Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
September

CVEs published in September 2008

445 vulnerabilities, 87 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

novell iprint clientMultiple heap-based buffer overflows in the IppCreateServerRef function in nipplib.dll in Novell...CVE-2008-24369.3 HighSeptember 5, 2008
netgear wn802t, marvell 88w8361w-bem1 +1 moreThe Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell...CVE-2008-11976.3 MediumSeptember 5, 2008
netgear wn802t, marvell 88w8361w-bem1 +1 moreThe Marvell driver for the Netgear WN802T Wi-Fi access point with firmware 1.3.16 on the Marvell...CVE-2008-11446.3 MediumSeptember 5, 2008
atheros ar5416-ac1e chipset, linksys wrt350n +1 moreThe driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416...CVE-2007-54746.3 MediumSeptember 5, 2008
source workshop words tag scriptSQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute...CVE-2008-3945Public exploit7.5 HighSeptember 5, 2008
discountedscripts acg ptpSQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute...CVE-2008-3944Public exploit7.5 HighSeptember 5, 2008
ezonescripts living localSQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote...CVE-2008-3943Public exploit7.5 HighSeptember 5, 2008
ozsari full php emlak scriptSQL injection vulnerability in landsee.php in Full PHP Emlak Script allows remote attackers to...CVE-2008-3942Public exploit7.5 HighSeptember 5, 2008
bizdirectoryCross-site scripting (XSS) vulnerability in BizDirectory 2.04 and earlier allows remote attackers...CVE-2008-3941Public exploit4.3 MediumSeptember 5, 2008
hp openvmsFormat string vulnerability in the finger client in HP TCP/IP Services for OpenVMS 5.x allows...CVE-2008-39404.4 MediumSeptember 5, 2008
avtech pager enterpriseDirectory traversal vulnerability in the web interface in AVTECH PageR Enterprise before 5.0.7...CVE-2008-39395.0 MediumSeptember 5, 2008
opendbCross-site request forgery (CSRF) vulnerability in user_admin.php in Open Media Collectors...CVE-2008-39385.8 MediumSeptember 5, 2008
opendbMultiple cross-site scripting (XSS) vulnerabilities in Open Media Collectors Database (OpenDb) 1...CVE-2008-3937Public exploit4.3 MediumSeptember 5, 2008
dreambox dm500cThe web interface in Dreambox DM500C allows remote attackers to cause a denial of service ...CVE-2008-39367.8 HighSeptember 5, 2008
d-ic shop v50, shop v52 +1 moreCross-site scripting (XSS) vulnerability in DIC shop_v50 3.0 and earlier and shop_v52 2.0 and...CVE-2008-39354.3 MediumSeptember 5, 2008
wiresharkUnspecified vulnerability in Wireshark (formerly Ethereal) 0.99.6 through 1.0.2 allows attackers...CVE-2008-3934Fix available3.3 LowSeptember 4, 2008
wiresharkWireshark (formerly Ethereal) 0.10.14 through 1.0.2 allows attackers to cause a denial of service...CVE-2008-3933Fix available3.3 LowSeptember 4, 2008
wiresharkWireshark (formerly Ethereal) 0.9.7 through 1.0.2 allows attackers to cause a denial of service ...CVE-2008-3932Fix available5.0 MediumSeptember 4, 2008
trixbox pbx, asterisk p b x +1 moreAsterisk Open Source 1.2.x before 1.2.32, 1.4.x before 1.4.24.1, and 1.6.0.x before 1.6.0.8;...CVE-2008-3903Fix available3.5 LowSeptember 4, 2008
r foundation rjavareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on...CVE-2008-3931Fix available6.9 MediumSeptember 4, 2008
debian citadel servermigrate_aliases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a...CVE-2008-39306.9 MediumSeptember 4, 2008
ampachegather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink...CVE-2008-39297.2 HighSeptember 4, 2008
debian honeyd commontest.sh in Honeyd 1.5c might allow local users to overwrite arbitrary files via a symlink attack...CVE-2008-39286.9 MediumSeptember 4, 2008
tigergenmsgidx in Tiger 3.2.2 allows local users to overwrite or delete arbitrary files via a symlink...CVE-2008-3927Fix available7.2 HighSeptember 4, 2008
hans oesterholt cmmeMultiple directory traversal vulnerabilities in Content Management Made Easy (CMME) 1.12 allow...CVE-2008-3926Public exploit5.8 MediumSeptember 4, 2008
