Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
July

CVEs published in July 2008

520 vulnerabilities, 62 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

sun jdk, jre, sdk +2 moreUnspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0...CVE-2008-31145.0 MediumJuly 9, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and...CVE-2008-311310.0 HighJuly 9, 2008
sun jdk, jre, sdk +2 moreDirectory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and...CVE-2008-3112EPSS 25.7%10.0 HighJuly 9, 2008
sun jdk, jre, sdk +2 moreMultiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0...CVE-2008-311110.0 HighJuly 9, 2008
sun jdk, jre +1 moreUnspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in...CVE-2008-31104.3 MediumJuly 9, 2008
sun jdk, jre +1 moreUnspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in...CVE-2008-31097.5 HighJuly 9, 2008
sun jdk, jre, sdk +2 moreBuffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK...CVE-2008-310810.0 HighJuly 9, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and...CVE-2008-310710.0 HighJuly 9, 2008
sun jdk, jre +1 moreUnspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and...CVE-2008-31064.3 MediumJuly 9, 2008
sun jdk, jre +1 moreUnspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment (JRE)...CVE-2008-31058.3 HighJuly 9, 2008
sun jdk, jre, sdk +2 moreMultiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6...CVE-2008-31046.8 MediumJuly 9, 2008
sun jdk, jre +1 moreUnspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java...CVE-2008-3103Fix available9.3 HighJuly 9, 2008
microsoft office wordMicrosoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file...CVE-2008-2244EPSS 32.1%9.3 HighJuly 9, 2008
drupal tinytax taxonomy block moduleCross-site scripting (XSS) vulnerability in the Tinytax module (aka Tinytax taxonomy block) 5.x...CVE-2008-30973.5 LowJuly 9, 2008
drupal outline designer moduleThe Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's...CVE-2008-30966.5 MediumJuly 9, 2008
drupal organic groups moduleCross-site scripting (XSS) vulnerability in the Organic Groups (OG) module 5.x before 5.x-7.3 and...CVE-2008-30953.5 LowJuly 9, 2008
organic groups project groupsThe Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal...CVE-2008-30944.3 MediumJuly 9, 2008
phplizardo imperialbbUnrestricted file upload vulnerability in ImperialBB 2.3.5 and earlier allows remote...CVE-2008-3093Public exploit6.5 MediumJuly 9, 2008
drupal taxonomy autotagger moduleSQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal...CVE-2008-30926.5 MediumJuly 9, 2008
drupal taxonomy autotagger moduleCross-site scripting (XSS) vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for...CVE-2008-30913.5 LowJuly 9, 2008
blognplusMultiple SQL injection vulnerabilities in index.php in BlognPlus (BURO GUN +) 2.5.5 MySQL and...CVE-2008-30907.5 HighJuly 9, 2008
xpoze proSQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote...CVE-2008-3089Public exploit7.5 HighJuly 9, 2008
kasseler-cms kasseler cmsCross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite...CVE-2008-3088Public exploit4.3 MediumJuly 9, 2008
kasseler-cms kasseler cmsDirectory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary...CVE-2008-3087Public exploit5.0 MediumJuly 9, 2008
adobe robohelp serverCross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers...CVE-2008-2991EPSS 16.5%4.3 MediumJuly 9, 2008
debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreThe do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify...CVE-2008-29317.8 HighJuly 9, 2008
brightcode weblinks module, joomla com brightweblinks +1 moreSQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla!...CVE-2008-3083Public exploit7.5 HighJuly 9, 2008
commtouch enterprise anti-spam gatewayCross-site scripting (XSS) vulnerability in UPM/English/login/login.asp in Commtouch Enterprise...CVE-2008-30824.3 MediumJuly 9, 2008
avaya messaging storage serverMultiple unspecified "input validation" vulnerabilities in the Web management interface (aka...CVE-2008-30816.5 MediumJuly 9, 2008
mywebland mybloggieCross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows...CVE-2008-3080Public exploit5.1 MediumJuly 9, 2008
operaUnspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary...CVE-2008-307910.0 HighJuly 9, 2008
opera browserOpera before 9.51 does not properly manage memory within functions supporting the CANVAS element,...CVE-2008-30787.8 HighJuly 9, 2008
linux kernelarch/x86/kernel/ptrace.c in the Linux kernel before 2.6.25.10 on the x86_64 platform leaks...CVE-2008-30774.9 MediumJuly 9, 2008
debian linux, linux kernel, avaya communication manager +12 more +14 moreThe Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local...CVE-2008-28127.8 HighJuly 9, 2008
ruby-lang rubyInteger overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows...CVE-2008-23767.5 HighJuly 9, 2008
redhat vsftpdMemory leak in a certain Red Hat deployment of vsftpd before 2.0.5 on Red Hat Enterprise Linux ...CVE-2008-2375Fix available7.1 HighJuly 9, 2008
hp system management homepageCross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) 2.1.10 and 2.1.11...CVE-2008-16634.3 MediumJuly 9, 2008
fascript fanameMultiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0...CVE-2007-3653Public exploit4.3 MediumJuly 9, 2008
fascript fanameSQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows...CVE-2007-36526.8 MediumJuly 9, 2008
fascript fanameclass/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain...CVE-2007-36514.3 MediumJuly 9, 2008
mywebland mybloggiemyWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an...CVE-2007-36505.0 MediumJuly 9, 2008
mywebland mybloggieMultiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to...CVE-2007-1899Public exploit5.1 MediumJuly 9, 2008
mozilla firefox, seamonkey, geckb +1 more +3 moreMozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions...CVE-2008-28094.0 MediumJuly 8, 2008
microsoft exchange server, outlook web access +1 moreCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2...CVE-2008-2248EPSS 24.6%4.3 MediumJuly 8, 2008
microsoft exchange serverCross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2...CVE-2008-2247EPSS 24.6%4.3 MediumJuly 8, 2008
microsoft windows 2000, windows server 2003, windows server 2008 +1 more +3 moreUnspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and...CVE-2008-1454EPSS 34.1%9.4 HighJuly 8, 2008
microsoft windows vista, windows-nt +1 moreWindows Explorer in Microsoft Windows Vista up to SP1, and Server 2008, allows user-assisted...CVE-2008-1435EPSS 28.6%9.3 HighJuly 8, 2008
microsoft data engine, sql server, wmsde +3 more +5 moreInteger underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE...CVE-2008-0107EPSS 34.5%9.0 HighJuly 8, 2008
microsoft sql server, data engine, sql server desktop engine +1 more +3 moreBuffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2,...CVE-2008-0106EPSS 35.3%9.0 HighJuly 8, 2008
microsoft sql server, data engine, sql server desktop engine +1 more +3 moreBuffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine ...CVE-2008-0086EPSS 61.9%9.0 HighJuly 8, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open