Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
October

CVEs published in October 2008

540 vulnerabilities, 114 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

autodesk design review, dwf viewer, revit architecture +2 moreDirectory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX...CVE-2008-4471Public exploit9.3 HighOctober 7, 2008
hammer-software metagaugeDirectory traversal vulnerability in MetaGauge 1.0.0.17, and probably other versions before 1.0.3...CVE-2008-4421Public exploit7.8 HighOctober 7, 2008
verisign kontiki delivery management systemCross-site scripting (XSS) vulnerability in VeriSign Kontiki Delivery Management System (DMS) 5.0...CVE-2008-4393Public exploit4.3 MediumOctober 7, 2008
iseemedia lpviewerMultiple stack-based buffer overflows in MGI Software LPViewer ActiveX control (LPControl.dll),...CVE-2008-4384Public exploitEPSS 28.7%9.3 HighOctober 7, 2008
hp oncplusUnspecified vulnerability in NFS / ONCplus B.11.31_04 and earlier on HP-UX B.11.31 allows remote...CVE-2008-35437.8 HighOctober 7, 2008
numark cueStack-based buffer overflow in Numark CUE 5.0 rev2 allows user-assisted attackers to cause a...CVE-2008-4470Public exploit9.3 HighOctober 7, 2008
vastal i-tech freelance zoneSQL injection vulnerability in view_cresume.php in Vastal I-Tech Freelance Zone allows remote...CVE-2008-4469Public exploit7.5 HighOctober 7, 2008
vastal i-tech share zoneSQL injection vulnerability in view_news.php in Vastal I-Tech Share Zone allows remote attackers...CVE-2008-4468Public exploit7.5 HighOctober 7, 2008
vastal i-tech toner cartSQL injection vulnerability in show_series_ink.php in Vastal I-Tech Toner Cart allows remote...CVE-2008-4467Public exploit7.5 HighOctober 7, 2008
vastal i-tech cosmetics zoneSQL injection vulnerability in view_products_cat.php in Vastal I-Tech Cosmetics Zone allows...CVE-2008-4466Public exploit7.5 HighOctober 7, 2008
vastal i-tech dvd zoneSQL injection vulnerability in view_mags.php in Vastal I-Tech DVD Zone allows remote attackers to...CVE-2008-4465Public exploit7.5 HighOctober 7, 2008
vastal i-tech mag zoneSQL injection vulnerability in view_mags.php in Vastal I-Tech Mag Zone allows remote attackers to...CVE-2008-4464Public exploit7.5 HighOctober 7, 2008
vastal i-tech jobs zoneSQL injection vulnerability in view_news.php in Vastal I-Tech Jobs Zone allows remote attackers...CVE-2008-4463Public exploit7.5 HighOctober 7, 2008
vastal i-tech visa zoneSQL injection vulnerability in view_news.php in Vastal I-Tech Visa Zone allows remote attackers...CVE-2008-4462Public exploit7.5 HighOctober 7, 2008
vastal i-tech dating zoneSQL injection vulnerability in advanced_search_results.php in Vastal I-Tech Dating Zone, possibly...CVE-2008-4461Public exploit7.5 HighOctober 7, 2008
vastal i-tech mmorpg zoneSQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to...CVE-2008-4460Public exploit7.5 HighOctober 7, 2008
extrovert software thymeSQL injection vulnerability in pick_users.php in the groups module in eXtrovert Thyme 1.3 allows...CVE-2008-4459Public exploit7.5 HighOctober 7, 2008
e-php scripts b2b trading marketplace scriptSQL injection vulnerability in listings.php in E-Php B2B Trading Marketplace Script allows remote...CVE-2008-4458Public exploit7.5 HighOctober 7, 2008
memht portalSQL injection vulnerability in inc/inc_statistics.php in MemHT Portal 3.9.0 and earlier, when...CVE-2008-4457Public exploit6.8 MediumOctober 7, 2008
mysqlCross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0...CVE-2008-4456Public exploit2.6 LowOctober 6, 2008
mysql quick admin quick adminDirectory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier...CVE-2008-4455Public exploit6.8 MediumOctober 6, 2008
mysql quick admin quick adminDirectory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 allows remote attackers...CVE-2008-4454Public exploit6.8 MediumOctober 6, 2008
dspicture light imaging toolkit, pro imaging sdk +1 moreThe GdPicture (1) Light Imaging Toolkit 4.7.1 GdPicture4S.Imaging ActiveX control (gdpicture4s...CVE-2008-4453Public exploitEPSS 10.5%9.3 HighOctober 6, 2008
cambridge computer corporation vxftpsrvBuffer overflow in Cambridge Computer Corporation vxFtpSrv 2.0.3 allows remote attackers to cause...CVE-2008-4452Public exploit9.0 HighOctober 6, 2008
