Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
August

CVEs published in August 2008

368 vulnerabilities, 61 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

linux kernelBuffer overflow in format descriptor parsing in the uvc_parse_format function in drivers/media...CVE-2008-349610.0 HighAugust 6, 2008
aspindir pcshey portalSQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute...CVE-2008-3495Public exploit7.5 HighAugust 6, 2008
8e6 r3000 internet filter8e6 R3000 Internet Filter 2.0.12.10 allows remote attackers to bypass intended restrictions via...CVE-2008-3494Public exploit7.8 HighAugust 6, 2008
realvnc windows clientvncviewer.exe in RealVNC Windows Client 4.1.2.0 allows remote VNC servers to cause a denial of...CVE-2008-3493Public exploit5.0 MediumAugust 6, 2008
americasarmy america\'s armyAmerica's Army (aka AA or Army Game Project) 2.8.3.1 and earlier allows remote attackers to cause...CVE-2008-34925.0 MediumAugust 6, 2008
apache http server, apple mac os x, canonical ubuntu linux +1 more +3 moreCross-site scripting (XSS) vulnerability in proxy_ftp.c in the mod_proxy_ftp module in Apache 2.0...CVE-2008-2939Fix availableEPSS 39.0%4.3 MediumAugust 6, 2008
scripts24 ipost, itgp +1 moreSQL injection vulnerability in go.php in Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote...CVE-2008-3491Public exploit7.5 HighAugust 6, 2008
e-topbiz online datingSQL injection vulnerability in members/mail.php in E-topbiz Online Dating 3 1.0 allows remote...CVE-2008-3490Public exploit6.5 MediumAugust 6, 2008
phpxSQL injection vulnerability in checkCookie function in includes/functions.inc.php in PHPX 3.5.16...CVE-2008-3489Public exploit7.5 HighAugust 6, 2008
novell imanagerUnspecified vulnerability in Novell iManager before 2.7 SP1 (2.7.1) allows remote attackers to...CVE-2008-34887.5 HighAugust 6, 2008
phpauctions phpauction gpl enhancedSQL injection vulnerability in profile.php in PHPAuction GPL Enhanced 2.51 allows remote...CVE-2008-3487Public exploit7.5 HighAugust 6, 2008
coppermine-gallery coppermine photo galleryDirectory traversal vulnerability in the user_get_profile function in include/functions.inc.php...CVE-2008-3486Public exploit7.5 HighAugust 6, 2008
citrix metaframe presentation server, xp +1 moreUntrusted search path vulnerability in Citrix MetaFrame Presentation Server allows local users to...CVE-2008-34857.2 HighAugust 6, 2008
estoreaffSQL injection vulnerability in eStoreAff 0.1 allows remote attackers to execute arbitrary SQL...CVE-2008-3484Public exploit7.5 HighAugust 5, 2008
screwturn wikiCross-site scripting (XSS) vulnerability in ScrewTurn Wiki 2.0.29 and 2.0.30 allows remote...CVE-2008-3483Public exploit4.3 MediumAugust 5, 2008
panasonic bb hcm511, bb hcm515, bb hcm527 +5 more +7 moreCross-site scripting (XSS) vulnerability in the error page feature in Panasonic Network Camera BL...CVE-2008-34824.3 MediumAugust 5, 2008
coppermine-gallery coppermine photo gallerythemes/sample/theme.php in Coppermine Photo Gallery (CPG) 1.4.18 and earlier allows remote...CVE-2008-3481Public exploit7.5 HighAugust 5, 2008
oracle virtualboxThe VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the...CVE-2008-3431In KEVPublic exploit8.8 HighAugust 5, 2008
ingresStack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka...CVE-2008-33894.6 MediumAugust 5, 2008
actian ingresUntrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4...CVE-2008-33577.2 HighAugust 5, 2008
ingresverifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0)...CVE-2008-33564.6 MediumAugust 5, 2008
openvpnUnspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows...CVE-2008-3459Fix available7.6 HighAugust 4, 2008
vtiger crmVtiger CRM before 5.0.4 stores sensitive information under the web root with insufficient access...CVE-2008-34585.0 MediumAugust 4, 2008
