Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
September

CVEs published in September 2008

445 vulnerabilities, 87 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

phpThe (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong...CVE-2008-41075.1 MediumSeptember 18, 2008
wordpressWordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username...CVE-2008-4106Fix available5.1 MediumSeptember 18, 2008
joomlaJRequest in Joomla! 1.5 before 1.5.7 does not sanitize variables that were set with JRequest:...CVE-2008-41057.5 HighSeptember 18, 2008
joomlaJoomla! Open Redirect vulnerabilityCVE-2008-4104Fix available5.8 MediumSeptember 18, 2008
joomla com mailtoThe mailto (aka com_mailto) component in Joomla! 1.5 before 1.5.7 sends e-mail messages without...CVE-2008-41035.0 MediumSeptember 18, 2008
joomlaJoomla! 1.5 before 1.5.7 initializes PHP's PRNG with a weak seed, which makes it easier for...CVE-2008-41027.5 HighSeptember 18, 2008
vimVim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user...CVE-2008-4101Public exploitFix available9.3 HighSeptember 18, 2008
gnu adnsGNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests...CVE-2008-4100Fix available6.4 MediumSeptember 18, 2008
high norm sound master 2ndCross-site scripting (XSS) vulnerability in High Norm Sound Master 2nd 1.0 allows remote...CVE-2008-41184.3 MediumSeptember 17, 2008
sun management centerUnspecified vulnerability in a web page in the PRM module in Sun Management Center (SunMC) 3.6.1...CVE-2008-41177.8 HighSeptember 17, 2008
apple itunes, quicktime +1 moreBuffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial...CVE-2008-4116Public exploitEPSS 11.6%9.3 HighSeptember 17, 2008
mysql, canonical ubuntu linux, debian linux +2 moreMySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE...CVE-2008-4098Fix available4.6 MediumSeptember 17, 2008
phpmyadminlibraries/database_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated...CVE-2008-4096Public exploitFix availableEPSS 11.2%8.5 HighSeptember 17, 2008
adobe illustratorMultiple unspecified vulnerabilities in Adobe Illustrator CS2 on Macintosh allow user-assisted...CVE-2008-39619.3 HighSeptember 17, 2008
twikiDirectory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in...CVE-2008-3195Public exploitFix available6.8 MediumSeptember 17, 2008
landesk management suite, security suite, server manager +2 moreMultiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite...CVE-2008-246810.0 HighSeptember 17, 2008
acresso flexnet connect, intallshield update agent +1 moreAcresso InstallShield Update Agent does not properly verify the authenticity of Rule Scripts...CVE-2008-10939.3 HighSeptember 17, 2008
talkbackTalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request...CVE-2008-4115Public exploit5.0 MediumSeptember 16, 2008
microsoft windows 2000, windows server 2003, windows server 2008 +2 more +4 moresrv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and...CVE-2008-4114Public exploitEPSS 49.3%7.1 HighSeptember 16, 2008
linux kernelThe sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission...CVE-2008-4113Public exploit4.7 MediumSeptember 16, 2008
ibm websphere application serverUnspecified vulnerability in Servlet Engine/Web Container in IBM WebSphere Application Server ...CVE-2008-41119.3 HighSeptember 16, 2008
apple iphone, ipod touch, safari +2 moreOff-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in...CVE-2008-3950Public exploit5.0 MediumSeptember 16, 2008
apple mac os x, mac os x server +1 moreCross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5 through 10.5.4...CVE-2008-36224.3 MediumSeptember 16, 2008
apple mac os x, mac os x server +1 moreVideoConference in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to...CVE-2008-36219.3 HighSeptember 16, 2008
apple mac os x, mac os x server +1 moreTime Machine in Apple Mac OS X 10.5 through 10.5.4 uses weak permissions for Time Machine Backup...CVE-2008-36192.1 LowSeptember 16, 2008
