008-08985.8 MediumFebruary 22, 2008
bea weblogic serverUnspecified vulnerability in BEA WebLogic Server 9.0 through 10.0 allows remote authenticated...CVE-2008-08977.9 HighFebruary 22, 2008
bea systems weblogic portalBEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of...CVE-2008-08964.9 MediumFebruary 22, 2008
bea weblogic serverBEA WebLogic Server and WebLogic Express 6.1 through 10.0 allows remote attackers to bypass...CVE-2008-08956.4 MediumFebruary 22, 2008
apple safariApple Safari might allow remote attackers to obtain potentially sensitive memory contents or...CVE-2008-08946.8 MediumFebruary 21, 2008
symantec veritas storage foundationHeap-based buffer overflow in the Veritas Enterprise Administrator (VEA) service (aka vxsvc.exe)...CVE-2008-06389.3 HighFebruary 21, 2008
symantec veritas storage foundationThe Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage...CVE-2007-45164.3 MediumFebruary 21, 2008
cupsDouble free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote...CVE-2008-0882Fix available10.0 HighFebruary 21, 2008
phpnuke okul moduleSQL injection vulnerability in modules.php in the Okul 1.0 module for PHP-Nuke allows remote...CVE-2008-0881Public exploit7.5 HighFebruary 21, 2008
phpnuke easycontent moduleSQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote...CVE-2008-0880Public exploit7.5 HighFebruary 21, 2008
phpnuke web links moduleSQL injection vulnerability in modules.php in the Web_Links module for PHP-Nuke allows remote...CVE-2008-0879Public exploit7.5 HighFebruary 21, 2008
runcms myannoncesSQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS...CVE-2008-0878Public exploit7.5 HighFebruary 21, 2008
jinzora media jukeboxMultiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote...CVE-2008-0877Public exploit4.3 MediumFebruary 21, 2008
hitachi sewb3 mi-platform, sewb3 platform +1 moreUnspecified vulnerability in the SEWB3 messaging service in Hitachi SEWB3/PLATFORM and SEWB3/MI...CVE-2008-08764.3 MediumFebruary 21, 2008
hitachi eur print managerUnspecified vulnerability in Hitachi EUR Print Manager, and related Client and Local Server...CVE-2008-08755.0 MediumFebruary 21, 2008
xoops eempregos moduleSQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote...CVE-2008-0874Public exploit7.5 HighFebruary 21, 2008
jlmzone classifiedsSQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows...CVE-2008-0873Public exploit7.5 HighFebruary 21, 2008
smartertools smartermail enterpriseCross-site scripting (XSS) vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote...CVE-2008-0872Public exploit4.3 MediumFebruary 21, 2008
now sms mms gatewayMultiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote...CVE-2008-0871Public exploitEPSS 32.8%6.8 MediumFebruary 21, 2008
bea systems weblogic portalBEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can...CVE-2008-08707.5 HighFebruary 21, 2008
bea weblogic workshop, bea systems weblogic, bea weblogic server +2 moreCross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop...CVE-2008-08694.3 MediumFebruary 21, 2008
bea systems weblogic portalCross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2...CVE-2008-08684.3 MediumFebruary 21, 2008
bea systems aqualogic interaction, plumtree foundation +1 moreCross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1...CVE-2008-08674.3 MediumFebruary 21, 2008
bea weblogic workshopMultiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote...CVE-2008-08664.3 MediumFebruary 21, 2008
bea systems weblogic portalUnspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to...CVE-2008-08655.0 MediumFebruary 21, 2008
bea systems weblogic portalAdmin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for...CVE-2008-08645.0 MediumFebruary 21, 2008
bea weblogic serverBEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security...CVE-2008-08635.0 MediumFebruary 21, 2008
ibm lotus notesIBM Lotus Notes 6.0, 6.5, 7.0, and 8.0 signs an unsigned applet when a user forwards an email...CVE-2008-08624.3 MediumFebruary 21, 2008
ibm lotus quickplaceCross-site scripting (XSS) vulnerability in leg/Main.nsf in IBM Lotus Quickplace 7.0 allows...CVE-2008-08614.3 MediumFebruary 21, 2008
kerio avg plugin, mailserver +1 moreUnspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified...CVE-2008-086010.0 HighFebruary 21, 2008
kerio mailserverUnspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a...CVE-2008-08595.0 MediumFebruary 21, 2008
kerio mailserver, visnetic antivirus plug-in for mail server +1 moreBuffer overflow in the Visnetic anti-virus plugin in Kerio MailServer before 6.5.0 might allow...CVE-2008-08587.5 HighFebruary 21, 2008
woltlab burning boardSQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote...CVE-2008-0857Public exploit7.5 HighFebruary 21, 2008
e-vision cmsMultiple SQL injection vulnerabilities in e-Vision CMS 2.02 allow remote attackers to execute...CVE-2008-0856Public exploit7.5 HighFebruary 21, 2008
joomla com facileformsSQL injection vulnerability in the Facile Forms (com_facileforms) component for Joomla! and Mambo...CVE-2008-0855Public exploit7.5 HighFebruary 21, 2008
joomla com salesrepSQL injection vulnerability in the com_salesrep component for Joomla! and Mambo allows remote...CVE-2008-0854Public exploit7.5 HighFebruary 21, 2008
joomla com detailSQL injection vulnerability in the com_detail component for Joomla! and Mambo allows remote...CVE-2008-0853Public exploit7.5 HighFebruary 21, 2008
freesshdfreeSSHd 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a...CVE-2008-0852Public exploit5.0 MediumFebruary 21, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open