Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
August

CVEs published in August 2008

368 vulnerabilities, 61 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

miacmsMultiple SQL injection vulnerabilities in the com_content component in MiaCMS 4.6.5 allow remote...CVE-2008-3785Public exploit7.5 HighAugust 26, 2008
btitracker project btitracker, xbtitracker project xbtitracker +1 moreSQL injection vulnerability in scrape.php in BtiTracker 1.4.7 and earlier and xBtiTracker 2.0.542...CVE-2008-3784Public exploit7.5 HighAugust 26, 2008
matterdaddy marketMultiple SQL injection vulnerabilities in index.php in Matterdaddy Market 1.1, when...CVE-2008-3783Public exploit6.8 MediumAugust 26, 2008
discountedscripts acg ptpMultiple cross-site scripting (XSS) vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow...CVE-2008-37823.5 LowAugust 26, 2008
gmod gbrowseCross-site scripting (XSS) vulnerability in GMOD GBrowse before 1.69 allows remote attackers to...CVE-2008-37814.3 MediumAugust 26, 2008
review-script five star review scriptSQL injection vulnerability in recommend.php in Five Star Review Script allows remote attackers...CVE-2008-3780Public exploit7.5 HighAugust 26, 2008
review-script five star review scriptCross-site scripting (XSS) vulnerability in search/index.php in Five Star Review Script allows...CVE-2008-3779Public exploit4.3 MediumAugust 26, 2008
libtiffMultiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector...CVE-2008-2327Fix available6.8 MediumAugust 26, 2008
avaya communication manager, sip enablement services +1 moreThe remote management interface in SIP Enablement Services (SES) Server in Avaya SIP Enablement...CVE-2008-37787.5 HighAugust 25, 2008
avaya communication manager, sip enablement services +1 moreThe SIP Enablement Services (SES) Server in Avaya SIP Enablement Services 5.0, and Communication...CVE-2008-37772.1 LowAugust 25, 2008
fujitsu web based admin viewDirectory traversal vulnerability in Fujitsu Web-Based Admin View 2.1.2 allows remote attackers...CVE-2008-3776Public exploit5.0 MediumAugust 25, 2008
newsoftwares folder lockFolder Lock 5.9.5 and earlier uses weak encryption (ROT-25) for the password, which allows local...CVE-2008-37754.4 MediumAugust 22, 2008
simasy cmsSQL injection vulnerability in index.php in Simasy CMS allows remote attackers to execute...CVE-2008-3774Public exploit7.5 HighAugust 22, 2008
vbulletinCross-site scripting (XSS) vulnerability in vBulletin 3.7.2 PL1 and 3.6.10 PL3, when "Show New...CVE-2008-3773Public exploit4.3 MediumAugust 22, 2008
pars4u videosharingSQL injection vulnerability in categories_portal.php in Pars4u Videosharing 1 allows remote...CVE-2008-3772Public exploit7.5 HighAugust 22, 2008
pars4u videosharingCross-site scripting (XSS) vulnerability in members.php in Pars4u Videosharing 1 allows remote...CVE-2008-3771Public exploit4.3 MediumAugust 22, 2008
openfreeway freewayMultiple directory traversal vulnerabilities in Freeway 1.4.1.171, when register_globals is...CVE-2008-3770Public exploit6.8 MediumAugust 22, 2008
openfreeway freewayPHP remote file inclusion vulnerability in admin/create_order_new.php in Freeway 1.4.1.171, when...CVE-2008-37696.8 MediumAugust 22, 2008
turnkeywebtools sunshop shopping cartMultiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping...CVE-2008-3768Public exploit7.5 HighAugust 22, 2008
smartisoft phpbazarSQL injection vulnerability in classified.php in phpBazar 2.0.2 allows remote attackers to...CVE-2008-3767Public exploit7.5 HighAugust 22, 2008
realtime internet band rehearsal low latency internet connection toolRealtime Internet Band Rehearsal Low-Latency (Internet) Connection tool (llcon) before 2.1.2...CVE-2008-37665.0 MediumAugust 22, 2008
xmlsoft libxml2, apple iphone os, safari +8 more +10 morelibxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an...CVE-2008-3281Fix available6.5 MediumAugust 22, 2008
discountedscripts quick poll scriptSQL injection vulnerability in code.php in Quick Poll Script allows remote attackers to execute...CVE-2008-3765Public exploit7.5 HighAugust 21, 2008
turnkeywebtools php live helperEval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier...CVE-2008-3764Public exploit7.5 HighAugust 21, 2008
