Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
March

CVEs published in March 2008

507 vulnerabilities, 79 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm informix dynamic serverMultiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x...CVE-2008-07278.5 HighMarch 18, 2008
mit kerberos 5, apple mac os x, mac os x server +7 more +9 moreThe Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused...CVE-2008-0063Fix available7.5 HighMarch 18, 2008
mit kerberos 5, canonical ubuntu linux, debian linux +1 more +3 moreKDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which...CVE-2008-0062Fix availableEPSS 10.1%9.8 CriticalMarch 18, 2008
gnu gccgcc 4.3.x does not generate a cld instruction while compiling functions used for string...CVE-2008-1367Fix available7.5 HighMarch 17, 2008
trend micro officescan corporate editionTrend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3...CVE-2008-13665.0 MediumMarch 17, 2008
trend micro officescan corporate editionStack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189...CVE-2008-1365Public exploitEPSS 51.1%6.4 MediumMarch 17, 2008
nagiosCross-site scripting (XSS) vulnerability in Nagios before 2.11 allows remote attackers to inject...CVE-2008-13604.3 MediumMarch 17, 2008
invision power services power boardCross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 before...CVE-2008-13594.3 MediumMarch 17, 2008
altn mdaemonStack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote...CVE-2008-1358Public exploitEPSS 57.1%6.5 MediumMarch 17, 2008
mcafee agent, cma, epolicy orchestrator +1 more +3 moreFormat string vulnerability in the logDetail function of applib.dll in McAfee Common Management...CVE-2008-1357Public exploit5.4 MediumMarch 17, 2008
sun solarisUnspecified vulnerability in xscreensaver in Sun Solaris 10 Java Desktop System (JDS), when using...CVE-2008-13566.3 MediumMarch 17, 2008
jeeblestechnology jeebles directoryCross-site scripting (XSS) vulnerability in index.php in Jeebles Technology Jeebles Directory 2.9...CVE-2008-1355Public exploit4.3 MediumMarch 17, 2008
advanced data solutions virtual support office xpSQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office...CVE-2008-1354Public exploit7.5 HighMarch 17, 2008
zabbixzabbix_agentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service (CPU and...CVE-2008-1353Public exploitFix available4.3 MediumMarch 17, 2008
hangzhou network technology development ediorcmsDirectory traversal vulnerability in search.php in EdiorCMS (ecms) 3.0 allows remote attackers to...CVE-2008-13525.0 MediumMarch 17, 2008
xoops tutoriais moduleSQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to...CVE-2008-1351Public exploit7.5 HighMarch 17, 2008
fully modded phpbb modded phpbbSQL injection vulnerability in kb.php in Fully Modded phpBB (phpbbfm) 80220 allows remote...CVE-2008-1350Public exploit7.5 HighMarch 17, 2008
exv2 bamagalerie, exv2 +1 moreSQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041...CVE-2008-1349Public exploit7.5 HighMarch 17, 2008
ewebsite eweatherCross-site scripting (XSS) vulnerability in index.php in the eWebsite eWeather (Weather) module...CVE-2008-1348Public exploit4.3 MediumMarch 17, 2008
myiosoft easycalendarMultiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in...CVE-2008-1347Public exploit4.3 MediumMarch 17, 2008
myiosoft easycalendarSQL injection vulnerability in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr...CVE-2008-1346Public exploit7.5 HighMarch 17, 2008
myiosoft easycalendarCross-site scripting (XSS) vulnerability in plugins/calendar/calendar_backend.php in MyioSoft...CVE-2008-1345Public exploit4.3 MediumMarch 17, 2008
myiosoft easycalendarMultiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote...CVE-2008-1344Public exploit7.5 HighMarch 17, 2008
sco unixwareDirectory traversal vulnerability in (1) pkgadd and (2) pkgrm in SCO UnixWare 7.1.4 allows local...CVE-2008-1343Public exploit4.9 MediumMarch 17, 2008
polymita technologies collageportal, bpm suite +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the search feature in Polymita BPM-Suite...CVE-2008-13424.3 MediumMarch 17, 2008
lagarde storefrontSQL injection vulnerability in SearchResults.aspx in LaGarde StoreFront 6 before SP8 allows...CVE-2008-13417.5 HighMarch 17, 2008
info-zip unzip, apple mac os x, canonical ubuntu linux +1 more +3 moreThe NEEDBITS macro in the inflate_dynamic function in inflate.c for unzip can be invoked using...CVE-2008-0888Fix available9.3 HighMarch 17, 2008
perforce serverThe Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote...CVE-2008-13387.8 HighMarch 14, 2008
netopia timbuktu proThe instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows remote...CVE-2008-13375.0 MediumMarch 14, 2008
cisco ciscoworks internetwork performance monitorCisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process that executes a...CVE-2008-1157EPSS 20.7%10.0 HighMarch 14, 2008
netopia timbuktu proTimbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation...CVE-2008-1118Public exploit7.5 HighMarch 14, 2008
netopia timbuktu proDirectory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in...CVE-2008-1117Public exploitEPSS 69.5%10.0 HighMarch 14, 2008
cisco acs solution engine, acs for windows, user changeable password +2 moreMultiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User...CVE-2008-0533Public exploitEPSS 28.8%4.3 MediumMarch 14, 2008
cisco acs solution engine, acs for windows, user changeable password +2 moreMultiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before...CVE-2008-0532Public exploitEPSS 57.1%10.0 HighMarch 14, 2008
koobi cmsSQL injection vulnerability in Koobi CMS 4.2.3 through 4.3.0 allows remote attackers to execute...CVE-2008-1336Public exploit7.5 HighMarch 13, 2008
netbsd, netbsd current +1 moreThe ipsec4_get_ulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before...CVE-2008-13359.3 HighMarch 13, 2008
bt home hubcgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or...CVE-2008-13347.5 HighMarch 13, 2008
linksys wag54gsThe Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin"...CVE-2007-67097.5 HighMarch 13, 2008
linksys wag54gsMultiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Linksys WAG54GS Wireless...CVE-2007-67084.3 MediumMarch 13, 2008
linksys wag54gsMultiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL...CVE-2007-67074.3 MediumMarch 13, 2008
gallarificGallarific does not require authentication for (1) users.php and (2) index.php, which allows...CVE-2008-1327Public exploit7.5 HighMarch 13, 2008
gallarificCross-site scripting (XSS) vulnerability in search.php in Gallarific allows remote attackers to...CVE-2008-1326Public exploit4.3 MediumMarch 13, 2008
leinir turthra uberghey cmsMultiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote...CVE-2008-1325Public exploit7.5 HighMarch 13, 2008
leinir travelsized cmsMultiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote...CVE-2008-1324Public exploit7.5 HighMarch 13, 2008
woltlab burning board liteCross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board Lite (wBB)...CVE-2008-13236.8 MediumMarch 13, 2008
asg-sentryThe File Check Utility (fcheck.exe) in ASG-Sentry Network Manager 7.0.0 and earlier allows remote...CVE-2008-1322Public exploit7.8 HighMarch 13, 2008
asg-sentryThe FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication,...CVE-2008-1321Public exploit5.0 MediumMarch 13, 2008
asg asg-sentryMultiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers...CVE-2008-1320Public exploitEPSS 16.3%10.0 HighMarch 13, 2008
versant object databaseUntrusted search path and argument injection vulnerability in the VersantD service in Versant...CVE-2008-1319Public exploit9.3 HighMarch 13, 2008
mediawikiUnspecified vulnerability in MediaWiki 1.11 before 1.11.2 allows remote attackers to obtain...CVE-2008-1318Fix available5.0 MediumMarch 13, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open