Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
July

CVEs published in July 2008

520 vulnerabilities, 62 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

fizzmedia negativekarma fizzmediaSQL injection vulnerability in comment.php in Fizzmedia 1.51.2 allows remote attackers to execute...CVE-2008-3378Public exploit7.5 HighJuly 30, 2008
brandon tallent phptestSQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute...CVE-2008-3377Public exploit7.5 HighJuly 30, 2008
jamroomMultiple unspecified vulnerabilities in JamRoom before 3.4.0 have unknown impact and attack vectors.CVE-2008-337610.0 HighJuly 30, 2008
jamroomThe jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote...CVE-2008-3375Public exploit7.5 HighJuly 30, 2008
gregariusSQL injection vulnerability in ajax.php in Gregarius 0.5.4 and earlier allows remote attackers to...CVE-2008-3374Public exploit7.5 HighJuly 30, 2008
grisoft avg antivirusThe files parsing engine in Grisoft AVG Anti-Virus before 8.0.156 allows remote attackers to...CVE-2008-33735.0 MediumJuly 30, 2008
greatclone getacoder cloneSQL injection vulnerability in search_form.php in Getacoder Clone allows remote attackers to...CVE-2008-3372Public exploit7.5 HighJuly 30, 2008
talkbackDirectory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions...CVE-2008-3371Public exploit7.5 HighJuly 30, 2008
emc centera universal accessSQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access (CUA) 4...CVE-2008-3370Public exploit7.5 HighJuly 30, 2008
viart shopSQL injection vulnerability in products_rss.php in ViArt Shop 3.5 and earlier allows remote...CVE-2008-3369Public exploit7.5 HighJuly 30, 2008
atutorPHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and...CVE-2008-3368Public exploit6.5 MediumJuly 30, 2008
webwizguide web wiz rich text editorCross-site scripting (XSS) vulnerability in RTE_popup_link.asp in Web Wiz Rich Text Editor (RTE)...CVE-2008-33674.3 MediumJuly 30, 2008
pligg cmsSQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to...CVE-2008-3366Public exploit7.5 HighJuly 30, 2008
pixelpostDirectory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when...CVE-2008-3365Public exploit6.8 MediumJuly 30, 2008
trend micro officescanBuffer overflow in the ObjRemoveCtrl Class ActiveX control in OfficeScanRemoveCtrl.dll 7.3.0.1020...CVE-2008-3364Public exploitEPSS 32.8%9.3 HighJuly 30, 2008
dokeos e-learning systemDirectory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on...CVE-2008-3363Public exploit7.5 HighJuly 30, 2008
giulio ganci wp downloads managerUnrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager...CVE-2008-3362Public exploitEPSS 16.8%10.0 HighJuly 30, 2008
intellitamperStack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary...CVE-2008-3361Public exploit7.5 HighJuly 29, 2008
intellitamperStack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to...CVE-2008-3360Public exploit9.3 HighJuly 29, 2008
owl intranet knowledgebaseSQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet...CVE-2008-33597.5 HighJuly 29, 2008
owl intranet knowledgebaseCross-site scripting (XSS) vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent...CVE-2008-3100Public exploit4.3 MediumJuly 29, 2008
eps probe builder, hp openview internet services +1 moreThe Probe Builder Service (aka PBOVISServer.exe) in European Performance Systems (EPS) Probe...CVE-2008-16677.8 HighJuly 29, 2008
camera life lifeSQL injection vulnerability in sitemap.xml.php in Camera Life 2.6.2 allows remote attackers to...CVE-2008-3355Public exploit7.5 HighJuly 28, 2008
runcms, runcms newbb plus module +1 moreMultiple PHP remote file inclusion vulnerabilities in the Newbb Plus (newbb_plus) module 0.93 in...CVE-2008-3354Public exploit7.5 HighJuly 28, 2008
