Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
May

CVEs published in May 2008

384 vulnerabilities, 52 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

joomla com xsstream-dmSQL injection vulnerability in the xsstream-dm (com_xsstream-dm) component 0.01 Beta for Joomla!...CVE-2008-2454Public exploit7.5 HighMay 27, 2008
phpclassifiedsscript php classifieds scriptMultiple SQL injection vulnerabilities in PHP Classifieds Script allow remote attackers to...CVE-2008-2453Public exploit7.5 HighMay 27, 2008
inmedias questionaireCross-site scripting (XSS) vulnerability in the Questionaire (aka pbsurvey) extension 1.2.0 and...CVE-2008-24524.3 MediumMay 27, 2008
inmedias statisticsMultiple SQL injection vulnerabilities in the Statistics (aka ke_stats) extension 0.1.2 and...CVE-2008-24517.5 HighMay 27, 2008
inmedias statisticsMultiple cross-site scripting (XSS) vulnerabilities in the Statistics (aka ke_stats) extension 0...CVE-2008-24504.3 MediumMay 27, 2008
ikemcg phpinstantgalleryMultiple cross-site scripting (XSS) vulnerabilities in Isaac McGowan phpInstantGallery 2.0 allow...CVE-2008-2449Public exploit4.3 MediumMay 27, 2008
aspindir meto forumMultiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute...CVE-2008-2448Public exploit7.5 HighMay 27, 2008
mytipper zogo shopSQL injection vulnerability in products.php in the Mytipper ZoGo-shop plugin 1.15.5 and 1.16 Beta...CVE-2008-2447Public exploit7.5 HighMay 27, 2008
wgcc web group communication centerMultiple SQL injection vulnerabilities in Web Group Communication Center (WGCC) 1.0.3 PreRelease...CVE-2008-2446Public exploit7.5 HighMay 27, 2008
wgcc web group communication centerCross-site scripting (XSS) vulnerability in profile.php in Web Group Communication Center (WGCC)...CVE-2008-2445Public exploit4.3 MediumMay 27, 2008
calogic calendarsSQL injection vulnerability in userreg.php in CaLogic Calendars 1.2.2 allows remote attackers to...CVE-2008-2444Public exploit7.5 HighMay 27, 2008
therealestatescript the real estate scriptSQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to...CVE-2008-2443Public exploit7.5 HighMay 27, 2008
debian linux, linux kernel +1 moreThe (1) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c and the (2) sparc64_mmap_check...CVE-2008-21374.4 MediumMay 27, 2008
fichiveSQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute...CVE-2008-2425Public exploit7.5 HighMay 23, 2008
icdevgroup interchangeUnspecified vulnerability in the 404 error page for the "Standard demo" in Interchange before 5.6...CVE-2008-242410.0 HighMay 23, 2008
interchange development group interchangeUnspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to...CVE-2008-242310.0 HighMay 23, 2008
websliderSQL injection vulnerability in index.php in Web Slider 0.6 allows remote attackers to execute...CVE-2008-2422Public exploit7.5 HighMay 23, 2008
sap web application server, web dynpro +1 moreCross-site scripting (XSS) vulnerability in the Web GUI in SAP Web Application Server (WAS) 7.0,...CVE-2008-2421Public exploit4.3 MediumMay 23, 2008
stunnelThe OCSP functionality in stunnel before 4.24 does not properly search certificate revocation...CVE-2008-2420Fix available6.8 MediumMay 23, 2008
mozilla firefoxMozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service (heap corruption...CVE-2008-2419Public exploit4.3 MediumMay 23, 2008
cerulean studios trillianStack-based buffer overflow in Cerulean Studios Trillian before 3.1.10.0 allows remote attackers...CVE-2008-24099.3 HighMay 23, 2008
ceruleanstudios trillian proHeap-based buffer overflow in the XML parsing functionality in talk.dll in Cerulean Studios...CVE-2008-24089.3 HighMay 23, 2008
ceruleanstudios trillianStack-based buffer overflow in AIM.DLL in Cerulean Studios Trillian before 3.1.10.0 allows user...CVE-2008-24079.3 HighMay 23, 2008
barracuda networks spam firewallCross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before...CVE-2008-2333Public exploit4.3 MediumMay 23, 2008
