Skip to content

CVEs published in June 2008

435 vulnerabilities, 81 critical, 0 exploited.

yabsoft mega file hosting scriptSQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS)...CVE-2008-2521Public exploit6.5 MediumJune 3, 2008
bigaceMultiple PHP remote file inclusion vulnerabilities in BigACE 2.4, when register_globals is...CVE-2008-2520Public exploit7.5 HighJune 3, 2008
ikiwikiPlugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote...CVE-2008-0169Fix available6.8 MediumJune 3, 2008
core ftp ftpDirectory traversal vulnerability in Core FTP client 2.1 Build 1565 allows remote FTP servers to...CVE-2008-25196.8 MediumJune 3, 2008
sun java system web serverCross-site scripting (XSS) vulnerability in the advanced search mechanism (webapps/search...CVE-2008-25184.3 MediumJune 3, 2008
sarabThe sarab.sh script in SaraB before 0.2.4 places the dar program's encryption key on the command...CVE-2008-25172.1 LowJune 3, 2008
libpam-pgsqlpam_sm_authenticate in pam_pgsql.c in libpam-pgsql 0.6.3 does not properly consider operator...CVE-2008-25164.6 MediumJune 3, 2008
ibm aixUnspecified vulnerability in iostat in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain...CVE-2008-25157.2 HighJune 2, 2008
ibm aixBuffer overflow in errpt in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via...CVE-2008-25144.6 MediumJune 2, 2008
ibm aixBuffer overflow in the kernel in IBM AIX 5.2, 5.3, and 6.1 allows local users to execute...CVE-2008-25137.2 HighJune 2, 2008
symantec backupexec system recoveryDirectory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0...CVE-2008-25125.0 MediumJune 2, 2008
ca internet security suite plus 2008Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka UmxEventCliLib)...CVE-2008-2511Public exploitEPSS 10.0%9.3 HighJune 2, 2008
carsten haitzler imlib2Multiple stack-based buffer overflows in Imlib 2 (aka imlib2) 1.4.0 allow user-assisted remote...CVE-2008-2426Fix available9.3 HighJune 2, 2008
panThe PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for...CVE-2008-2363Fix available9.3 HighJune 2, 2008
fedora 8 consolehelper, redhat fedora 8 +1 moreThe default configuration of consolehelper in system-config-network before 1.5.10-1 on Fedora 8...CVE-2008-23597.2 HighJune 2, 2008
vmware ace 2, player 2, workstation +2 moreUnspecified vulnerability in VMCI in VMware Workstation 6 before 6.0.4 build 93057, VMware Player...CVE-2008-20996.9 MediumJune 2, 2008
vmware ace 2, fusion, player 2 +1 more +3 moreHeap-based buffer overflow in the VMware Host Guest File System (HGFS) in VMware Workstation 6...CVE-2008-20986.9 MediumJune 2, 2008
apple safariCFNetwork in Safari in Apple Mac OS X before 10.5.3 automatically sends an SSL client certificate...CVE-2008-15804.3 MediumJune 2, 2008
apple mac os x, mac os x server +1 moreWiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive...CVE-2008-15795.0 MediumJune 2, 2008
apple mac os x, mac os x server +1 moreThe sso_util program in Single Sign-On in Apple Mac OS X before 10.5.3 places passwords on the...CVE-2008-15782.1 LowJune 2, 2008
apple mac os x, mac os x server +1 moreUnspecified vulnerability in the Pixlet codec in Apple Pixlet Video in Apple Mac OS X before 10.5...CVE-2008-15779.3 HighJune 2, 2008
apple mac os xMail in Apple Mac OS X before 10.5, when an IPv6 SMTP server is used, does not properly...CVE-2008-15766.8 MediumJune 2, 2008
apple mac os x, mac os x server +1 moreUnspecified vulnerability in the Apple Type Services (ATS) server in Apple Mac OS X 10.5 before...CVE-2008-15759.3 HighJune 2, 2008
apple mac os x, mac os x server +1 moreInteger overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute...CVE-2008-15749.3 HighJune 2, 2008
apple mac os x, mac os x server +1 moreThe BMP and GIF image decoding engine in ImageIO in Apple Mac OS X before 10.5.3 allows remote...CVE-2008-15737.1 HighJune 2, 2008
apple mac os x, mac os x server +1 moreImage Capture in Apple Mac OS X before 10.5 does not properly use temporary files, which allows...CVE-2008-15724.6 MediumJune 2, 2008
apple mac os x, mac os x server +1 moreDirectory traversal vulnerability in the embedded web server in Image Capture in Apple Mac OS X...CVE-2008-15715.0 MediumJune 2, 2008
apple mac os x, redhat enterprise linux, apple mac os x server +2 moreThe International Components for Unicode (ICU) library in Apple Mac OS X before 10.5.3, Red Hat...CVE-2008-1036Fix available4.3 MediumJune 2, 2008
apple mac os xInteger underflow in Help Viewer in Apple Mac OS X before 10.5 allows remote attackers to execute...CVE-2008-10349.3 HighJune 2, 2008
apple cupsThe scheduler in CUPS in Apple Mac OS X 10.5 before 10.5.3, when debug logging is enabled and a...CVE-2008-1033Fix available2.1 LowJune 2, 2008
apple mac os x, mac os x server +1 moreIncomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.3 allows user...CVE-2008-10326.8 MediumJune 2, 2008
apple mac os x, mac os x server +1 moreCoreGraphics in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or...CVE-2008-10319.3 HighJune 2, 2008
apple mac os x, mac os x server +1 moreInteger overflow in the CFDataReplaceBytes function in the CFData API in CoreFoundation in Apple...CVE-2008-103010.0 HighJune 2, 2008
apple mac os x, mac os x server +1 moreUnspecified vulnerability in AppKit in Apple Mac OS X before 10.5 allows user-assisted remote...CVE-2008-10289.3 HighJune 2, 2008
apple mac os x, mac os x server +1 moreApple Filing Protocol (AFP) Server in Apple Mac OS X before 10.5.3 does not verify that requested...CVE-2008-10274.3 MediumJune 2, 2008