Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
March

CVEs published in March 2008

507 vulnerabilities, 79 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

apple safariCross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows...CVE-2008-10094.3 MediumMarch 19, 2008
apple safariCross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows...CVE-2008-10084.3 MediumMarch 19, 2008
apple safariWebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for...CVE-2008-10074.3 MediumMarch 19, 2008
apple safariCross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows...CVE-2008-10064.3 MediumMarch 19, 2008
apple safariWebCore, as used in Apple Safari before 3.1, does not properly mask the password field when...CVE-2008-10052.1 LowMarch 19, 2008
apple safariCross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows...CVE-2008-10044.3 MediumMarch 19, 2008
apple safariCross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows...CVE-2008-10034.3 MediumMarch 19, 2008
apple safariCross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to...CVE-2008-10024.3 MediumMarch 19, 2008
apple safariCross-site scripting (XSS) vulnerability in Apple Safari before 3.1, when running on Windows XP...CVE-2008-10014.3 MediumMarch 19, 2008
mit kerberos 5Buffer overflow in the RPC library (lib/rpc/rpc_dtablesize.c) used by libgssrpc and kadmind in...CVE-2008-0948Fix available9.3 HighMarch 19, 2008
apple mac os x, mac os x server +1 moreDirectory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2...CVE-2008-1000Public exploit8.5 HighMarch 18, 2008
apple mac os x, mac os x server +1 moreApple Mac OS X 10.5.2 allows user-assisted attackers to cause a denial of service (crash) via a...CVE-2008-09997.1 HighMarch 18, 2008
apple mac os x, mac os x server +1 moreUnspecified vulnerability in NetCfgTool in the System Configuration component in Apple Mac OS X...CVE-2008-09986.9 MediumMarch 18, 2008
apple mac os x, mac os x server +1 moreThe Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk...CVE-2008-09961.7 LowMarch 18, 2008
apple mac os x, mac os x server +1 moreThe Printing component in Apple Mac OS X 10.5.2 uses 40-bit RC4 when printing to an encrypted PDF...CVE-2008-09952.6 LowMarch 18, 2008
apple mac os x, mac os x server +1 morePreview in Apple Mac OS X 10.5.2 uses 40-bit RC4 when saving a PDF file with encryption, which...CVE-2008-09942.6 LowMarch 18, 2008
apple podcast producerPodcast Capture in Podcast Producer for Apple Mac OS X 10.5.2 invokes a subtask with passwords in...CVE-2008-09932.1 LowMarch 18, 2008
apple mac os x, mac os x server +1 moreArray index error in pax in Apple Mac OS X 10.5.2 allows context-dependent attackers to execute...CVE-2008-09925.8 MediumMarch 18, 2008
apple mac os x, mac os x server +1 morenotifyd in Apple Mac OS X 10.4.11 does not verify that Mach port death notifications have...CVE-2008-09904.4 MediumMarch 18, 2008
apple mac os x, mac os x server +1 moreFormat string vulnerability in mDNSResponderHelper in Apple Mac OS X 10.5.2 allows local users to...CVE-2008-09896.9 MediumMarch 18, 2008
apple mac os x, mac os x server +1 moreOff-by-one error in the Libsystem strnstr API in libc on Apple Mac OS X 10.4.11 allows context...CVE-2008-09884.3 MediumMarch 18, 2008
apple aperture, iphoto +1 moreStack-based buffer overflow in Image Raw in Apple Mac OS X 10.5.2, and Digital Camera RAW...CVE-2008-09876.8 MediumMarch 18, 2008
apple mac os x, mac os x server +1 moreHelp Viewer in Apple Mac OS X 10.4.11 and 10.5.2 allows remote attackers to execute arbitrary...CVE-2008-00606.8 MediumMarch 18, 2008
apple mac os x, mac os x server +1 moreRace condition in NSXML in Foundation for Apple Mac OS X 10.4.11 allows context-dependent...CVE-2008-00595.8 MediumMarch 18, 2008
apple mac os x, mac os x server +1 moreRace condition in the NSURLConnection cache management functionality in Foundation for Apple Mac...CVE-2008-00585.8 MediumMarch 18, 2008
