Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
July

CVEs published in July 2008

520 vulnerabilities, 62 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

softacid hotel reservation system multiSQL injection vulnerability in picture_pic_bv.asp in SoftAcid Hotel Reservation System (HRS)...CVE-2008-3266Public exploit7.5 HighJuly 24, 2008
joomla com dtregisterSQL injection vulnerability in the DT Register (com_dtregister) 2.2.3 component for Joomla!...CVE-2008-3265Public exploit6.8 MediumJuly 24, 2008
asterisk appliance developer kit, business edition, asterisknow +1 more +3 moreThe FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30,...CVE-2008-3264Fix available7.8 HighJuly 24, 2008
linux kernelThe LDT implementation in the Linux kernel 2.6.25.x before 2.6.25.11 on x86_64 platforms uses an...CVE-2008-32477.2 HighJuly 24, 2008
asteriskThe IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x...CVE-2008-3263Public exploitFix availableEPSS 28.0%7.8 HighJuly 22, 2008
clarolineCross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allows remote...CVE-2008-32625.8 MediumJuly 22, 2008
clarolineOpen redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote...CVE-2008-3261Public exploit4.3 MediumJuly 22, 2008
clarolineMultiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote...CVE-2008-3260Public exploit4.3 MediumJuly 22, 2008
openbsd opensshOpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration...CVE-2008-32591.2 LowJuly 22, 2008
zophMultiple SQL injection vulnerabilities in Zoph before 0.7.0.5 allow remote attackers to execute...CVE-2008-3258Fix available7.5 HighJuly 22, 2008
bea weblogic server, bea systems apache connector in weblogic server +1 moreStack-based buffer overflow in the Apache Connector (mod_wl) in Oracle WebLogic Server (formerly...CVE-2008-3257Public exploitEPSS 86.8%10.0 HighJuly 22, 2008
siteframe beaumont, cms +1 moreSQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe...CVE-2008-3256Public exploit7.5 HighJuly 22, 2008
ln-lab webproxyCross-site scripting (XSS) vulnerability in LunarNight Laboratory WebProxy 1.7.8 and earlier...CVE-2008-32554.3 MediumJuly 22, 2008
precoc precmsSQL injection vulnerability in index.php in preCMS 1 allows remote attackers to execute arbitrary...CVE-2008-3254Public exploit6.8 MediumJuly 22, 2008
citrix xenserverCross-site scripting (XSS) vulnerability in the XenAPI HTTP interfaces in Citrix XenServer...CVE-2008-32534.3 MediumJuly 22, 2008
opensuselibxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5...CVE-2008-31887.5 HighJuly 22, 2008
fedora newsxStack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows...CVE-2008-3252Fix available10.0 HighJuly 21, 2008
tpl design tplsoccersiteMultiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute...CVE-2008-3251Public exploit7.5 HighJuly 21, 2008
arctictracker arctic issue trackerSQL injection vulnerability in index.php in Arctic Issue Tracker 2.0.0 allows remote attackers to...CVE-2008-3250Public exploit7.5 HighJuly 21, 2008
lenovo thinkvantage system updateThe client in Lenovo System Update before 3.14 does not properly validate the certificate when...CVE-2008-32495.1 MediumJuly 21, 2008
blackberry enterprise server, unite, rim blackberry enterprise server +4 more +6 moreUnspecified vulnerability in the PDF distiller component in the BlackBerry Attachment Service in...CVE-2008-32469.3 HighJuly 21, 2008
cable-modems phphoo3SQL injection vulnerability in phpHoo3.php in phpHoo3 4.3.9, 4.3.10, 4.4.8, and 5.2.6 allows...CVE-2008-3245Public exploit7.5 HighJuly 21, 2008
f-prot antivirus, scanning engine +1 moreThe scanning engine before 4.4.4 in F-Prot Antivirus before 6.0.9.0 allows remote attackers to...CVE-2008-32444.3 MediumJuly 21, 2008
f-prot antivirus, scanning engine +1 moreMultiple unspecified vulnerabilities in the scanning engine before 4.4.4 in F-Prot Antivirus...CVE-2008-32434.3 MediumJuly 21, 2008
