Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
March

CVEs published in March 2008

507 vulnerabilities, 79 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

serendipityCross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3 allows remote attackers...CVE-2008-14764.3 MediumMarch 24, 2008
manageengine supportcenter plusCross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine SupportCenter Plus...CVE-2008-14324.3 MediumMarch 20, 2008
raidsonic technology firmwareRaidSonic NAS-4220-B with 2.6.0-n(2007-10-11) firmware stores a partition encryption key in an...CVE-2008-14312.1 LowMarch 20, 2008
iatek aspappSQL injection vulnerability in links.asp in ASPapp allows remote attackers to execute arbitrary...CVE-2008-1430Public exploit7.5 HighMarch 20, 2008
silc silc-serverSecure Internet Live Conferencing (SILC) Server before 1.1.1 allows remote attackers to cause a...CVE-2008-14297.8 HighMarch 20, 2008
drupal ubercart moduleMultiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-beta7...CVE-2008-14284.3 MediumMarch 20, 2008
joobi acajoom, joomla com acajoom +1 moreSQL injection vulnerability in the Joobi Acajoom (com_acajoom) 1.1.5 and 1.2.5 component for...CVE-2008-1427Public exploit7.5 HighMarch 20, 2008
kaphotoserviceSQL injection vulnerability in album.asp in KAPhotoservice allows remote attackers to execute...CVE-2008-1426Public exploit7.5 HighMarch 20, 2008
easy-clanpageSQL injection vulnerability in index.php in the gallery module in Easy-Clanpage 2.2 allows remote...CVE-2008-1425Public exploit7.5 HighMarch 20, 2008
axylThe prerm script in axyl 2.1.7 allows local users to overwrite arbitrary files via a symlink...CVE-2008-14176.9 MediumMarch 20, 2008
phpauction gplMultiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers...CVE-2008-1416Public exploitEPSS 37.7%6.8 MediumMarch 20, 2008
riceball multiple time sheetsDirectory traversal vulnerability in index.php in Multiple Time Sheets (MTS) 5.0 and earlier...CVE-2008-1415Public exploit5.0 MediumMarch 20, 2008
riceball multiple time sheetsCross-site scripting (XSS) vulnerability in Multiple Time Sheets (MTS) 5.0 and earlier allows...CVE-2008-1414Public exploit4.3 MediumMarch 20, 2008
snews cms rusCross-site scripting (XSS) vulnerability in search.php in SNewsCMS Rus 2.1 through 2.4 allows...CVE-2008-1413Public exploit4.3 MediumMarch 20, 2008
f-secure anti-virus, internet security, anti-virus client security +9 more +11 moreUnspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security...CVE-2008-14126.8 MediumMarch 20, 2008
acronis snap deployThe PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers...CVE-2008-1411Public exploit5.0 MediumMarch 20, 2008
acronis snap deployDirectory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0...CVE-2008-1410Public exploit4.3 MediumMarch 20, 2008
exero cmsMultiple directory traversal vulnerabilities in the Default theme in Exero CMS 1.0.1 allow remote...CVE-2008-1409Public exploit7.5 HighMarch 20, 2008
phpbpSQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 (2.204) FIX...CVE-2008-1408Public exploit7.5 HighMarch 20, 2008
exv2SQL injection vulnerability in index.php in the WebChat 1.60 module for eXV2 allows remote...CVE-2008-1407Public exploit6.8 MediumMarch 20, 2008
exv2SQL injection vulnerability in annonces-p-f.php in the MyAnnonces 1.8 module for eXV2 allows...CVE-2008-1406Public exploit6.8 MediumMarch 20, 2008
fuzzylimePHP remote file inclusion vulnerability in code/display.php in fuzzylime (cms) 3.01 allows remote...CVE-2008-1405Public exploitEPSS 37.7%6.8 MediumMarch 20, 2008
exv2SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for...CVE-2008-1404Public exploit6.8 MediumMarch 20, 2008
bootmanage administrator, tftpd +1 moreStack-based buffer overflow in the TFTP server in BootManage TFTPD 1.99 and earlier in BootManage...CVE-2008-1403Public exploit6.8 MediumMarch 20, 2008
