Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
June

CVEs published in June 2008

435 vulnerabilities, 81 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

redhat enterprise linuxUntrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux...CVE-2008-1951Fix available4.6 MediumJune 25, 2008
microsoft internet explorer, xchat +1 moreArgument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer...CVE-2008-2841Public exploitEPSS 15.4%6.8 MediumJune 24, 2008
exerocms exero cmsMultiple directory traversal vulnerabilities in Exero CMS 1.0.0 and 1.0.1 allow remote attackers...CVE-2008-28406.8 MediumJune 24, 2008
traindepotCross-site scripting (XSS) vulnerability in the search module in Traindepot 0.1 allows remote...CVE-2008-2839Public exploit4.3 MediumJune 24, 2008
traindepotDirectory traversal vulnerability in index.php in Traindepot 0.1 allows remote attackers to read...CVE-2008-2838Public exploit5.0 MediumJune 24, 2008
cms.brdconcept cms-brdSQL injection vulnerability in index.php in CMS-BRD allows remote attackers to execute arbitrary...CVE-2008-2837Public exploit7.5 HighJune 24, 2008
k5n webcalendarPHP remote file inclusion vulnerability in send_reminders.php in WebCalendar 1.0.4 allows remote...CVE-2008-2836Public exploit7.5 HighJune 24, 2008
igsuiteSQL injection vulnerability in cgi-bin/igsuite in IGSuite 3.2.4 allows remote attackers to...CVE-2008-2835Public exploit7.5 HighJune 24, 2008
sidb scientific image databaseSQL injection vulnerability in projects.php in Scientific Image DataBase 0.41 allows remote...CVE-2008-2834Public exploit7.5 HighJune 24, 2008
worldlevel le.cmsadmin/upload.php in le.cms 1.4 and earlier allows remote attackers to bypass administrative...CVE-2008-2833Public exploit10.0 HighJune 24, 2008
fullrevolution aspwebcalendar2008Unrestricted file upload vulnerability in calendar_admin.asp in Full Revolution aspWebCalendar...CVE-2008-2832Public exploitEPSS 11.8%10.0 HighJune 24, 2008
ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreInteger overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5...CVE-2008-27267.8 HighJune 24, 2008
ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreInteger overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5...CVE-2008-27257.8 HighJune 24, 2008
ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreThe rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6...CVE-2008-26647.8 HighJune 24, 2008
ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreMultiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1...CVE-2008-266310.0 HighJune 24, 2008
ruby-lang ruby, canonical ubuntu linux, debian linux +2 moreMultiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5...CVE-2008-266210.0 HighJune 24, 2008
pagesperso-orange gfl sdk, nconvert, xnview +2 moreStack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70...CVE-2008-2427Public exploitEPSS 16.1%9.3 HighJune 24, 2008
apple mac os xOpen Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5...CVE-2008-2830Public exploit7.2 HighJune 23, 2008
php, canonical ubuntu linux +1 morephp_imap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow...CVE-2008-2829Fix available5.0 MediumJune 23, 2008
apple safariUnspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X...CVE-2008-23079.3 HighJune 23, 2008
apple safariApple Safari before 3.1.2 on Windows does not properly interpret the...CVE-2008-23069.3 HighJune 23, 2008
tmsncStack-based buffer overflow in tmsnc allows remote attackers to cause a denial of service (crash)...CVE-2008-282810.0 HighJune 23, 2008
perlThe rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before...CVE-2008-2827Public exploitFix available4.6 MediumJune 23, 2008
xensource xen para virtualized frame bufferThe backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly...CVE-2008-19522.1 LowJune 23, 2008
