Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
July

CVEs published in July 2008

520 vulnerabilities, 62 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

debian horde, turba +1 moreCross-site scripting (XSS) vulnerability in services/obrowser/index.php in Horde 3.2 and Turba 2...CVE-2008-33304.3 MediumJuly 27, 2008
twibright linksUnspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact...CVE-2008-3329Fix available9.3 HighJuly 27, 2008
edgewall software tracTrac Cross-site Scripting (XSS) vulnerabilityCVE-2008-3328Fix available4.3 MediumJuly 27, 2008
edgewall trac, fedoraproject fedora +1 moreTrac Open Redirect vulnerabilityCVE-2008-2951Fix available6.1 MediumJuly 27, 2008
debian python-dnsPyDNS (aka python-dns) before 2.3.1-5 in Debian GNU/Linux does not use random source ports for...CVE-2008-41266.4 MediumJuly 27, 2008
debian python-dnsPyDNS (aka python-dns) before 2.3.1-4 in Debian GNU/Linux does not use random source ports or...CVE-2008-40996.4 MediumJuly 27, 2008
moodleMoodle 1.6.5, when display_errors is enabled, allows remote attackers to obtain sensitive...CVE-2008-33274.3 MediumJuly 25, 2008
moodleCross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x...CVE-2008-33262.6 LowJuly 25, 2008
moodle, debian linux +1 moreCross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7...CVE-2008-33256.0 MediumJuly 25, 2008
maian recipeadmin/index.php in Maian Recipe 1.2 and earlier allows remote attackers to bypass authentication...CVE-2008-3322Public exploit7.5 HighJuly 25, 2008
maian script world uploaderadmin/index.php in Maian Uploader 4.0 and earlier allows remote attackers to bypass...CVE-2008-3321Public exploit7.5 HighJuly 25, 2008
maian guestbookadmin/index.php in Maian Guestbook 3.2 and earlier allows remote attackers to bypass...CVE-2008-3320Public exploit7.5 HighJuly 25, 2008
maian linksadmin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication...CVE-2008-3319Public exploit7.5 HighJuly 25, 2008
maian weblogadmin/index.php in Maian Weblog 4.0 and earlier allows remote attackers to bypass authentication...CVE-2008-3318Public exploit7.5 HighJuly 25, 2008
maian script world searchadmin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication...CVE-2008-3317Public exploit7.5 HighJuly 25, 2008
portalparts forum pluginCross-site scripting (XSS) vulnerability in the search feature in the Forum plugin before 2.7.1...CVE-2008-33164.3 MediumJuly 25, 2008
clarolineMultiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10 allow remote attackers to...CVE-2008-3315Public exploit4.3 MediumJuly 25, 2008
zdaemonZDaemon 1.08.07 and earlier allows remote attackers to cause a denial of service (daemon crash)...CVE-2008-3314Public exploit5.0 MediumJuly 25, 2008
creacmsMultiple PHP remote file inclusion vulnerabilities in CreaCMS 1.0 allow remote attackers to...CVE-2008-3313Public exploit7.5 HighJuly 25, 2008
lemoncms lemon cmsDirectory traversal vulnerability in lemon_includes/FCKeditor/editor/filemanager/browser/browser...CVE-2008-3312Public exploit6.8 MediumJuly 25, 2008
adam scheinberg flipPHP remote file inclusion vulnerability in config.php in Adam Scheinberg Flip 3.0 allows remote...CVE-2008-3311Public exploit7.5 HighJuly 25, 2008
preproject pre survey pollSQL injection vulnerability in default.asp in Pre Survey Poll allows remote attackers to execute...CVE-2008-3310Public exploit7.5 HighJuly 25, 2008
digiappz digileaveSQL injection vulnerability in info_book.asp in DigiLeave 1.2 and earlier allows remote attackers...CVE-2008-3309Public exploit7.5 HighJuly 25, 2008
carlos desseno youtube blogPHP remote file inclusion vulnerability in cuenta/cuerpo.php in C. Desseno YouTube Blog (ytb) 0.1...CVE-2008-3308Public exploit6.8 MediumJuly 25, 2008
youtube blog blogSQL injection vulnerability in todos.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote...CVE-2008-3307Public exploit7.5 HighJuly 25, 2008
