Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
June

CVEs published in June 2008

435 vulnerabilities, 81 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

mozilla firefoxBuffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack vectors. NOTE: due to...CVE-2008-278610.0 HighJune 19, 2008
mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey...CVE-2008-2785Fix available9.3 HighJune 19, 2008
spamdykeThe smtp_filter function in spamdyke before 3.1.8 does not filter RCPT commands after...CVE-2008-27846.4 MediumJune 19, 2008
horde groupware, groupware webmail edition, kronolith +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Horde Groupware, Groupware Webmail Edition...CVE-2008-2783Public exploit4.3 MediumJune 19, 2008
otomigenxMultiple directory traversal vulnerabilities in OtomiGenX 2.2 allow remote attackers to include...CVE-2008-2782Public exploit7.5 HighJune 19, 2008
dzoic handshakesSQL injection vulnerability in index.php in DZOIC Handshakes 3.5 allows remote attackers to...CVE-2008-2781Public exploit7.5 HighJune 19, 2008
albinoloverats anubis pluginThe Anubis (aka Anubis+Ripe160) plugin before 1.3 for encrypt stores the unencrypted file's size...CVE-2008-27806.4 MediumJune 19, 2008
globalscape cuteftpDirectory traversal vulnerability in GlobalSCAPE CuteFTP Home 8.2.0 Build 02.26.2008.4 and...CVE-2008-27799.3 HighJune 19, 2008
revokesoft revokebbSQL injection vulnerability in inc/class_search.php in the Search System in RevokeBB 1.0 RC11...CVE-2008-2778Public exploit7.5 HighJune 19, 2008
luca corbo ortroCross-site scripting (XSS) vulnerability in Ortro before 1.3.1 allows remote attackers to inject...CVE-2008-27774.3 MediumJune 19, 2008
dt centrepiece centrepieceCross-site scripting (XSS) vulnerability in search.asp in DT Centrepiece 4.0 allows remote...CVE-2008-27764.3 MediumJune 19, 2008
dt centrepiece centrepieceSQL injection vulnerability in search.asp in DT Centrepiece 4.0 allows remote attackers to...CVE-2008-27757.5 HighJune 19, 2008
cartkeeper ckgold shopping cartSQL injection vulnerability in item.php in CartKeeper CKGold Shopping Cart 2.5 and 2.7 allows...CVE-2008-2774Public exploit7.5 HighJune 19, 2008
drupal taxonomy image moduleCross-site scripting (XSS) vulnerability in the Taxonomy Image module 5.x before 5.x-1.3 and 6.x...CVE-2008-27734.3 MediumJune 18, 2008
drupal magic tabs moduleThe Magic Tabs module 5.x before 5.x-1.1 for Drupal allows remote attackers to execute arbitrary...CVE-2008-27727.5 HighJune 18, 2008
drupal, drupal node hierarchy module +1 moreThe Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly...CVE-2008-27715.0 MediumJune 18, 2008
mycrocmsSQL injection vulnerability in index.php in MycroCMS 0.5, when magic_quotes_gpc is disabled,...CVE-2008-2770Public exploit7.5 HighJune 18, 2008
phpraiderPHP remote file inclusion vulnerability in authentication/smf/smf.functions.php in Simple...CVE-2008-27697.5 HighJune 18, 2008
xigla absolute poll manager xeCross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Poll Manager XE allows...CVE-2008-27683.5 LowJune 18, 2008
xigla absolute poll manager xeSQL injection vulnerability in search.asp in Xigla Poll Manager XE allows remote authenticated...CVE-2008-27676.5 MediumJune 18, 2008
xigla absolute image gallery xeCross-site scripting (XSS) vulnerability in Xigla Absolute Image Gallery XE allows remote...CVE-2008-27664.3 MediumJune 18, 2008
xigla absolute image gallery xeSQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote...CVE-2008-27657.5 HighJune 18, 2008
xigla absolute live support xeCross-site scripting (XSS) vulnerability in admin/search.asp in Xigla Absolute Live Support XE 5...CVE-2008-27643.5 LowJune 18, 2008
xigla absolute live support xeSQL injection vulnerability in search.asp in Xigla Absolute Live Support XE 5.1 allows remote...CVE-2008-27636.5 MediumJune 18, 2008
xigla absolute form processor xeSQL injection vulnerability in search.asp in Xigla Absolute Form Processor XE 4.0 allows remote...CVE-2008-27626.5 MediumJune 18, 2008