turnkeywebtools php live helperVariable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier,...CVE-2008-3763Public exploit6.8 MediumAugust 21, 2008
turnkeywebtools php live helperSQL injection vulnerability in onlinestatus_html.php in Turnkey PHP Live Helper 2.0.1 and earlier...CVE-2008-3762Public exploit7.5 HighAugust 21, 2008
vmware workstationhcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2...CVE-2008-3761Public exploit4.9 MediumAugust 21, 2008
lussumo vanillaCross-site request forgery (CSRF) vulnerability in the sign-out page in Vanilla 1.1.4 and earlier...CVE-2008-37604.3 MediumAugust 21, 2008
lussumo vanillaCross-site request forgery (CSRF) vulnerability in ajax/UpdateCheck.php in Vanilla 1.1.4 and...CVE-2008-37597.5 HighAugust 21, 2008
lussumo vanillaMultiple cross-site scripting (XSS) vulnerabilities in Lussumo Vanilla 1.1.4 and earlier (1)...CVE-2008-3758Public exploit4.3 MediumAugust 21, 2008
yourfreeworld forced matrix scriptSQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote...CVE-2008-37577.5 HighAugust 21, 2008
yourfreeworld viral marketing scriptSQL injection vulnerability in tr.php in YourFreeWorld Viral Marketing Script allows remote...CVE-2008-3756Public exploit7.5 HighAugust 21, 2008
yourfreeworld classifiedsSQL injection vulnerability in view.php in YourFreeWorld Classifieds Script allows remote...CVE-2008-3755Public exploit7.5 HighAugust 21, 2008
yourfreeworld stylish text ads scriptSQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote...CVE-2008-3754Public exploit7.5 HighAugust 21, 2008
yourfreeworld programs rating scriptSQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote...CVE-2008-37537.5 HighAugust 21, 2008
yourfreeworld ad-exchange scriptSQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers...CVE-2008-3752Public exploit7.5 HighAugust 21, 2008
yourfreeworld short url and url tracker scriptSQL injection vulnerability in tr.php in YourFreeWorld Short Url & Url Tracker Script allows...CVE-2008-37517.5 HighAugust 21, 2008
yourfreeworld url rotator scriptSQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers...CVE-2008-3750Public exploit7.5 HighAugust 21, 2008
yourfreeworld banner management scriptSQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote...CVE-2008-3749Public exploit7.5 HighAugust 21, 2008
lbstone active php bookmarks, apb +1 moreSQL injection vulnerability in view_group.php in Active PHP Bookmarks (APB) 1.1.02 and 1.2.06...CVE-2008-3748Public exploit7.5 HighAugust 21, 2008
phpizabiCross-site scripting (XSS) vulnerability in index.php in PHPizabi before 848 Core HotFix Pack 3...CVE-2008-37354.3 MediumAugust 20, 2008
ipswitch ws ftp home, ws ftp pro +1 moreFormat string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0...CVE-2008-3734Public exploitEPSS 13.9%9.3 HighAugust 20, 2008
eo-videoStack-based buffer overflow in EO Video (eo-video) 1.36 allows remote attackers to cause a denial...CVE-2008-3733Public exploit9.3 HighAugust 20, 2008
videolan vlc media playerInteger overflow in the Open function in modules/demux/tta.c in VLC Media Player 0.8.6i allows...CVE-2008-3732Public exploitFix availableEPSS 13.4%9.3 HighAugust 20, 2008
solarwinds serv-u file serverUnspecified vulnerability in Serv-U File Server 7.0.0.1, and other versions before 7.2.0.1,...CVE-2008-37314.0 MediumAugust 20, 2008
nordicwind noah, document management system +1 moreCross-site scripting (XSS) vulnerability in Nordicwind Document Management System (NOAH) before 3...CVE-2008-37304.3 MediumAugust 20, 2008
microworld technologies mailscanWeb Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 allows remote...CVE-2008-37297.5 HighAugust 20, 2008
microworld technologies mailscanWeb Based Administration in MicroWorld Technologies MailScan 5.6.a espatch 1 stores sensitive...CVE-2008-37285.0 MediumAugust 20, 2008
microworld technologies mailscanDirectory traversal vulnerability in Web Based Administration in MicroWorld Technologies MailScan...CVE-2008-37275.0 MediumAugust 20, 2008
microworld technologies mailscanCross-site scripting (XSS) vulnerability in Web Based Administration in MicroWorld Technologies...CVE-2008-37264.3 MediumAugust 20, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open