Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
July

CVEs published in July 2008

520 vulnerabilities, 62 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm maximoMultiple cross-site scripting (XSS) vulnerabilities in jsp/common/system/debug.jsp in IBM Maximo...CVE-2008-3161Public exploit4.3 MediumJuly 14, 2008
ibm data ontapMultiple unspecified vulnerabilities in IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System...CVE-2008-316010.0 HighJuly 14, 2008
novell edirectoryInteger overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3...CVE-2008-315910.0 HighJuly 14, 2008
apple xcode, xcode tools +1 moreThe WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local...CVE-2008-23185.0 MediumJuly 14, 2008
apple safariWebCore in Apple Safari does not properly perform garbage collection of JavaScript document...CVE-2008-23179.3 HighJuly 14, 2008
apple core image fun houseBuffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode...CVE-2008-2304Public exploit6.8 MediumJuly 14, 2008
apple safariInteger signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows...CVE-2008-2303Public exploitEPSS 13.0%10.0 HighJuly 14, 2008
novell edirectoryHeap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2...CVE-2008-180910.0 HighJuly 14, 2008
webkit javascriptcoreJavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly...CVE-2008-15906.8 MediumJuly 14, 2008
apple safariSafari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as...CVE-2008-15894.3 MediumJuly 14, 2008
apple safariSafari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the...CVE-2008-15884.3 MediumJuly 14, 2008
oracle mysqlMySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a...CVE-2008-40974.6 MediumJuly 13, 2008
novell client for windowsUnspecified vulnerability in NWFS.SYS in Novell Client for Windows 4.91 SP4 has unknown impact...CVE-2008-3158Public exploit6.9 MediumJuly 11, 2008
nortel sip multimedia pc clientNortel SIP Multimedia PC Client 4.x MCS5100 and MCS5200 does not limit the number of concurrent...CVE-2008-31575.0 MediumJuly 11, 2008
panda activescanThe ActiveScan ActiveX Control (as2guiie.dll) in Panda ActiveScan before 1.02.00 allows remote...CVE-2008-3156Public exploit9.3 HighJuly 11, 2008
panda activescanStack-based buffer overflow in the ActiveX control (as2guiie.dll) in Panda ActiveScan before 1.02...CVE-2008-3155Public exploit9.3 HighJuly 11, 2008
webblizzard content management systemSQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute...CVE-2008-3154Public exploit7.5 HighJuly 11, 2008
tritoncms triton cms proSQL injection vulnerability in Triton CMS Pro allows remote attackers to execute arbitrary SQL...CVE-2008-3153Public exploit7.5 HighJuly 11, 2008
orbitscripts smartppc, smartppc pro +1 moreSQL injection vulnerability in directory.php in SmartPPC and SmartPPC Pro allows remote attackers...CVE-2008-3152Public exploit7.5 HighJuly 11, 2008
phpnuke 4ndvddbSQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to...CVE-2008-3151Public exploit7.5 HighJuly 11, 2008
neutrino-cms atomic editionDirectory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote...CVE-2008-3150Public exploit10.0 HighJuly 11, 2008
f5 firepass 1200The SNMP daemon in the F5 FirePass 1200 6.0.2 hotfix 3 allows remote attackers to cause a denial...CVE-2008-31497.8 HighJuly 11, 2008
mackt imprec, ollydbg +1 moreStack-based buffer overflow in (1) OllyDBG 1.10 and (2) ImpREC 1.7f allows user-assisted...CVE-2008-3148Public exploit6.8 MediumJuly 11, 2008
wefiWeFi 3.2.1.4.1, when diagnostic mode is enabled, stores (1) WEP, (2) WPA, and (3) WPA2 access...CVE-2008-31474.7 MediumJuly 11, 2008
wiresharkUnspecified vulnerability in the RMI dissector in Wireshark (formerly Ethereal) 0.9.5 through 1.0...CVE-2008-3141Fix available4.9 MediumJuly 10, 2008