puresw loreMultiple cross-site scripting (XSS) vulnerabilities in Pure Software Lore before 1.7.0 allow...CVE-2008-33534.3 MediumJuly 28, 2008
nersoft live music plusSQL injection vulnerability in index.php in Live Music Plus 1.1.0 allows remote attackers to...CVE-2008-3352Public exploit7.5 HighJuly 28, 2008
atomphotoblogSQL injection vulnerability in atomPhotoBlog.php in Atom PhotoBlog 1.0.9.1 and 1.1.5b1 allows...CVE-2008-3351Public exploit7.5 HighJuly 28, 2008
the kelleys dnsmasqdnsmasq 2.43 allows remote attackers to cause a denial of service (daemon crash) by (1) sending a...CVE-2008-3350Fix available5.0 MediumJuly 28, 2008
netapp data ontapMultiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer...CVE-2008-334910.0 HighJuly 28, 2008
redhat cygwinsetup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which...CVE-2008-33237.6 HighJuly 28, 2008
realnetworks realplayerStack-based buffer overflow in a certain ActiveX control in rjbdll.dll in RealNetworks RealPlayer...CVE-2008-30669.3 HighJuly 28, 2008
realnetworks realplayerUnspecified vulnerability in RealNetworks RealPlayer Enterprise, RealPlayer 10, and RealPlayer 10...CVE-2008-306410.0 HighJuly 28, 2008
gnu coreutilsThe default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to...CVE-2008-1946Fix available4.4 MediumJuly 28, 2008
real realplayerHeap-based buffer overflow in the Shockwave Flash (SWF) frame handling in RealNetworks RealPlayer...CVE-2007-5400Fix available9.3 HighJuly 28, 2008
myiosoft easydynamicpagesCross-site scripting (XSS) vulnerability in staticpages/easycalendar/index.php in MyioSoft...CVE-2008-33484.3 MediumJuly 28, 2008
myiosoft easydynamicpagesSQL injection vulnerability in staticpages/easycalendar/index.php in MyioSoft EasyDynamicPages 3...CVE-2008-3347Public exploit7.5 HighJuly 28, 2008
e-topbiz shopcart dxSQL injection vulnerability in product_detail.php in ShopCart DX allows remote attackers to...CVE-2008-3346Public exploit7.5 HighJuly 28, 2008
myiosoft easye-cardsSQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial...CVE-2008-3345Public exploit6.8 MediumJuly 28, 2008
myiosoft easye-cardsMultiple cross-site scripting (XSS) vulnerabilities in staticpages/easyecards/index.php in...CVE-2008-33444.3 MediumJuly 28, 2008
myiosoft easypublishSQL injection vulnerability in staticpages/easypublish/index.php in MyioSoft EasyPublish 3.0tr ...CVE-2008-3343Public exploit7.5 HighJuly 28, 2008
myiosoft easypublishCross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in MyioSoft...CVE-2008-33424.3 MediumJuly 28, 2008
jobbex jobsiteMultiple SQL injection vulnerabilities in search_result.cfm in Jobbex JobSite allow remote...CVE-2008-33417.5 HighJuly 28, 2008
jobbex jobsiteCross-site scripting (XSS) vulnerability in search_result.cfm in Jobbex JobSite allows remote...CVE-2008-33404.3 MediumJuly 28, 2008
avidweb technologies jobbex jobsitesearch_result.cfm in Jobbex JobSite allows remote attackers to obtain sensitive information via...CVE-2008-33396.8 MediumJuly 28, 2008
punbbMultiple cross-site scripting (XSS) vulnerabilities in PunBB before 1.2.19 allow remote attackers...CVE-2008-33364.3 MediumJuly 27, 2008
punbbUnspecified vulnerability in PunBB before 1.2.19 allows remote attackers to inject arbitrary SMTP...CVE-2008-333510.0 HighJuly 27, 2008
mybbCross-site scripting (XSS) vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to...CVE-2008-33344.3 MediumJuly 27, 2008
mantisDirectory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote...CVE-2008-33337.5 HighJuly 27, 2008
mantisEval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote...CVE-2008-3332Public exploit6.5 MediumJuly 27, 2008
mantisCross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2...CVE-2008-3331Public exploit3.5 LowJuly 27, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open