ppmate ppmedia classHeap-based buffer overflow in the PPMedia Class ActiveX control in PPMPlayer.dll in PPMate 2.3.1...CVE-2008-3242Public exploitEPSS 15.7%10.0 HighJuly 21, 2008
ultrastatsSQL injection vulnerability in players-detail.php in UltraStats 0.2.136, 0.2.140, and 0.2.142...CVE-2008-3241Public exploit7.5 HighJuly 21, 2008
alstrasoft affiliate network proSQL injection vulnerability in index.php in AlstraSoft Affiliate Network Pro allows remote...CVE-2008-3240Public exploit7.5 HighJuly 21, 2008
phpizabiUnrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in...CVE-2008-3239Public exploit9.3 HighJuly 21, 2008
itechscripts itechbidsMultiple SQL injection vulnerabilities in ITechBids 7.0 Gold allow remote attackers to execute...CVE-2008-3238Public exploit7.5 HighJuly 21, 2008
itechscripts itechbidsCross-site scripting (XSS) vulnerability in forward_to_friend.php in ITechBids 7.0 Gold allows...CVE-2008-3237Public exploit4.3 MediumJuly 21, 2008
ibm websphere application serverUnspecified vulnerability in Wsadmin in the System Management/Repository component in IBM...CVE-2008-32365.0 MediumJuly 21, 2008
ibm websphere application serverUnspecified vulnerability in the PropFilePasswordEncoder utility in the Security component in IBM...CVE-2008-323510.0 HighJuly 21, 2008
opensuse zypperzypp-refresh-patches in zypper in SUSE openSUSE 10.2, 10.3, and 11.0 does not ask the user before...CVE-2008-31875.0 MediumJuly 21, 2008
openbsd opensshsshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote...CVE-2008-3234Public exploit6.5 MediumJuly 18, 2008
wordpressCross-site scripting (XSS) vulnerability in WordPress before 2.6, SVN development versions only,...CVE-2008-3233Public exploit4.3 MediumJuly 18, 2008
dotclearUnrestricted file upload vulnerability in ecrire/images.php in Dotclear 1.2.7.1 and earlier...CVE-2008-32329.3 HighJuly 18, 2008
xine xine-libxine-lib before 1.1.15 allows remote attackers to cause a denial of service (crash) via a crafted...CVE-2008-32314.3 MediumJuly 18, 2008
ffmpeg lavf demuxerThe ffmpeg lavf demuxer allows user-assisted attackers to cause a denial of service (application...CVE-2008-3230Fix available1.9 LowJuly 18, 2008
swapoff opStack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows...CVE-2008-32296.9 MediumJuly 18, 2008
joomlaJoomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLsCVE-2008-3228Fix available7.5 HighJuly 18, 2008
joomlaJoomla! Open Redirect vulnerabilityCVE-2008-3227Fix available7.5 HighJuly 18, 2008
joomlaJoomla! allows attackers to access cached pagesCVE-2008-3226Fix available5.0 MediumJuly 18, 2008
joomlaJoomla! before 1.5.4 allows attackers to access administration functionality, which has unknown...CVE-2008-322510.0 HighJuly 18, 2008
phpbbUnspecified vulnerability in phpBB before 3.0.1 has unknown impact and attack vectors related to ...CVE-2008-322410.0 HighJuly 18, 2008
drupal, fedoraproject fedora +1 moreSQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to...CVE-2008-32237.5 HighJuly 18, 2008
drupal, fedoraproject fedora +1 moreSession fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed...CVE-2008-32225.8 MediumJuly 18, 2008
drupal, fedoraproject fedora +1 moreCross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers...CVE-2008-32214.3 MediumJuly 18, 2008
drupal, fedoraproject fedora +1 moreCross-site request forgery (CSRF) vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3...CVE-2008-32204.3 MediumJuly 18, 2008
drupal, fedoraproject fedora +1 moreThe Drupal filter_xss_admin function in 5.x before 5.8 and 6.x before 6.3 does not "prevent use...CVE-2008-32194.3 MediumJuly 18, 2008
drupal, fedoraproject fedora +1 moreDrupal vulnerable to Cross-site ScriptingCVE-2008-3218Fix available4.3 MediumJuly 18, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open