xigla absolute banner managerMultiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Banner Manager XE 2.0 allow...CVE-2008-27613.5 LowJune 18, 2008
xigla absolute banner managerSQL injection vulnerability in searchbanners.asp in Xigla Absolute Banner Manager XE 2.0 allows...CVE-2008-27606.5 MediumJune 18, 2008
xigla absolute form processor xeMultiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute Form Processor XE 4.0 allow...CVE-2008-27594.3 MediumJune 18, 2008
xigla absolute news manager xeMultiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute News Manager XE 3.2 allow...CVE-2008-27583.5 LowJune 18, 2008
xigla absolute news manager xeSQL injection vulnerability in search.asp in Xigla Absolute News Manager XE 3.2 allows remote...CVE-2008-27576.5 MediumJune 18, 2008
xigla absolute control panel xeCross-site scripting (XSS) vulnerability in admin/users.asp in Xigla Absolute Control Panel XE 1...CVE-2008-27564.3 MediumJune 18, 2008
jamm-media jamm cmsSQL injection vulnerability in index.php in JAMM CMS allows remote attackers to execute arbitrary...CVE-2008-2755Public exploit7.5 HighJune 18, 2008
efictionSQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, when magic_quotes_gpc is...CVE-2008-2754Public exploit6.8 MediumJune 18, 2008
paridel pooya site builderMultiple SQL injection vulnerabilities in Pooya Site Builder (PSB) 6.0 allow remote attackers to...CVE-2008-2753Public exploit7.5 HighJune 18, 2008
microsoft wordMicrosoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists,...CVE-2008-2752Public exploitEPSS 27.8%7.1 HighJune 18, 2008
sun java system application server, oracle glassfish server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun...CVE-2008-2751Public exploit4.3 MediumJune 18, 2008
linux kernelThe pppol2tp_recvmsg function in drivers/net/pppol2tp.c in the Linux kernel 2.6 before 2.6.26-rc6...CVE-2008-27507.8 HighJune 18, 2008
sun java system calendar server, one calendar server +1 moreUnspecified vulnerability in cshttpd in Sun Java System Calendar Server 6 and 6.3, and Sun ONE...CVE-2008-27497.1 HighJune 18, 2008
adobe flex, flex builder +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Flex 3 History Management feature in...CVE-2008-26404.3 MediumJune 18, 2008
torrenttrader classicMultiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to...CVE-2008-24286.8 MediumJune 18, 2008
cisco intrusion prevention systemUnspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x...CVE-2008-20607.8 HighJune 18, 2008
novell edirectoryCross-site scripting (XSS) vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x...CVE-2008-09254.3 MediumJune 18, 2008
skulltag team skulltagSkulltag 0.97d2-RC2 and earlier allows remote attackers to cause a denial of service (daemon hang...CVE-2008-2748Public exploit5.0 MediumJune 18, 2008
no-ip dynamic update clientNo-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLM\SOFTWARE...CVE-2008-27472.1 LowJune 18, 2008
gryphon gllcts2SQL injection vulnerability in login.php in Gryphon gllcTS2 4.2.4 allows remote attackers to...CVE-2008-2746Public exploit7.5 HighJune 17, 2008
black ice annotation softwareStack-based buffer overflow in BiAnno ActiveX Control (BiAnno.ocx) in Black Ice Software...CVE-2008-2745Public exploitEPSS 11.4%9.3 HighJune 17, 2008
vbulletinCross-site scripting (XSS) vulnerability in vBulletin 3.6.10 and 3.7.1 allows remote attackers to...CVE-2008-2744Public exploit4.3 MediumJune 17, 2008
xerox 4110, 4590, 4595 +2 moreCross-site scripting (XSS) vulnerability in the embedded web server in Xerox 4110, 4590, and 4595...CVE-2008-27434.3 MediumJune 17, 2008
achievoUnrestricted file upload in the mcpuk file editor (atk/attributes/fck/editor/filemanager/browser...CVE-2008-2742Public exploit7.5 HighJune 17, 2008
menalto galleryMenalto Gallery before 2.2.5 does not enforce permissions for non-album items that have been...CVE-2008-27245.0 MediumJune 16, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open