CVEs published in August 2008
368 vulnerabilities, 61 critical, 1 exploited.
- fedora directory server Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and... 7.8 High
- apache openoffice, fedoraproject fedora +1 more Integer overflow in the rtl_allocateMemory function in sal/rtl/source/alloc_global.c in the... 7.8 High
- fedora directory server Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server... 7.1 High
- fedora directory server Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory... 4.3 Medium
- redhat directory server Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory... 10.0 High
- lussumo vanilla Cross-site scripting (XSS) vulnerability in account.php in Lussumo Vanilla 1.1.5-rc1, 1.1.4, and... 3.5 Low
- adobe flash player The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows... 4.3 Medium
- anzio print wizard, web print object +1 more Stack-based buffer overflow in the Anzio Web Print Object (WePO) ActiveX control 3.2.19 and 3.2... 9.3 High
- phpmyrealty Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 and earlier allow remote... 7.5 High
- ibm lotus quickr Multiple cross-site scripting (XSS) vulnerabilities (1) in the WYSIWYG editors, (2) during local... 4.3 Medium
- davlin thickbox gallery Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5... 5.0 Medium
- ibm db2 universal database The Downlevel DB2RA Support component in IBM DB2 9.1 before Fixpak 4a allows remote attackers to... 4.3 Medium
- ibm db2 universal database The Base Service Utilities component in IBM DB2 9.1 before Fixpak 5 retains a cleartext password... 4.6 Medium
- ibm db2 universal database The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1... 7.5 High
- ibm db2 universal database Unspecified vulnerability in the DB2 Administration Server (DAS) in the Core DAS function... 4.6 Medium
- ibm db2 universal database Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1... 7.8 High
- ibm db2 universal database Buffer overflow in the DAS server program in the Core DAS function component in IBM DB2 9.1... 9.3 High
- ibm db2 universal database Unspecified vulnerability in the CLR stored procedure deployment from IBM Database Add-Ins for... 6.5 Medium
-
r-baseDebian r-base - symlink attack No score - pluck Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers... 5.0 Medium
- accellion secure file transfer appliance Cross-site scripting (XSS) vulnerability in Accellion File Transfer FTA_7_0_135 allows remote... 4.3 Medium
- civic-cms Cross-site scripting (XSS) vulnerability in the calendar controller in Civic Website Manager... 4.3 Medium
- pdesigner z-breaknews SQL injection vulnerability in single.php in Z-Breaknews 2.0 allows remote attackers to execute... 7.5 High
- aguestbook an guestbook Multiple cross-site scripting (XSS) vulnerabilities in AN Guestbook (ANG) before 0.7.6 allow... 4.3 Medium
- aquagardensoft mysql-lists Cross-site scripting (XSS) vulnerability in mysql-lists 1.2 and earlier allows remote attackers... 4.3 Medium
- craftysyntax crafty syntax live help Multiple SQL injection vulnerabilities in Crafty Syntax Live Help (CSLH) 2.14.6 and earlier allow... 7.5 High
- openbsd openssh Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008... 9.3 High
- microsoft .net framework Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework with... 4.3 Medium
- microsoft .net framework Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework... 4.3 Medium
- openfreeway freeway Cross-site scripting (XSS) vulnerability in admin/search_links.php in Freeway eCommerce 1.4.1.171... 4.3 Medium
- craftysyntax crafty syntax live help Crafty Syntax Live Help (CSLH) 2.14.6 and earlier stores passwords in cleartext in a MySQL... 5.0 Medium
- sun opensolaris, solaris +1 more Unspecified vulnerability in the NFS module in the kernel in Sun Solaris 10 and OpenSolaris... 4.7 Medium
- sun opensolaris, solaris +1 more Unspecified vulnerability in the NFS Remote Procedure Calls (RPC) zones implementation in Sun... 7.2 High
- ruby-lang ruby The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows... 5.0 Medium
- samba Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb... 2.1 Low
- spacetag lacoodast, system consultants la cooda wiz +1 more Cross-site scripting (XSS) vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier... 4.3 Medium
- spacetag lacoodast Session fixation vulnerability in SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to... 6.8 Medium
- spacetag lacoodast, system consultants la cooda wiz +1 more Unspecified vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2)... 10.0 High
- spacetag lacoodast, system consultants la cooda wiz +1 more Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ... 6.0 Medium
- linux kernel Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream... 7.8 High
- trendmicro officescan, worry-free business security, client server messaging suite +2 more The web management console in Trend Micro OfficeScan 7.0 through 8.0, Worry-Free Business... 9.8 Critical
- softartisans xfile Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in... 9.3 High
- swfdec Swfdec 0.6 before 0.6.8 allows remote attackers to cause a denial of service (application crash)... 5.0 Medium
- ipswitch ws ftp home Buffer overflow in Ipswitch WS_FTP Home client allows remote FTP servers to have an unknown... 10.0 High
- wordpress The (1) get_edit_post_link and (2) get_edit_comment_link functions in wp-includes/link-template... 7.5 High
- webdav neon neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service (NULL pointer... 4.3 Medium
- videolan vlc media player Integer signedness error in the mms_ReceiveCommand function in modules/access/mms/mmstu.c in VLC... 6.8 Medium
- picturespro photo cart Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magic_quotes_gpc is... 6.8 Medium
- nullscripts web directory script SQL injection vulnerability in listing_view.php in Web Directory Script 2.0 and earlier allows... 7.5 High
- picturespro photo cart Cross-site scripting (XSS) vulnerability in index.php in PICTURESPRO Photo Cart 3.9 allows remote... 4.3 Medium
- Show olderLoading…