django project djangoDjango Cross-site scripting (XSS) vulnerabilityCVE-2008-2302Fix available4.3 MediumMay 23, 2008
sun solarisRace condition in the STREAMS Administrative Driver (sad) in Sun Solaris 10 allows local users to...CVE-2008-24184.7 MediumMay 23, 2008
redhat desktop, enterprise linux, enterprise linux desktop +2 more +4 moreBuffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause...CVE-2008-1767Public exploitFix availableEPSS 12.8%7.5 HighMay 23, 2008
redhat network satelliteCross-site scripting (XSS) vulnerability in the Red Hat Network channel search feature, as used...CVE-2007-59614.3 MediumMay 23, 2008
selinux setroubleshootCross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject...CVE-2007-54961.9 LowMay 23, 2008
selinux setroubleshootsealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink...CVE-2007-54954.4 MediumMay 23, 2008
how2asp webboardSQL injection vulnerability in showQAnswer.asp in How2ASP.net Webboard 4.1 allows remote...CVE-2008-2417Public exploit7.5 HighMay 22, 2008
fichiveSQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute...CVE-2008-2416Public exploit7.5 HighMay 22, 2008
digitalhiveDirectory traversal vulnerability in template/purpletech/base_include.php in DigitalHive (aka...CVE-2008-2415Public exploit6.8 MediumMay 22, 2008
aguestbook an guestbookCross-site scripting (XSS) vulnerability in send_email.php in AN Guestbook (ANG) 0.4 allows...CVE-2008-2414Public exploit4.3 MediumMay 22, 2008
acgv.free acgv newsCross-site scripting (XSS) vulnerability in glossaire.php in ACGV News 0.9.1 allows remote...CVE-2008-2413Public exploit4.3 MediumMay 22, 2008
acgv.free acgv newsSQL injection vulnerability in glossaire.php in ACGV News 0.9.1 allows remote attackers to...CVE-2008-2412Public exploit7.5 HighMay 22, 2008
sazcartSQL injection vulnerability in index.php in SazCart 1.5.1 and earlier, when magic_quotes_gpc is...CVE-2008-2411Public exploit6.8 MediumMay 22, 2008
ibm lotus domino web serverCross-site scripting (XSS) vulnerability in the servlet engine and Web container in the Web...CVE-2008-24104.3 MediumMay 22, 2008
stunnelUnspecified vulnerability in stunnel before 4.23, when running as a service on Windows, allows...CVE-2008-24007.2 HighMay 22, 2008
fireftpDirectory traversal vulnerability in the FireFTP add-on before 0.98.20080518 for Firefox allows...CVE-2008-23999.3 HighMay 22, 2008
ibm lotus dominoStack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8...CVE-2008-2240Public exploitEPSS 64.8%10.0 HighMay 22, 2008
cisco unified customer voice portalUnspecified vulnerability in Cisco Unified Customer Voice Portal (CVP) 4.0.x before 4.0(2)_ES14,...CVE-2008-20539.0 HighMay 22, 2008
apple icalApple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to...CVE-2008-2006Public exploit4.3 MediumMay 22, 2008
snortpreprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet...CVE-2008-1804Fix available6.8 MediumMay 22, 2008
cisco ios s, ios t, ios xr +2 moreMultiple unspecified vulnerabilities in the SSH server in Cisco IOS 12.4 allow remote attackers...CVE-2008-11597.1 HighMay 22, 2008
cisco service control engine, icon-labs iconfidant ssh +1 moreUnspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x...CVE-2008-05367.8 HighMay 22, 2008
cisco service control engine, icon-labs iconfidant ssh +1 moreUnspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) before 3.1...CVE-2008-05357.8 HighMay 22, 2008
cisco service control engine, icon-labs iconfidant ssh +1 moreThe SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs...CVE-2008-05347.8 HighMay 22, 2008
foresight linux appliances, redhat enterprise linux, fedora +1 more +3 moreMemory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL...CVE-2007-5962Public exploitFix availableEPSS 12.1%7.1 HighMay 22, 2008
appserv open project appservCross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier...CVE-2008-2398Public exploit4.3 MediumMay 21, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open