Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
March

CVEs published in March 2008

507 vulnerabilities, 79 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

dokeos open source learning and knowledge management toolCross-site scripting (XSS) vulnerability in Dokeos 1.8.4 before SP3 allows remote attackers to...CVE-2008-12224.3 MediumMarch 10, 2008
microworld technologies escan, escan management console, escan server +2 moreAbsolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0...CVE-2008-1221Public exploit5.0 MediumMarch 10, 2008
phpnuke 4nchatSQL injection vulnerability in the 4nChat 0.91 module for PHP-Nuke allows remote attackers to...CVE-2008-1220Public exploit7.5 HighMarch 10, 2008
phpnuke kutubisitte componentSQL injection vulnerability in the Kutub-i Sitte (KutubiSitte) 1.1 module for PHP-Nuke allows...CVE-2008-1219Public exploit7.5 HighMarch 10, 2008
ibm lotus notesUnspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2...CVE-2008-12179.3 HighMarch 9, 2008
ibm lotus quickr serverIBM Lotus Quickr 8.0 server, and possibly QuickPlace 7.x, does not properly identify URIs...CVE-2008-12166.8 MediumMarch 9, 2008
freebsd, netbsd, openbsd +2 moreStack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka...CVE-2008-1215Public exploit4.6 MediumMarch 9, 2008
ibm lotus notesUnspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2...CVE-2007-67069.3 HighMarch 9, 2008
ibm websphere mqThe WebSphere MQ XA 5.3 before FP13 and 6.0.x before 6.0.2.1 client for Windows, when running in...CVE-2007-67053.3 LowMarch 9, 2008
numara footprintsMRcgi/MRProcessIncomingForms.pl in Numara FootPrints 8.1 on Linux allows remote attackers to...CVE-2008-12147.5 HighMarch 8, 2008
numara footprintsCross-site scripting (XSS) vulnerability in Numara FootPrints for Linux 8.1 allows remote...CVE-2008-12134.3 MediumMarch 8, 2008
podcast generator generatorCross-site scripting (XSS) vulnerability in set_permissions.php in Podcast Generator 0.96.2...CVE-2008-12124.3 MediumMarch 8, 2008
bosdev bosdatesCross-site scripting (XSS) vulnerability in BosDates 3.x and 4.x allows remote attackers to...CVE-2008-12114.3 MediumMarch 8, 2008
pnotepad programmers notepadStack-based buffer overflow in the ctags parsing code in Programmer's Notepad before 2.0.8.718...CVE-2008-12109.3 HighMarch 8, 2008
xitex webcontent m1Cross-site scripting (XSS) vulnerability in redirect.do in Xitex WebContent M1 allows remote...CVE-2008-12094.3 MediumMarch 8, 2008
checkpoint vpn-1 utm edge w embedded ngxCross-site scripting (XSS) vulnerability in the login page in Check Point VPN-1 UTM Edge W...CVE-2008-1208Public exploit4.3 MediumMarch 8, 2008
fujitsu interstage smart repository, interstage application server enterprise, interstage application server plus +5 more +7 moreMultiple unspecified vulnerabilities in Fujitsu Interstage Smart Repository, as used in multiple...CVE-2008-12075.0 MediumMarch 8, 2008
linux kiss server kiss serverFormat string vulnerability in the log_message function in lks.c in Linux Kiss Server 1.2, when...CVE-2008-12066.8 MediumMarch 8, 2008
sun solarisUnspecified vulnerability in the ipsecah kernel module in Sun Solaris 10, when a key management...CVE-2008-12054.9 MediumMarch 8, 2008
sun java system access managerMultiple cross-site scripting (XSS) vulnerabilities in the Administration Console in Sun Java...CVE-2008-12044.3 MediumMarch 8, 2008
microsoft access, jet +1 moreUnspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute...CVE-2008-1200EPSS 12.0%9.3 HighMarch 6, 2008
dovecotDovecot before 1.0.11, when configured to use mail_extra_groups to allow Dovecot to create...CVE-2008-1199Fix available4.4 MediumMarch 6, 2008
redhat enterprise linuxThe default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use...CVE-2008-1198Fix available7.1 HighMarch 6, 2008