apple mac os x, mac os x server +1 moreStack-based buffer overflow in Foundation in Apple Mac OS X 10.4.11 allows context-dependent...CVE-2008-00566.8 MediumMarch 18, 2008
apple mac os x, mac os x server +1 moreFoundation in Apple Mac OS X 10.4.11 creates world-writable directories while NSFileManager...CVE-2008-00557.2 HighMarch 18, 2008
apple mac os x, mac os x server +1 moreFoundation in Apple Mac OS X 10.4.11 might allow context-dependent attackers to execute arbitrary...CVE-2008-00546.4 MediumMarch 18, 2008
apple cupsMultiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow...CVE-2008-0053Fix available10.0 HighMarch 18, 2008
apple mac os x, mac os x server +1 moreCoreServices in Apple Mac OS X 10.4.11 treats .ief as a safe file type, which allows remote...CVE-2008-00526.8 MediumMarch 18, 2008
cupsHeap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions...CVE-2008-0047Fix available9.3 HighMarch 18, 2008
gentoo linuxThe docert function in ssl-cert.eclass, when used by src_compile or src_install on Gentoo Linux,...CVE-2008-13831.9 LowMarch 18, 2008
apple mac os x, mac os x server +1 moreStack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows user-assisted remote...CVE-2008-09976.8 MediumMarch 18, 2008
apple mac os x, mac os x server +1 moreMultiple integer overflows in a "legacy serialization format" parser in AppKit in Apple Mac OS X...CVE-2008-00576.8 MediumMarch 18, 2008
apple mac os x, mac os x server +1 moreInteger overflow in CoreFoundation in Apple Mac OS X 10.4.11 might allow local users to execute...CVE-2008-00516.9 MediumMarch 18, 2008
apple mac os x, mac os x server +1 moreCFNetwork in Apple Mac OS X 10.4.11 allows remote HTTPS proxy servers to spoof secure websites...CVE-2008-00505.0 MediumMarch 18, 2008
apple mac os x, mac os x server +1 moreAppKit in Apple Mac OS X 10.4.11 inadvertently makes an NSApplication mach port available for...CVE-2008-00491.9 LowMarch 18, 2008
apple mac os x, mac os x server +1 moreStack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows context-dependent...CVE-2008-00486.8 MediumMarch 18, 2008
apple mac os x, mac os x server +1 moreThe Application Firewall in Apple Mac OS X 10.5.2 has an incorrect German translation for the ...CVE-2008-00465.0 MediumMarch 18, 2008
apple mac os x, mac os x server +1 moreUnspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to...CVE-2008-00457.1 HighMarch 18, 2008
apple mac os x, mac os x server +1 moreMultiple buffer overflows in AFP Client in Apple Mac OS X 10.4.11 and 10.5.2 allow remote...CVE-2008-00445.8 MediumMarch 18, 2008
bzip bzip2bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service ...CVE-2008-1372Fix available4.3 MediumMarch 18, 2008
drake team cmsAbsolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote...CVE-2008-1371Public exploit3.6 LowMarch 18, 2008
wildmary yap blogPHP remote file inclusion vulnerability in index.php in wildmary Yap Blog 1.1 allows remote...CVE-2008-1370Public exploit6.8 MediumMarch 18, 2008
sun sunosA certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc...CVE-2008-136910.0 HighMarch 18, 2008
novell groupwiseUnspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6.5...CVE-2008-13303.5 LowMarch 18, 2008
microsoft internet explorerCRLF injection vulnerability in Microsoft Internet Explorer 5 and 6 allows remote attackers to...CVE-2008-1368EPSS 11.3%4.3 MediumMarch 18, 2008
ltsp linux terminal server projectldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on...CVE-2008-1293Fix available4.8 MediumMarch 18, 2008
ibm informix dynamic serverUnspecified vulnerability in IBM Informix Dynamic Server (IDS) 7.x through 11.x allows remote...CVE-2008-094910.0 HighMarch 18, 2008
mit kerberos 5Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4...CVE-2008-0947Fix available10.0 HighMarch 18, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open