CVEs published in July 2008

520 vulnerabilities, 62 critical, 0 exploited.

• eyeball networks messenger sdk Buffer overflow in the CoVideoWindow.ocx ActiveX control 5.0.907.1 in Eyeball MessengerSDK, as... CVE-2008-3430 Public exploit 9.3 HighJuly 31, 2008
• httrack, httrack winhttrack +1 more Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers... CVE-2008-3429 Fix available 6.8 MediumJuly 31, 2008
• phpfreechat Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web... CVE-2008-3428 6.5 MediumJuly 31, 2008
• sun opensolaris, solaris, sunos +2 more Unspecified vulnerability in the Solaris Platform Information and Control Library daemon (picld)... CVE-2008-3426 2.1 LowJuly 31, 2008
• sun n1 service provisioning system, java system web server plugin +1 more Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service... CVE-2008-3425 6.5 MediumJuly 31, 2008
• condor project condor, fedoraproject fedora +1 more Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE,... CVE-2008-3424 Fix available 7.5 HighJuly 31, 2008
• mono Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0... CVE-2008-3422 Fix available 4.3 MediumJuly 31, 2008
• blackboard academic suite Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7... CVE-2008-3421 4.3 MediumJuly 31, 2008
• willo mobius web publishing software Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote... CVE-2008-3420 Public exploit 7.5 HighJuly 31, 2008
• greatclone youtuber clone SQL injection vulnerability in ugroups.php in Youtuber Clone allows remote attackers to execute... CVE-2008-3419 Public exploit 7.5 HighJuly 31, 2008
• willo trio SQL injection vulnerability in browse.php in TriO 2.1 and earlier allows remote attackers to... CVE-2008-3418 Public exploit 7.5 HighJuly 31, 2008
• fipsasp fipscms light SQL injection vulnerability in home/index.asp in fipsCMS light 2.1 and earlier allows remote... CVE-2008-3417 Public exploit 7.5 HighJuly 31, 2008
• icebb SQL injection vulnerability in modules/members.php in IceBB before 1.0-rc9.3 allows remote... CVE-2008-3416 Public exploit 7.5 HighJuly 31, 2008
• cmscout Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported,... CVE-2008-3415 Public exploit 7.5 HighJuly 31, 2008
• siteadmin cms SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute... CVE-2008-3414 Public exploit 7.5 HighJuly 31, 2008
• greatclone auction platinum SQL injection vulnerability in category.php in Greatclone GC Auction Platinum allows remote... CVE-2008-3413 Public exploit 7.5 HighJuly 31, 2008
• ecshop epshop SQL injection vulnerability in Comsenz EPShop (aka ECShop) before 3.0 allows remote attackers to... CVE-2008-3412 Public exploit 7.5 HighJuly 31, 2008
• axesstel akw-d800 The Axesstel AXW-D800 modem with D2_ETH_109_01_VEBR Jun-14-2006 software does not require... CVE-2008-3411 10.0 HighJuly 31, 2008
• epic games unreal tournament 3 Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service ... CVE-2008-3410 5.0 MediumJuly 31, 2008
• epic games unreal tournament 3 Buffer overflow in Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a... CVE-2008-3409 Public exploit EPSS 11.0% 7.5 HighJuly 31, 2008
• coolplayer Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted... CVE-2008-3408 Public exploit 6.8 MediumJuly 31, 2008
• phplinkat phpLinkat 0.1 allows remote attackers to bypass authentication and access unspecified pages under... CVE-2008-3407 Public exploit 5.0 MediumJuly 31, 2008
• phplinkat SQL injection vulnerability in showcat.php in phpLinkat 0.1 allows remote attackers to execute... CVE-2008-3406 Public exploit 7.5 HighJuly 31, 2008
• nazgulled nzfotolog Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote... CVE-2008-3405 Public exploit 6.8 MediumJuly 31, 2008
• mdsjack mjguest Cross-site scripting (XSS) vulnerability in guestbook.js.php in MJGuest 6.8 GT allows remote... CVE-2008-3404 Public exploit 4.3 MediumJuly 31, 2008