hans oesterholt cmmeCross-site request forgery (CSRF) vulnerability in admin.php in Content Management Made Easy ...CVE-2008-3925Public exploit4.3 MediumSeptember 4, 2008
hans oesterholt cmmeThe "Make a backup" functionality in Content Management Made Easy (CMME) 1.12 stores sensitive...CVE-2008-3924Public exploit4.3 MediumSeptember 4, 2008
hans oesterholt cmmeMultiple cross-site scripting (XSS) vulnerabilities in statistics.php in Content Management Made...CVE-2008-3923Public exploit4.3 MediumSeptember 4, 2008
telartis bv awstats totalsawstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary...CVE-2008-3922Public exploitEPSS 53.2%9.3 HighSeptember 4, 2008
telartis bv awstats totalsMultiple cross-site scripting (XSS) vulnerabilities in AWStats Totals 1.0 through 1.14 allow...CVE-2008-39214.3 MediumSeptember 4, 2008
bitlbeeUnspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to "recreate" and ...CVE-2008-3920Fix available7.5 HighSeptember 4, 2008
justsystems ichitaroUnspecified vulnerability in multiple JustSystems Ichitaro products allows remote attackers to...CVE-2008-39199.3 HighSeptember 4, 2008
ovidentiaSQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute...CVE-2008-3918Public exploit7.5 HighSeptember 4, 2008
ovidentiaCross-site scripting (XSS) vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers...CVE-2008-3917Public exploit4.3 MediumSeptember 4, 2008
gnu edHeap-based buffer overflow in the strip_escapes function in signal.c in GNU ed before 1.0 allows...CVE-2008-3916Fix available9.3 HighSeptember 4, 2008
linux kernelThe proc_do_xprt function in net/sunrpc/sysctl.c in the Linux kernel 2.6.26.3 does not check the...CVE-2008-39117.2 HighSeptember 4, 2008
hsc dns2tcpdns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the...CVE-2008-3910Fix available10.0 HighSeptember 4, 2008
djangoproject djangoDjango cross-site request forgery (CSRF) vulnerabilityCVE-2008-3909Fix available5.8 MediumSeptember 4, 2008
monoCRLF injection vulnerability in Sys.Web in Mono 2.0 and earlier allows remote attackers to inject...CVE-2008-3906Public exploitFix available4.3 MediumSeptember 4, 2008
ruby-lang rubyresolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9...CVE-2008-39055.8 MediumSeptember 4, 2008
lxde gpicview, lightweight x11 desktop environment +1 moresrc/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment (LXDE) allows context...CVE-2008-3904Fix available7.5 HighSeptember 4, 2008
debian linux, linux kernel, canonical ubuntu linux +4 more +6 morefs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out...CVE-2007-67165.5 MediumSeptember 4, 2008
cisco adaptive security appliance 5500Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0(3)15, 8.0(3...CVE-2008-27367.1 HighSeptember 4, 2008
cisco adaptive security appliance 5500The HTTP server in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0 before 8.0(3)15 and 8...CVE-2008-27357.1 HighSeptember 4, 2008
cisco adaptive security appliance 5500Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7...CVE-2008-27347.1 HighSeptember 4, 2008
cisco pix, adaptive security appliance 5500 +1 moreCisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3...CVE-2008-27337.1 HighSeptember 4, 2008
cisco pix, adaptive security appliance 5500 +1 moreMultiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and...CVE-2008-27327.8 HighSeptember 4, 2008
cisco secure acs, secure access control server +1 moreCisco Secure ACS 3.x before 3.3(4) Build 12 patch 7, 4.0.x, 4.1.x before 4.1(4) Build 13 Patch 11...CVE-2008-24417.5 HighSeptember 4, 2008
clam anti-virus clamavlibclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a...CVE-2008-1389Fix available5.0 MediumSeptember 4, 2008
hp 68dttHP firmware 68DTT F.0D stores pre-boot authentication passwords in the BIOS Keyboard buffer and...CVE-2008-39022.1 LowSeptember 3, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open