CVEs published in August 2008
368 vulnerabilities, 61 critical, 1 exploited.
- unak unak-cmsAbsolute path traversal vulnerability in fckeditor/editor/filemanager/browser/default/connectors...7.5 High
- nullsoft winampCross-zone scripting vulnerability in the NowPlaying functionality in NullSoft Winamp before 5...4.3 Medium
- zoneo-soft freeforumCross-site scripting (XSS) vulnerability in ZoneO-soft freeForum 1.7 allows remote attackers to...4.3 Medium
- mrbsMultiple cross-site scripting (XSS) vulnerabilities in Meeting Room Booking System (MRBS) 1.2.6...4.3 Medium
- dayfox designs blogMultiple directory traversal vulnerabilities in index.php in Dayfox Blog 4 allow remote attackers...7.5 High
- ploggerMultiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to...7.5 High
- chupix cms, cms contact module +1 moreDirectory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when...5.1 Medium
- powergap shopsystemSQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled,...6.8 Medium
- jboss enterprise application platformJBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4...5.0 Medium
- xoops kshop moduleCross-site scripting (XSS) vulnerability in kshop_search.php in the Kshop module 2.22 for Xoops...4.3 Medium
- kaphotoserviceMultiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to...4.3 Medium
- cisco webex meeting managerStack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx...9.3 High
- fhm-script free hosting managerFree Hosting Manager 1.2 and 2.0 allows remote attackers to bypass authentication and gain...7.5 High
- haudenschilt battlenet clan scriptMultiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote...7.5 High
- wsn forum, gallery, knowledge base +1 more +3 moreDirectory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4...6.8 Medium
- comsenz discuzSQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute...7.5 High
- sun j2meMultiple unspecified vulnerabilities in Nokia Series 40 3rd edition devices allow remote...10.0 High
- nokia series 40Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition FP1, and possibly later...10.0 High
- sun java platform micro edition, wireless toolkit +1 moreMultiple unspecified vulnerabilities in Sun Java Platform Micro Edition (aka Java ME, J2ME, or...10.0 High
- ibm rational clearquestThe CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain...5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreOff-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6...4.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe shmem_delete_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel...4.9 Medium
- pidginThe NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it...6.8 Medium
- powerdns authoritative server, powerdns +1 morePowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier...6.4 Medium
- gnu gnutlsUse-after-free vulnerability in the _gnutls_handshake_hash_buffers_clear function in lib...7.6 High
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreQEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to...2.1 Low
- hp hp-uxUnspecified vulnerability in libc on HP HP-UX B.11.23 and B.11.31 allows remote attackers to...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound...2.1 Low
- sun opensolaris, solaris, sunos +2 moreMultiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris...9.3 High
- sun opensolaris, solaris, sunos +2 moreMultiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before...9.3 High
- sun opensolaris, solaris +1 moreUnspecified vulnerability in the pthread_mutex_reltimedlock_np API in Sun Solaris 10 and...4.7 Medium
- sun netra t5220 serverUnspecified vulnerability in the Sun Netra T5220 Server with firmware 7.1.3 allows local users to...4.9 Medium
- gitStack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before...7.5 High
- php nuke basis consultant book catalogSQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke allows remote attackers...7.5 High
- php nuke kleinanzeigen moduleSQL injection vulnerability in the Kleinanzeigen module for PHP-Nuke allows remote attackers to...7.5 High
- softbizscripts image gallery scriptMultiple cross-site scripting (XSS) vulnerabilities in Softbiz Image Gallery (Photo Gallery)...4.3 Medium
- crafty syntax live help syntax live helpCross-site scripting (XSS) vulnerability in livehelp_js.php in Crafty Syntax Live Help (CSLH) 2...4.3 Medium
- lovecmsLoveCMS 1.6.2 does not require administrative authentication for (1) addblock.php, (2) blocks.php...7.5 High
- wogan may litenewsLiteNews 0.1 (aka 01), and possibly 1.2 and earlier, allows remote attackers to bypass...5.0 Medium
- wogan may litenewsSQL injection vulnerability in index.php in LiteNews 0.1 (aka 01), and possibly 1.2 and earlier,...7.5 High
- polypagerSQL injection vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers to execute...7.5 High
- polypagerCross-site scripting (XSS) vulnerability in PolyPager 1.0 rc2 and earlier allows remote attackers...4.3 Medium
- mpfm mask php file managerUnspecified vulnerability in mask PHP File Manager (mPFM) before 2.3 has unknown impact and...7.5 High
- webgui plain black webguiRSSFromParent in Plain Black WebGUI before 7.5.13 does not restrict view access to Collaboration...5.0 Medium
- bestpractical rtUnspecified vulnerability in Best Practical Solutions RT 3.0.0 through 3.6.6 allows remote...4.0 Medium
- novell groupwiseCross-site scripting (XSS) vulnerability in the WebAccess simple interface in Novell Groupwise 7...4.3 Medium
- drupal suggested terms moduleCross-site scripting (XSS) vulnerability in the Suggested Terms module 5.x before 5.x-1.2 for...4.3 Medium
- ektron cms4000.netUnspecified vulnerability in "a page in the workarea folder" in Ektron CMS400.NET 7.00 through 7...10.0 High
- netshinesoftware com netinvoiceSQL injection vulnerability in the nBill (com_netinvoice) component 1.2.0 SP1 for Joomla! allows...7.5 High
- myphp cms cmsSQL injection vulnerability in pages.php in MyPHP CMS 0.3.1 allows remote attackers to execute...6.8 Medium
- Show moreLoading…