youtube blog blogSQL injection vulnerability in info.php in C. Desseno YouTube Blog (ytb) 0.1 allows remote...CVE-2008-3306Public exploit7.5 HighJuly 25, 2008
carlos desseno youtube blogCross-site scripting (XSS) vulnerability in mensaje.php in C. Desseno YouTube Blog (ytb) 0.1...CVE-2008-3305Public exploit4.3 MediumJuly 25, 2008
tuxplanet bilboblogBilboBlog 0.2.1 allows remote attackers to obtain sensitive information via (1) an enable_cache...CVE-2008-3304Public exploit5.0 MediumJuly 25, 2008
tuxplanet bilboblogadmin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to...CVE-2008-3303Public exploit6.8 MediumJuly 25, 2008
tuxplanet bilboblogSQL injection vulnerability in admin/delete.php in BilboBlog 0.2.1, when magic_quotes_gpc is...CVE-2008-3302Public exploit6.0 MediumJuly 25, 2008
tuxplanet bilboblogMultiple cross-site scripting (XSS) vulnerabilities in BilboBlog 0.2.1 allow remote authenticated...CVE-2008-3301Public exploit3.5 LowJuly 25, 2008
alphadmin cmsAlphAdmin CMS 1.0.5/03 allows remote attackers to bypass authentication and gain administrative...CVE-2008-3300Public exploit7.5 HighJuly 25, 2008
esyndicateSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by...CVE-2008-3299Public exploit7.5 HighJuly 25, 2008
social engine engineSocialEngine (SE) before 2.83 grants certain write privileges for templates, which allows remote...CVE-2008-32986.0 MediumJuly 25, 2008
social engine engineMultiple SQL injection vulnerabilities in SocialEngine (SE) before 2.83 allow remote attackers to...CVE-2008-32977.5 HighJuly 25, 2008
xoopsDirectory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote...CVE-2008-3296Public exploit7.5 HighJuly 25, 2008
xoopsCross-site scripting (XSS) vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows...CVE-2008-3295Public exploit4.3 MediumJuly 25, 2008
vimsrc/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not...CVE-2008-32943.7 LowJuly 24, 2008
ezwebalbumDirectory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read...CVE-2008-3293Public exploit5.0 MediumJuly 24, 2008
ezwebalbumconstants.inc in EZWebAlbum 1.0 allows remote attackers to bypass authentication and gain...CVE-2008-3292Public exploit6.4 MediumJuly 24, 2008
aprox cms engine, aproxengine +1 moreSQL injection vulnerability in index.php in AproxEngine (aka Aprox CMS Engine) 5.1.0.4 allows...CVE-2008-3291Public exploit7.5 HighJuly 24, 2008
emc dantz retrospect backup clientretroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a...CVE-2008-32905.0 MediumJuly 24, 2008
storcentric retrospect backup clientEMC Dantz Retrospect Backup Client 7.5.116 sends the password hash in cleartext at an unspecified...CVE-2008-32897.5 HighJuly 24, 2008
emc dantz retrospect backup serverThe Server Authentication Module in EMC Dantz Retrospect Backup Server 7.5.508 uses a "weak hash...CVE-2008-32885.0 MediumJuly 24, 2008
emc dantz retrospect backup clientretroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a...CVE-2008-32875.0 MediumJuly 24, 2008
sierra swat 4SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a ...CVE-2008-3286Public exploit5.0 MediumJuly 24, 2008
alain barbet filesys smbclientparserThe Filesys::SmbClientParser module 2.7 and earlier for Perl allows remote SMB servers to execute...CVE-2008-3285Public exploit9.3 HighJuly 24, 2008
winsoftmagic winremotepc full, winremotepc lite +1 moreWRPCServer.exe in WinSoftMagic WinRemotePC (WRPC) Lite 2008 and Full 2008 allows remote attackers...CVE-2008-3269Public exploitEPSS 10.8%5.0 MediumJuly 24, 2008
brickhost phpscheduleitUnspecified vulnerability in phpScheduleIt 1.2.0 through 1.2.9, when useLogonName is enabled,...CVE-2008-32686.8 MediumJuly 24, 2008
mojoscripts mojojobsSQL injection vulnerability in mojoJobs.cgi in MojoJobs allows remote attackers to execute...CVE-2008-3267Public exploit7.5 HighJuly 24, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open