Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
June

CVEs published in June 2008

435 vulnerabilities, 81 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

menalto galleryembed.php in Menalto Gallery before 2.2.5 allows remote attackers to obtain the full path via...CVE-2008-27235.0 MediumJune 16, 2008
menalto galleryMenalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a...CVE-2008-27227.5 HighJune 16, 2008
menalto galleryUnspecified vulnerability in the album-select module in Menalto Gallery before 2.2.5 allows...CVE-2008-27215.0 MediumJune 16, 2008
menalto galleryCross-site scripting (XSS) vulnerability in Menalto Gallery before 2.2.5 allows remote attackers...CVE-2008-27204.3 MediumJune 16, 2008
nasm netwide assemblerOff-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows...CVE-2008-2719Public exploitFix availableEPSS 10.5%6.8 MediumJune 16, 2008
opera browserUnspecified vulnerability in Opera before 9.5 allows remote attackers to spoof the contents of...CVE-2008-27165.0 MediumJune 16, 2008
opera browserUnspecified vulnerability in Opera before 9.5 allows remote attackers to read cross-domain images...CVE-2008-27155.0 MediumJune 16, 2008
opera browserOpera before 9.26 allows remote attackers to misrepresent web page addresses using "certain...CVE-2008-27145.0 MediumJune 16, 2008
clam anti-virus clamavlibclamav/petite.c in ClamAV before 0.93.1 allows remote attackers to cause a denial of service...CVE-2008-2713Fix available5.0 MediumJune 16, 2008
vim, canonical ubuntu linux +1 moreVim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary...CVE-2008-2712Public exploitFix availableEPSS 15.0%9.3 HighJune 16, 2008
fetchmailfetchmail 6.3.8 and earlier, when running in -v -v (aka verbose) mode, allows remote attackers to...CVE-2008-2711Fix available4.3 MediumJune 16, 2008
sun opensolaris, solaris, sunos +2 moreInteger signedness error in the ip_set_srcfilter function in the IP Multicast Filter in uts...CVE-2008-27107.2 HighJune 16, 2008
ibm os 400Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5...CVE-2008-27094.7 MediumJune 16, 2008
sun opensolaris, sunos +1 moreUnspecified vulnerability in the Sun (1) UltraSPARC T2 and (2) UltraSPARC T2+ kernel modules in...CVE-2008-27084.9 MediumJune 16, 2008
freetypeMultiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute...CVE-2008-1808Fix available7.5 HighJune 16, 2008
freetypeFreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid...CVE-2008-1807Fix available7.5 HighJune 16, 2008
freetypeInteger overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute...CVE-2008-1806Fix available7.5 HighJune 16, 2008
intel network interface controllerUnspecified vulnerability in the e1000g driver in Sun Solaris 10 and OpenSolaris before snv_93...CVE-2008-27077.8 HighJune 16, 2008
sun solarisUnspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users...CVE-2008-27064.9 MediumJune 16, 2008
sun java system access managerUnspecified vulnerability in Sun Java System Access Manager (AM) 7.1, when used with certain...CVE-2008-27059.3 HighJune 16, 2008
citect citectfacilities, citectscada +1 moreStack-based buffer overflow in the ODBC server service in Citect CitectSCADA 6 and 7, and...CVE-2008-2639Public exploitEPSS 77.7%7.6 HighJune 16, 2008
openofficeUntrusted search path vulnerability in a certain Red Hat build script for OpenOffice.org (OOo) 1...CVE-2008-23664.4 MediumJune 16, 2008
bittorrent, utorrent +1 moreThe Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta...CVE-2008-0071Public exploit4.3 MediumJune 16, 2008
novell groupwise messengerNovell GroupWise Messenger (GWIM) before 2.0.3 Hot Patch 1 allows remote attackers to cause a...CVE-2008-27045.0 MediumJune 13, 2008
novell groupwise messengerMultiple stack-based buffer overflows in Novell GroupWise Messenger (GWIM) Client before 2.0.3...CVE-2008-2703Public exploitEPSS 61.1%10.0 HighJune 13, 2008