• mojoscripts mojopersonals SQL injection vulnerability in mojoClassified.cgi in MojoPersonals allows remote attackers to... CVE-2008-3403 Public exploit 7.5 HighJuly 31, 2008
• hscripts hiox random ad Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics (HBS) 2.0 allow... CVE-2008-3402 Public exploit 7.5 HighJuly 31, 2008
• hscripts hiox random ad PHP remote file inclusion vulnerability in hioxRandomAd.php in HIOX Random Ad (HRA) 1.3 allows... CVE-2008-3401 Public exploit 7.5 HighJuly 31, 2008
• xrms crm XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request... CVE-2008-3400 Public exploit 4.3 MediumJuly 31, 2008
• xrms crm PHP remote file inclusion vulnerability in activities/workflow-activities.php in XRMS CRM 1.99.2,... CVE-2008-3399 Public exploit 6.8 MediumJuly 31, 2008
• xrms crm Multiple cross-site scripting (XSS) vulnerabilities in XRMS CRM 1.99.2 allow remote attackers to... CVE-2008-3398 Public exploit 2.6 LowJuly 31, 2008
• runesoft cerberus cms Cross-site scripting (XSS) vulnerability in Runesoft Cerberus CMS before 3_1.4_0.9 allows remote... CVE-2008-3397 4.3 MediumJuly 31, 2008
• epic games unreal tournament 2004 Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of... CVE-2008-3396 Public exploit 5.0 MediumJuly 31, 2008
• calacode atmail Calacode @Mail 5.41 on Linux uses weak world-readable permissions for (1) webmail/libs/Atmail... CVE-2008-3395 5.0 MediumJuly 31, 2008
• infomining bookmine Multiple cross-site scripting (XSS) vulnerabilities in search.cfm in BookMine allow remote... CVE-2008-3394 4.3 MediumJuly 31, 2008
• infomining bookmine SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute... CVE-2008-3393 7.5 HighJuly 31, 2008
• webwizguide web wiz forum Cross-site request forgery (CSRF) vulnerability in Web Wiz Forum 9.5 allows remote attackers to... CVE-2008-3392 5.8 MediumJuly 31, 2008
• webwizguide web wiz forum Multiple cross-site scripting (XSS) vulnerabilities in Web Wiz Forum 9.5 allow remote attackers... CVE-2008-3391 Public exploit 4.3 MediumJuly 31, 2008
• minishowcase image gallery Directory traversal vulnerability in libraries/general.init.php in Minishowcase Image Gallery... CVE-2008-3390 Public exploit 6.8 MediumJuly 31, 2008
• xmlsoft libxslt Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction... CVE-2008-2935 Public exploitFix available EPSS 12.8% 7.5 HighJuly 31, 2008
• easy-script def blog Multiple SQL injection vulnerabilities in Def-Blog 1.0.3 allow remote attackers to execute... CVE-2008-3388 Public exploit 7.5 HighJuly 30, 2008
• phpfootball SQL injection vulnerability in show.php in PHPFootball 1.6 allows remote attackers to execute... CVE-2008-3387 Public exploit 7.5 HighJuly 30, 2008
• alstrasoft video share enterprise SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote... CVE-2008-3386 Public exploit 7.5 HighJuly 30, 2008
• linuxwebshop php help agent Directory traversal vulnerability in include/head_chat.inc.php in php Help Agent 1.0 and 1.1 Full... CVE-2008-3385 Public exploit 6.8 MediumJuly 30, 2008
• cce-interact interact Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community... CVE-2008-3384 Public exploit 7.5 HighJuly 30, 2008
• mojoscripts mojoauto SQL injection vulnerability in mojoAuto.cgi in MojoAuto allows remote attackers to execute... CVE-2008-3383 Public exploit 7.5 HighJuly 30, 2008
• mojoscripts mojoclassifieds SQL injection vulnerability in mojoClassified.cgi in MojoClassifieds 2.0 allows remote attackers... CVE-2008-3382 Public exploit 7.5 HighJuly 30, 2008
• moinmoin MoinMoin Multiple cross-site scripting (XSS) vulnerabilities CVE-2008-3381 Fix available 4.3 MediumJuly 30, 2008
• myiosoft easybookmarker Cross-site scripting (XSS) vulnerability in ajaxp_backend.php in MyioSoft EasyBookMarker 4.0... CVE-2008-3380 Public exploit 4.3 MediumJuly 30, 2008
• snarky visualpic Cross-site scripting (XSS) vulnerability in Snark VisualPic 0.3.1 allows remote attackers to... CVE-2008-3379 4.3 MediumJuly 30, 2008
• Show olderLoading…