CVEs published in March 2008

507 vulnerabilities, 79 critical, 0 exploited.

• ibm aix Stack-based buffer overflow in the reboot program on IBM AIX 5.2 and 5.3 allows local users in... CVE-2008-1601 7.2 HighMarch 31, 2008
• ibm aix The lsmcode program on IBM AIX 5.2, 5.3, and 6.1 does not properly handle environment variables,... CVE-2008-1600 7.2 HighMarch 31, 2008
• ibm aix The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables,... CVE-2008-1599 7.2 HighMarch 31, 2008
• ibm aix The kernel in IBM AIX 6.1 allows local users with ProbeVue privileges to read arbitrary kernel... CVE-2008-1598 4.7 MediumMarch 31, 2008
• ibm aix The WPAR system call implementation in the kernel in IBM AIX 6.1 allows local users to cause a... CVE-2008-1597 4.9 MediumMarch 31, 2008
• ibm aix Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the... CVE-2008-1596 7.2 HighMarch 31, 2008
• ibm aix The proc filesystem in the kernel in IBM AIX 5.2 and 5.3 does not properly enforce directory... CVE-2008-1595 4.9 MediumMarch 31, 2008
• ibm aix The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on... CVE-2008-1594 4.9 MediumMarch 31, 2008
• ibm aix The checkpoint and restart feature in the kernel in IBM AIX 5.2, 5.3, and 6.1 does not properly... CVE-2008-1593 7.2 HighMarch 31, 2008
• ibm websphere mq MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms... CVE-2008-1592 4.6 MediumMarch 31, 2008
• postnuke The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when... CVE-2008-1591 Public exploit 7.5 HighMarch 31, 2008
• compaq presario a900, presario c700, hp g7000 +1 more +3 more Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows... CVE-2008-0706 7.2 HighMarch 31, 2008
• compaq 2210 series bios, 2510 series bios, 2710 series bios +10 more +12 more Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC... CVE-2008-0211 4.9 MediumMarch 31, 2008
• comix comix 3.6.4 allows attackers to execute arbitrary commands via a filename containing shell... CVE-2008-1568 7.5 HighMarch 31, 2008
• phpmyadmin, debian linux, fedoraproject fedora +1 more +3 more phpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish... CVE-2008-1567 Fix available 5.5 MediumMarch 31, 2008
• manageengine applications manager Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine Applications Manager 8.x... CVE-2008-1566 4.3 MediumMarch 31, 2008
• hotscripts pjirc, phpbb pjirc module +1 more Directory traversal vulnerability in forum/irc/irc.php in the PJIRC 0.5 module for phpBB allows... CVE-2008-1565 Public exploit 7.5 HighMarch 31, 2008
• file-transfer file transfer Directory traversal vulnerability in Dan Costin File Transfer before 1.2f allows remote attackers... CVE-2008-1564 Public exploit 4.3 MediumMarch 31, 2008
• wireshark The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal)... CVE-2008-1563 Public exploitFix available 4.3 MediumMarch 31, 2008
• wireshark The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers... CVE-2008-1562 Public exploit EPSS 50.7% 5.0 MediumMarch 31, 2008
• wireshark Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) 0.99.5 through 0.99.8 allow... CVE-2008-1561 Public exploitFix available 5.0 MediumMarch 31, 2008
• digiappz digidomain Multiple cross-site scripting (XSS) vulnerabilities in Digiappz DigiDomain 2.2 allow remote... CVE-2008-1560 Public exploit 4.3 MediumMarch 31, 2008
• bernard gilly com alphacontent SQL injection vulnerability in the Bernard Gilly AlphaContent (com_alphacontent) 2.5.8 component... CVE-2008-1559 Public exploit 6.8 MediumMarch 31, 2008
• mplayer Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1... CVE-2008-1558 Public exploitFix available EPSS 16.8% 10.0 HighMarch 31, 2008
• bolinos BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to... CVE-2008-1557 Public exploit 5.0 MediumMarch 31, 2008
• bolinos Multiple cross-site scripting (XSS) vulnerabilities in BolinOS 4.6.1 allow remote attackers to... CVE-2008-1556 Public exploit 4.3 MediumMarch 31, 2008