xerox workcentreCross-site scripting (XSS) vulnerability in the embedded Web Server in Xerox WorkCentre M123,...CVE-2008-28254.3 MediumJune 23, 2008
xerox workcentreUnspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox...CVE-2008-282410.0 HighJune 23, 2008
phpeasynews phpeasyblogSQL injection vulnerability in newsarchive.php in PHPeasyblog (formerly phpeasynews) 1.13 RC2 and...CVE-2008-2823Public exploit7.5 HighJune 23, 2008
3dftp 3d-ftp clientMultiple directory traversal vulnerabilities in the FTP client in 3D-FTP Client 8.01 (8.0 build 1...CVE-2008-2822Public exploit9.3 HighJune 23, 2008
glub secure ftpDirectory traversal vulnerability in the FTP client in Glub Tech Secure FTP before 2.5.16 on...CVE-2008-2821Public exploit9.3 HighJune 23, 2008
azimyt open azimyt cmsDirectory traversal vulnerability in lang/lang-system.php in Open Azimyt CMS 0.22 minimal and 0...CVE-2008-2820Public exploit6.4 MediumJune 23, 2008
blognplusSQL injection vulnerability in BlognPlus (BURO GUN +) 2.5.4 and earlier MySQL and PostgreSQL...CVE-2008-28197.5 HighJune 23, 2008
easy-clanpageDirectory traversal vulnerability in Easy-Clanpage 3.0 b1 allows remote attackers to include and...CVE-2008-2818Public exploit7.5 HighJune 23, 2008
nitropowered nitro web gallerySQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote...CVE-2008-2817Public exploit7.5 HighJune 23, 2008
o2php oxygenSQL injection vulnerability in post.php in Oxygen (aka O2PHP Bulletin Board) 2.0 allows remote...CVE-2008-2816Public exploit7.5 HighJune 23, 2008
mymarketSQL injection vulnerability in shopping/index.php in MyMarket 1.72 allows remote attackers to...CVE-2008-2815Public exploit7.5 HighJune 23, 2008
shoutcastadmin wallcity-server shoutcast admin panelCross-site scripting (XSS) vulnerability in WallCity-Server Shoutcast Admin Panel 2.0 allows...CVE-2008-2814Public exploit4.3 MediumJune 23, 2008
shoutcastadmin wallcity-server shoutcast admin panelDirectory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when...CVE-2008-2813Public exploit6.8 MediumJune 23, 2008
manageengine oputilsCross-site scripting (XSS) vulnerability in MainLayout.do in ManageEngine OpUtils 5.0 allows...CVE-2008-27974.3 MediumJune 20, 2008
freecms.us freecmsSQL injection vulnerability in index.php in FreeCMS 0.2 allows remote attackers to execute...CVE-2008-2796Public exploit7.5 HighJune 20, 2008
idm computer solutions inc ultraeditDirectory traversal vulnerability in the FTP and SFTP clients in IDM Computer Solutions Inc...CVE-2008-2795Public exploit4.3 MediumJune 20, 2008
symantec altiris notification serverUnspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0...CVE-2008-27946.8 MediumJune 20, 2008
clip-share clipshareSQL injection vulnerability in group_posts.php in ClipShare before 3.0.1 allows remote attackers...CVE-2008-2793Public exploit7.5 HighJune 20, 2008
erocmsSQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to...CVE-2008-2792Public exploit7.5 HighJune 20, 2008
kalptaru infotech comparison engine power scriptSQL injection vulnerability in product.detail.php in Kalptaru Infotech Comparison Engine Power...CVE-2008-2791Public exploit7.5 HighJune 20, 2008
mountaingrafix easytradeSQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers...CVE-2008-2790Public exploit7.5 HighJune 20, 2008
basic-cmsSQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute...CVE-2008-2789Public exploitEPSS 22.8%7.5 HighJune 20, 2008
opendocmanCross-site scripting (XSS) vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers...CVE-2008-27884.3 MediumJune 20, 2008
opendocmanCross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers...CVE-2008-2787Public exploit4.3 MediumJune 20, 2008
phpMultiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent...CVE-2008-2666Public exploitEPSS 13.9%5.0 MediumJune 20, 2008
phpDirectory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows...CVE-2008-26655.0 MediumJune 20, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open