phpmyadminCross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user...CVE-2008-3457Fix available2.6 LowAugust 4, 2008
phpmyadminphpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to...CVE-2008-3456Fix available6.4 MediumAugust 4, 2008
jnshosts php hosting directoryPHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2...CVE-2008-3455Public exploit10.0 HighAugust 4, 2008
jnshosts php hosting directoryJnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain...CVE-2008-3454Public exploit7.5 HighAugust 4, 2008
impresscmsMultiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors,...CVE-2008-345310.0 HighAugust 4, 2008
endonesia calendar module, endonesia +1 moreSQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to...CVE-2008-3452Public exploit6.8 MediumAugust 4, 2008
phpwebgalleryPhpWebGallery 1.7.0 and 1.7.1 allows remote authenticated users with advisor privileges to obtain...CVE-2008-34514.0 MediumAugust 4, 2008
sun sunosUnspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local...CVE-2008-34507.2 HighAugust 4, 2008
mailenableMailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of...CVE-2008-34495.0 MediumAugust 4, 2008
common-solutions csphonebookCross-site scripting (XSS) vulnerability in index.php in common solutions csphonebook 1.02 allows...CVE-2008-3448Public exploit4.3 MediumAugust 4, 2008
f-prot antivirus, scanning engine +1 moreThe scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of...CVE-2008-3447Public exploit5.0 MediumAugust 4, 2008
letteritDirectory traversal vulnerability in inc/wysiwyg.php in LetterIt 2 allows remote attackers to...CVE-2008-3446Public exploit6.8 MediumAugust 4, 2008
phpmyrealtySQL injection vulnerability in index.php in phpMyRealty (PMR) 2.0.0 allows remote attackers to...CVE-2008-3445Public exploit7.5 HighAugust 4, 2008
mozilla firefoxThe content layout component in Mozilla Firefox 3.0 and 3.0.1 allows remote attackers to cause a...CVE-2008-34444.3 MediumAugust 4, 2008
ibm websphere portalIBM WebSphere Portal 5.1 through 6.1.0.0 allows remote attackers to bypass authentication and...CVE-2008-34237.5 HighAugust 4, 2008
apache tomcatApache Tomcat Path Traversal VulnerabilityCVE-2008-2370Public exploitFix availableEPSS 52.7%5.0 MediumAugust 4, 2008
apple quicklookQuickLook in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code...CVE-2008-23259.3 HighAugust 4, 2008
apple mac os x, mac os x server +1 moreThe Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the...CVE-2008-23244.6 MediumAugust 4, 2008
apple data detectors engineUnspecified vulnerability in Data Detectors Engine in Apple Mac OS X 10.5.4 allows attackers to...CVE-2008-23237.1 HighAugust 4, 2008
apple coregraphicsInteger overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote...CVE-2008-23229.3 HighAugust 4, 2008
apple coregraphicsUnspecified vulnerability in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.4 allows remote...CVE-2008-2321Public exploitEPSS 12.5%9.3 HighAugust 4, 2008
apple carboncoreStack-based buffer overflow in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.4, iPhone OS 1.0...CVE-2008-23209.3 HighAugust 4, 2008
apache tomcatApache Tomcat Cross-site scripting (XSS) vulnerabilityCVE-2008-1232Public exploitFix availableEPSS 75.9%4.3 MediumAugust 4, 2008
opensc-project openscpkcs15-tool in OpenSC before 0.11.6 does not apply security updates to a smart card unless the...CVE-2008-3972Fix available6.6 MediumAugust 4, 2008
winzipWinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the...CVE-2008-34427.5 HighAugust 1, 2008
nullsoft winampNullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows...CVE-2008-34417.5 HighAugust 1, 2008
sun javaSun Java 1.6.0_03 and earlier versions, and possibly later versions, does not properly verify the...CVE-2008-34407.5 HighAugust 1, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open