sun jdk, jre, sdk +2 moreStack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and...CVE-2008-11966.8 MediumMarch 6, 2008
sun jdk, jre, sdk +1 more +3 moreUnspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier...CVE-2008-11959.3 HighMarch 6, 2008
sun jdk, jre +1 moreMultiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update...CVE-2008-11944.3 MediumMarch 6, 2008
sun jdk, jre +1 moreUnspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6...CVE-2008-1193Public exploitEPSS 12.5%9.3 HighMarch 6, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0...CVE-2008-11926.8 MediumMarch 6, 2008
sun jdk, jre +1 moreUnspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows...CVE-2008-11916.8 MediumMarch 6, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update...CVE-2008-1190EPSS 16.9%9.3 HighMarch 6, 2008
sun jdk, jre, sdk +2 moreBuffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and...CVE-2008-11896.8 MediumMarch 6, 2008
sun jdk, jre +1 moreMultiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6...CVE-2008-1188EPSS 12.5%9.3 HighMarch 6, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5...CVE-2008-1187Fix available6.8 MediumMarch 6, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5...CVE-2008-11869.3 HighMarch 6, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 6...CVE-2008-11859.3 HighMarch 6, 2008
dnssec-toolsThe DNSSEC validation library (libval) library in dnssec-tools before 1.3.1 does not properly...CVE-2008-11845.0 MediumMarch 6, 2008
crafty syntax live help syntax live helpMultiple cross-site scripting (XSS) vulnerabilities in Crafty Syntax Live Help (CSLH) before 2.14...CVE-2008-11834.3 MediumMarch 6, 2008
bsd perimeter pfsenseCross-site scripting (XSS) vulnerability in BSD Perimeter pfSense before 1.2 allows remote...CVE-2008-11824.3 MediumMarch 6, 2008
juniper secure access 2000Juniper Networks Secure Access 2000 5.5 R1 (build 11711) allows remote attackers to obtain...CVE-2008-1181Public exploit5.0 MediumMarch 6, 2008
juniper secure access 2000Cross-site scripting (XSS) vulnerability in dana-na/auth/rdremediate.cgi in Juniper Networks...CVE-2008-1180Public exploit4.3 MediumMarch 6, 2008
centreonMultiple cross-site scripting (XSS) vulnerabilities in include/common/javascript/color_picker.php...CVE-2008-11794.3 MediumMarch 6, 2008
centreonDirectory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows...CVE-2008-1178Public exploit4.3 MediumMarch 6, 2008
affiliate market marketSQL injection vulnerability in shop/detail.php in Affiliate Market (affmarket) 0.1 BETA allows...CVE-2008-1177Public exploit7.5 HighMarch 6, 2008
affiliate market marketCross-site scripting (XSS) vulnerability in function/sideblock.php in Affiliate Market (affmarket...CVE-2008-1176Public exploit2.6 LowMarch 6, 2008
flicks software authentixCross-site scripting (XSS) vulnerability in AuthentiX 6.3b1 Trial allows remote attackers to...CVE-2008-11754.3 MediumMarch 6, 2008
flicks software authentixCross-site scripting (XSS) vulnerability in editUser.asp in AuthentiX 6.3b1 Trial allows remote...CVE-2008-1174Public exploit4.3 MediumMarch 6, 2008
torrenttrader, torrenttrader classic +1 moreCross-site scripting (XSS) vulnerability in account-inbox.php in TorrentTrader Classic 1.08...CVE-2008-1173Public exploit4.3 MediumMarch 6, 2008
torrenttrader, torrenttrader classic +1 moreCross-site request forgery (CSRF) vulnerabilities in account-inbox.php in TorrentTrader Classic 1...CVE-2008-11724.3 MediumMarch 6, 2008
google android sdkInteger overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK...CVE-2008-0986Public exploit7.5 HighMarch 6, 2008
google android sdkHeap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3...CVE-2008-0985Public exploit6.8 MediumMarch 6, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open