eset software system analyzer toolThe SysInspector AntiStealth driver (esiasdrv.sys) 3.0.65535.0 in ESET System Analyzer Tool 1.1.1...CVE-2008-4451Public exploit7.2 HighOctober 6, 2008
apache friends xamppCross-site scripting (XSS) vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote...CVE-2008-44504.3 MediumOctober 6, 2008
mircStack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a...CVE-2008-4449Public exploitEPSS 38.7%9.3 HighOctober 6, 2008
positive software h-sphereCross-site request forgery (CSRF) vulnerability in actions.php in Positive Software H-Sphere...CVE-2008-44486.8 MediumOctober 6, 2008
positive software h-sphereCross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4...CVE-2008-4447Public exploit4.3 MediumOctober 6, 2008
nucleus cms nucleusCross-site scripting (XSS) vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote...CVE-2008-44464.3 MediumOctober 6, 2008
linux kernelThe sctp_auth_ep_set_hmacs function in net/sctp/auth.c in the Stream Control Transmission...CVE-2008-44454.7 MediumOctober 6, 2008
vmware esx, player, server +1 more +3 moreThe CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before...CVE-2008-42796.8 MediumOctober 6, 2008
vmware virtualcenterVMware VirtualCenter 2.5 before Update 3 build 119838 on Windows displays a user's password in...CVE-2008-42782.1 LowOctober 6, 2008
adobe flash playerAdobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to...CVE-2008-38729.3 HighOctober 6, 2008
debian fetaThe to-upgrade plugin in feta 1.4.16 allows local users to overwrite arbitrary files via a...CVE-2008-4440Fix available7.2 HighOctober 3, 2008
martinwood datafeed studioPHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio...CVE-2008-4439Public exploit10.0 HighOctober 3, 2008
datafeed studio studioCross-site scripting (XSS) vulnerability in search.php in Datafeed Studio 1.6.2 allows remote...CVE-2008-4438Public exploit4.3 MediumOctober 3, 2008
mozilla bugzillaDirectory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5...CVE-2008-4437Public exploitFix available7.1 HighOctober 3, 2008
bblog wbblogSQL injection vulnerability in bblog_plugins/builtin.help.php in bBlog 0.7.6 allows remote...CVE-2008-4436Public exploit7.5 HighOctober 3, 2008
rmsoft downloads plus moduleMultiple cross-site scripting (XSS) vulnerabilities in the RMSOFT Downloads Plus (rmdp) module 1...CVE-2008-4435Public exploit4.3 MediumOctober 3, 2008
bittorrent, utorrent +1 moreStack-based buffer overflow in (1) uTorrent 1.7.7 build 8179 and earlier and (2) BitTorrent 6.0.3...CVE-2008-4434Public exploitEPSS 11.0%9.3 HighOctober 3, 2008
rmsoft minishop moduleSQL injection vulnerability in search.php in the RMSOFT MiniShop module 1.0 for Xoops might allow...CVE-2008-44337.5 HighOctober 3, 2008
rmsoft minishop moduleCross-site scripting (XSS) vulnerability in search.php in the RMSOFT MiniShop module 1.0 for...CVE-2008-4432Public exploit4.3 MediumOctober 3, 2008
icebbSQL injection vulnerability in index.php in IceBB 1.0-rc9.3 and earlier allows remote attackers...CVE-2008-44317.5 HighOctober 3, 2008
sourcenext virus security, virus security zero +1 moreUnspecified vulnerability in SOURCENEXT Virus Security ZERO 9.5.0173 and earlier and Virus...CVE-2008-442910.0 HighOctober 3, 2008
phlatline personal information managerUnrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager ...CVE-2008-4428Public exploit10.0 HighOctober 3, 2008
phlatline personal information managerchangepassword.php in Phlatline's Personal Information Manager (pPIM) 1.0 and earlier does not...CVE-2008-4427Public exploit7.5 HighOctober 3, 2008
phlatline personal information managerCross-site scripting (XSS) vulnerability in events.php in Phlatline's Personal Information...CVE-2008-4426Public exploit4.3 MediumOctober 3, 2008
phlatline personal information managerDirectory traversal vulnerability in upload.php in Phlatline's Personal Information Manager (pPIM...CVE-2008-4425Public exploit8.8 HighOctober 3, 2008
domain group network goocmsCross-site scripting (XSS) vulnerability in index.php in Domain Group Network GooCMS 1.02 allows...CVE-2008-4424Public exploit4.3 MediumOctober 3, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open