estsoft alftpDirectory traversal vulnerability in the FTP client in ALTools ESTsoft ALFTP 4.1 beta 2 and 5.0...CVE-2008-2702Public exploitEPSS 10.7%9.3 HighJune 13, 2008
joomla com gameqSQL injection vulnerability in the GameQ (com_gameq) component 4.0 and earlier for Joomla! allows...CVE-2008-2701Public exploit6.8 MediumJune 13, 2008
gwm galatolo webmanagerSQL injection vulnerability in view.php in Galatolo WebManager 1.0 and earlier allows remote...CVE-2008-2700Public exploit7.5 HighJune 13, 2008
gwm galatolo webmanagerMultiple directory traversal vulnerabilities in Galatolo WebManager (GWM) 1.0 allow remote...CVE-2008-2699Public exploit7.5 HighJune 13, 2008
web-album webalbumMultiple cross-site scripting (XSS) vulnerabilities in photo_add-c.php (aka the "add comment"...CVE-2008-26984.3 MediumJune 13, 2008
rapid-source rapid recipe, joomla com rapidrecipe +1 moreSQL injection vulnerability in the Rapid Recipe (com_rapidrecipe) component 1.6.6 and 1.6.7 for...CVE-2008-2697Public exploit7.5 HighJune 13, 2008
exiv2Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service (divide-by-zero and...CVE-2008-2696Fix available4.3 MediumJune 13, 2008
phpinvDirectory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include...CVE-2008-2695Public exploit7.5 HighJune 13, 2008
phpinvCross-site scripting (XSS) vulnerability in search.php in phpInv 0.8.0 allows remote attackers to...CVE-2008-2694Public exploit4.3 MediumJune 13, 2008
black ice barcode sdkStack-based buffer overflow in the BITIFF.BITiffCtrl.1 ActiveX control in BITiff.ocx 10.9.3.0 in...CVE-2008-2693Public exploitEPSS 10.1%9.3 HighJune 13, 2008
joomla com yvcommentSQL injection vulnerability in the yvComment (com_yvcomment) component 1.16.0 and earlier for...CVE-2008-2692Public exploit7.5 HighJune 13, 2008
jiro faq manager experienceSQL injection vulnerability in read.asp in JiRo's FAQ Manager eXperience 1.0 allows remote...CVE-2008-2691Public exploit7.5 HighJune 13, 2008
browsercrmMultiple PHP remote file inclusion vulnerabilities in BrowserCRM 5.002.00, when register_globals...CVE-2008-2690Public exploit9.3 HighJune 13, 2008
browsercrmPHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote...CVE-2008-2689Public exploitEPSS 46.2%10.0 HighJune 13, 2008
pilotcart pilot cartSQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to...CVE-2008-2688Public exploit7.5 HighJune 13, 2008
promanagerDirectory traversal vulnerability in inc/config.php in ProManager 0.73 allows remote attackers to...CVE-2008-2687Public exploit7.5 HighJune 13, 2008
flux cms cmswebinc/bxe/scripts/loadsave.php in Flux CMS 1.5.0 and earlier allows remote attackers to execute...CVE-2008-2686Public exploit7.5 HighJune 13, 2008
lavrsen motionOff-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might...CVE-2008-2654Fix available10.0 HighJune 13, 2008
apache http server, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreThe ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the...CVE-2008-2364Fix availableEPSS 12.7%5.0 MediumJune 13, 2008
battleblogSQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows remote...CVE-2008-26857.5 HighJune 12, 2008
blackice black ice barcode sdkThe BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows...CVE-2008-2684Public exploit9.3 HighJune 12, 2008
black ice barcode sdkThe BIDIB.BIDIBCtrl.1 ActiveX control in BIDIB.ocx 10.9.3.0 in Black Ice Barcode SDK 5.01 allows...CVE-2008-2683Public exploitEPSS 34.8%9.3 HighJune 12, 2008
realm project cms_RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass...CVE-2008-2682Public exploit7.5 HighJune 12, 2008
realm project cmsRealm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct...CVE-2008-2681Public exploit5.0 MediumJune 12, 2008
realm project cmsMultiple cross-site scripting (XSS) vulnerabilities in _db/compact.asp in Realm CMS 2.3 and...CVE-2008-2680Public exploit4.3 MediumJune 12, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open