mg-soft net inspectorMG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a (1)...CVE-2008-1402Public exploit7.1 HighMarch 20, 2008
mg-soft net inspectorFormat string vulnerability in the Net Inspector HTTP server (mghttpd) in MG-SOFT Net Inspector 6...CVE-2008-1401Public exploit4.3 MediumMarch 20, 2008
mg-soft net inspectorDirectory traversal vulnerability in the Net Inspector HTTP Server (mghttpd) in MG-SOFT Net...CVE-2008-1400Public exploit5.0 MediumMarch 20, 2008
clansphereMultiple cross-site scripting (XSS) vulnerabilities in index.php in Clansphere 2008 allow remote...CVE-2008-13994.3 MediumMarch 20, 2008
auracmsSQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to...CVE-2008-1398Public exploit6.8 MediumMarch 20, 2008
apple airport extreme base stationUnspecified vulnerability in Apple AirPort Extreme Base Station Firmware 7.3.1 allows remote...CVE-2008-10124.3 MediumMarch 20, 2008
checkpoint vpn-1, check point vpn-1 pro, vpn-1 firewall-1 +2 more +4 moreCheck Point VPN-1 Power/UTM, with NGX R60 through R65 and NG AI R55 software, allows remote...CVE-2008-13976.5 MediumMarch 20, 2008
plone cmsPlone credentials stored in session cookieCVE-2008-13964.3 MediumMarch 20, 2008
plone cmsPlone CMS does not record users' authentication states, and implements the logout feature solely...CVE-2008-13957.5 HighMarch 20, 2008
plone cmsPlone CMS Improper Session ManagementCVE-2008-1394Fix available7.5 HighMarch 20, 2008
plone cmsPlone Improper Session ManagementCVE-2008-1393Fix available10.0 HighMarch 20, 2008
vmware ace, player, workstation +2 moreThe default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and...CVE-2008-139210.0 HighMarch 20, 2008
vmware ace, player, server +1 more +3 moreUnspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6, VMware...CVE-2008-13647.8 HighMarch 20, 2008
vmware ace, player, server +1 more +3 moreVMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3...CVE-2008-13637.2 HighMarch 20, 2008
vmware ace, player, server +1 more +3 moreVMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3...CVE-2008-13627.2 HighMarch 20, 2008
vmware ace, player, server +1 more +3 moreVMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6, VMware Player 2.0.x before 2.0.3...CVE-2008-13616.8 MediumMarch 20, 2008
vmware ace, player, workstation +1 more +3 moreVirtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware...CVE-2008-13407.1 HighMarch 20, 2008
asterisk open sourceFormat string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote...CVE-2008-1333Fix available5.8 MediumMarch 20, 2008
asterisk, asterisk appliance developer kit, business edition +3 more +5 moreUnspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and...CVE-2008-1332Fix available8.8 HighMarch 20, 2008
redhat directory serverRed Hat Directory Server 8.0, when running on Red Hat Enterprise Linux, uses insecure permissions...CVE-2008-0889Fix available2.1 LowMarch 20, 2008
hp storageworks library and tape toolsHP StorageWorks Library and Tape Tools (LTT) before 4.5 SR1 on HP-UX B.11.11 and B.11.23 allows...CVE-2008-07077.2 HighMarch 20, 2008
plone cmsPlone Cross-site request forgery (CSRF)CVE-2008-0164Fix available4.3 MediumMarch 20, 2008
sap business objectsStack-based buffer overflow in the SAP Business Objects BusinessObjects RptViewerAX ActiveX...CVE-2007-62549.3 HighMarch 20, 2008
ibm rational clearquestMultiple cross-site scripting (XSS) vulnerabilities in the web interface for IBM Rational...CVE-2007-4592Public exploit4.3 MediumMarch 20, 2008
apple safariCross-site scripting (XSS) vulnerability in WebKit, as used in Apple Safari before 3.1, allows...CVE-2008-10114.3 MediumMarch 19, 2008
apple safariBuffer overflow in WebKit, as used in Apple Safari before 3.1, allows remote attackers to execute...CVE-2008-10106.8 MediumMarch 19, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open