wiresharkThe syslog dissector in Wireshark (formerly Ethereal) 1.0.0 allows remote attackers to cause a...CVE-2008-3140Public exploitFix available5.0 MediumJuly 10, 2008
wireshark, rpath linux +1 moreThe RTMPT dissector in Wireshark (formerly Ethereal) 0.99.8 through 1.0.0 allows remote attackers...CVE-2008-3139Fix available5.0 MediumJuly 10, 2008
wireshark, rpath linux +1 moreThe (1) PANA and (2) KISMET dissectors in Wireshark (formerly Ethereal) 0.99.3 through 1.0.0...CVE-2008-3138Fix available5.0 MediumJuly 10, 2008
wiresharkThe GSM SMS dissector in Wireshark (formerly Ethereal) 0.99.2 through 1.0.0 allows remote...CVE-2008-3137Fix available4.3 MediumJuly 10, 2008
ashopsoftware ashop deluxeSQL injection vulnerability in catalogue.php in AShop Deluxe 4.x allows remote attackers to...CVE-2008-3136Public exploit7.5 HighJuly 10, 2008
secretwars soldner secret warsSoldner Secret Wars 33724 and earlier allows remote attackers to cause a denial of service (CPU...CVE-2008-31357.8 HighJuly 10, 2008
graphicsmagickMultiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to...CVE-2008-3134Fix available5.0 MediumJuly 10, 2008
barenuked cmsSQL injection vulnerability in admin/index.php in BareNuked CMS 1.1.0, when magic_quotes_gpc is...CVE-2008-3133Public exploit6.8 MediumJuly 10, 2008
joomla com beamospetitionSQL injection vulnerability in the beamospetition (com_beamospetition) component for Joomla!...CVE-2008-3132Public exploit7.5 HighJuly 10, 2008
powie psysSQL injection vulnerability in chatbox.php in pSys 0.7.0 Alpha, when magic_quotes_gpc is disabled...CVE-2008-3131Public exploit6.8 MediumJuly 10, 2008
simple machines opencartMultiple cross-site scripting (XSS) vulnerabilities in index.php in OpenCart 0.7.7 allow remote...CVE-2008-31304.3 MediumJuly 10, 2008
catvizMultiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers...CVE-2008-3129Public exploit7.5 HighJuly 10, 2008
pivotDirectory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read...CVE-2008-3128Public exploit5.0 MediumJuly 10, 2008
hiox india banner rotatorPHP remote file inclusion vulnerability in hioxBannerRotate.php in HIOX Banner Rotator (HBR) 1.3,...CVE-2008-3127Public exploit6.8 MediumJuly 10, 2008
fujitsu serverviewMultiple stack-based buffer overflows in the ServerView web interface (SnmpGetMibValues.exe) in...CVE-2008-31266.5 MediumJuly 10, 2008
mole group lastminute scriptSQL injection vulnerability in index.php in Mole Group Lastminute Script 4.0 allows remote...CVE-2008-3125Public exploit7.5 HighJuly 10, 2008
mole group hotel scriptSQL injection vulnerability in index.php in Mole Group Hotel Script 1.0 allows remote attackers...CVE-2008-3124Public exploit7.5 HighJuly 10, 2008
mole group real estate scriptSQL injection vulnerability in index.php in Mole Group Real Estate Script 1.1 and earlier allows...CVE-2008-3123Public exploit7.5 HighJuly 10, 2008
xerox centreware webMultiple SQL injection vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote...CVE-2008-31226.5 MediumJuly 10, 2008
xerox centreware webMultiple cross-site scripting (XSS) vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46...CVE-2008-31214.3 MediumJuly 10, 2008
dreamlevels dream pics builderSQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute...CVE-2008-3119Public exploit7.5 HighJuly 10, 2008
phpmotionSQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to...CVE-2008-3118Public exploit7.5 HighJuly 10, 2008
phpmotionUnrestricted file upload vulnerability in update_profile.php in PHPmotion 2.0 and earlier allows...CVE-2008-3117Public exploit6.5 MediumJuly 10, 2008
hanghai 5th street, high street 5, hot step +2 moreFormat string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company)...CVE-2008-3116Public exploit10.0 HighJuly 10, 2008
sun jdk, jre +1 moreSecure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through...CVE-2008-31157.5 HighJuly 9, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open