• bolinos Directory traversal vulnerability in system/_b/contentFiles/gbincluder.php in BolinOS 4.6.1... CVE-2008-1555 Public exploit 6.8 MediumMarch 31, 2008
• topper toppermod SQL injection vulnerability in account/index.php in TopperMod 2.0, when magic_quotes_gpc is... CVE-2008-1554 Public exploit 6.8 MediumMarch 31, 2008
• topper toppermod Directory traversal vulnerability in mod.php in TopperMod 1.0 allows remote attackers to include... CVE-2008-1553 Public exploit 6.8 MediumMarch 31, 2008
• silc, silc client, server +1 more +3 more The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live... CVE-2008-1552 6.8 MediumMarch 31, 2008
• runcms, runcms photo module +1 more SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote... CVE-2008-1551 Public exploit 7.5 HighMarch 31, 2008
• cubecart Multiple cross-site scripting (XSS) vulnerabilities in index.php in CubeCart 4.2.1 allow remote... CVE-2008-1550 4.3 MediumMarch 31, 2008
• aeries student information system Multiple SQL injection vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle... CVE-2008-1549 6.8 MediumMarch 31, 2008
• aeries student information system Multiple cross-site scripting (XSS) vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in... CVE-2008-1548 4.3 MediumMarch 31, 2008
• orb networks orb Integer overflow in Orb Networks Orb 2.00.1014 and Winamp Remote BETA allows remote attackers to... CVE-2008-0070 4.6 MediumMarch 31, 2008
• mitsubishi electric gb servlet/MIMEReceiveServlet in the web controller for Mitsubishi Electric GB-50 and GB-50A air... CVE-2008-1546 7.8 HighMarch 28, 2008
• microsoft internet explorer The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 7 does... CVE-2008-1545 EPSS 11.8% 4.3 MediumMarch 28, 2008
• microsoft internet explorer The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 5.01, 6,... CVE-2008-1544 EPSS 26.3% 7.1 HighMarch 28, 2008
• airspan prost web management The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX... CVE-2008-1543 7.5 HighMarch 28, 2008
• airspan base station distribution unit Airspan Base Station Distribution Unit (BSDU) has "topsecret" as its password for the root... CVE-2008-1542 7.5 HighMarch 28, 2008
• hp open vms tcp-ip services Unspecified vulnerability in the SSH server in HP OpenVMS TCP/IP Services on OpenVMS on the Alpha... CVE-2008-0704 10.0 HighMarch 28, 2008
• his webshop Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote... CVE-2008-1541 Public exploit 4.3 MediumMarch 28, 2008
• joomla datsogallery SQL injection vulnerability in the Datsogallery (com_datsogallery) 1.3.1 module for Joomla! and... CVE-2008-1540 Public exploit 7.5 HighMarch 28, 2008
• futurenuke php nuke platinum SQL injection vulnerability in includes/dynamic_titles.php in PHP-Nuke Platinum 7.6.b.5 allows... CVE-2008-1539 Public exploit 7.5 HighMarch 28, 2008
• manageengine eventlog analyzer Cross-site scripting (XSS) vulnerability in searchAction.do in ManageEngine EventLog Analyzer 5... CVE-2008-1538 4.3 MediumMarch 28, 2008
• powerscripts powerbook Directory traversal vulnerability in pb_inc/admincenter/index.php in PowerScripts PowerBook 1.21... CVE-2008-1537 Public exploit 6.8 MediumMarch 28, 2008
• picturespro photo cart Cross-site scripting (XSS) vulnerability in index.php in Pictures Pro (aka Tim Grissett) Photo... CVE-2008-1536 4.3 MediumMarch 28, 2008
• matti kiviharju rekry component SQL injection vulnerability in the Matti Kiviharju rekry (aka com_rekry or rekry!Joom) 1.0.0... CVE-2008-1535 Public exploit 7.5 HighMarch 28, 2008
• powerscripts powerphpboard Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote attackers to... CVE-2008-1534 Public exploit 7.5 HighMarch 28, 2008
• novell edirectory The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before... CVE-2008-0926 Public exploit EPSS 58.2% 7.5 HighMarch 28, 2008
• Show olderLoading…