apple mac os xThe File Sharing pane in the Sharing preference pane in Apple Mac OS X 10.5 through 10.5.4 does...CVE-2008-36189.0 HighSeptember 16, 2008
apple mac os x, mac os x server +1 moreRemote Management and Screen Sharing in Apple Mac OS X 10.5 through 10.5.4, when used to set a...CVE-2008-36175.0 MediumSeptember 16, 2008
apple mac os x, mac os x server +1 moreMultiple integer overflows in the SearchKit API in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4...CVE-2008-361610.0 HighSeptember 16, 2008
apple mac os xFinder in Apple Mac OS X 10.5.2 through 10.5.4 allows remote attackers to cause a denial of...CVE-2008-36136.1 MediumSeptember 16, 2008
apple mac os x, mac os x server +1 moreLogin Window in Apple Mac OS X 10.4.11 does not clear the current password when a user makes a...CVE-2008-36116.3 MediumSeptember 16, 2008
apple mac os x, mac os x server +1 moreRace condition in Login Window in Apple Mac OS X 10.5 through 10.5.4, when a blank-password...CVE-2008-36107.6 HighSeptember 16, 2008
apple mac os x, mac os x server +1 moreThe kernel in Apple Mac OS X 10.5 through 10.5.4 does not properly flush cached credentials...CVE-2008-36097.2 HighSeptember 16, 2008
apple mac os x, mac os x server +1 moreImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to...CVE-2008-36089.3 HighSeptember 16, 2008
apple mac os x, mac os x server +1 moreImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to...CVE-2008-23329.3 HighSeptember 16, 2008
apple mac os x, mac os x server +1 moreFinder in Apple Mac OS X 10.5 through 10.5.4 does not properly update permission data in the Get...CVE-2008-23315.0 MediumSeptember 16, 2008
apple mac os x serverslapconfig in Directory Services in Apple Mac OS X 10.5 through 10.5.4 allows local users to...CVE-2008-23304.9 MediumSeptember 16, 2008
apple mac os x, mac os x server +1 moreDirectory Services in Apple Mac OS X 10.5 through 10.5.4, when Active Directory is used, allows...CVE-2008-23291.9 LowSeptember 16, 2008
apple mac os x, mac os x server +1 moreNetwork Preferences in Apple Mac OS X 10.4.11 stores PPP passwords in cleartext in a world...CVE-2008-23124.9 MediumSeptember 16, 2008
apple mac os x, mac os x server +1 moreHeap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5...CVE-2008-23059.3 HighSeptember 16, 2008
microsoft sql serverBuffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in Tools\Binn\sqlvdir.dll in...CVE-2008-4110EPSS 18.4%7.6 HighSeptember 16, 2008
trend micro officescan, client-server-messaging security +1 moreStack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362...CVE-2008-243710.0 HighSeptember 16, 2008
flip4mac wmvMultiple unspecified vulnerabilities in the Importer in Flip4Mac WMV before 2.2.1 have unknown...CVE-2008-409510.0 HighSeptember 16, 2008
openbsd opensshA certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny;...CVE-2008-4109Public exploitFix availableEPSS 28.6%5.0 MediumSeptember 16, 2008
yourownbuxSQL injection vulnerability in memberstats.php in YourOwnBux 3.1 and 3.2 beta, when...CVE-2008-4093Public exploit6.8 MediumSeptember 15, 2008
myphpnukeSQL injection vulnerability in printfeature.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows...CVE-2008-4092Public exploit7.5 HighSeptember 15, 2008
source workshop web directory scriptSQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to...CVE-2008-4091Public exploit6.8 MediumSeptember 15, 2008
couponscript coupon scriptSQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to...CVE-2008-4090Public exploit7.5 HighSeptember 15, 2008
myphpnukeCross-site scripting (XSS) vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows...CVE-2008-4089Public exploit4.3 MediumSeptember 15, 2008
myphpnukeSQL injection vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote...CVE-2008-4088Public exploit7.5 HighSeptember 15, 2008
acoustica beatcraftStack-based buffer overflow in Acoustica Beatcraft 1.02 Build 19 allows user-assisted attackers...CVE-2008-4087Public exploit6.8 MediumSeptember 15, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open