Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
October

CVEs published in October 2008

540 vulnerabilities, 114 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

nfs nfs-utilsThe good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes...CVE-2008-4552Fix available7.5 HighOctober 14, 2008
strongswanstrongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash)...CVE-2008-4551Fix available5.0 MediumOctober 14, 2008
imageshack toolbarThe ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7,...CVE-2008-4549Public exploit2.6 LowOctober 14, 2008
rtssentryStack-based buffer overflow in the PTZCamPanelCtrl ActiveX control (CamPanel.dll) in RTS Sentry 2...CVE-2008-4548Public exploit9.3 HighOctober 14, 2008
dvrstation cmsHeap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control (pdvratl.dll) in DVRHOST Web...CVE-2008-4547Public exploitEPSS 11.3%9.3 HighOctober 14, 2008
adobe flash playerAdobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610,...CVE-2008-4546Public exploitEPSS 65.9%4.3 MediumOctober 14, 2008
linksys wap400nThe Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the...CVE-2008-44417.1 HighOctober 14, 2008
cisco unityCisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak...CVE-2008-45454.0 MediumOctober 13, 2008
cisco unityUnspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly...CVE-2008-45445.0 MediumOctober 13, 2008
cisco unityCisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using...CVE-2008-45437.1 HighOctober 13, 2008
cisco unityCross-site scripting (XSS) vulnerability in Cisco Unity 4.x before 4.2(1)ES162, 5.x before 5.0(1...CVE-2008-45423.5 LowOctober 13, 2008
sun java system web proxy serverHeap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4...CVE-2008-454110.0 HighOctober 13, 2008
microsoft windows mobileWindows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion...CVE-2008-45402.1 LowOctober 13, 2008
hp system management homepageCross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.15.210...CVE-2008-44114.3 MediumOctober 13, 2008
hp openview network node managerUnspecified vulnerability in ovtopmd in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and...CVE-2008-35457.8 HighOctober 13, 2008
hp openview network node managerMultiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM)...CVE-2008-3544Public exploitEPSS 18.0%9.0 HighOctober 13, 2008
apache tomcatApache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address...CVE-2008-32714.3 MediumOctober 13, 2008
ec-cubeCross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta...CVE-2008-45374.3 MediumOctober 10, 2008
ec-cubeCross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta...CVE-2008-45364.3 MediumOctober 10, 2008
ec-cubeCross-site scripting (XSS) vulnerability in EC-CUBE Ver2 2.1.2a and earlier, EC-CUBE Ver2 Beta(RC...CVE-2008-45354.3 MediumOctober 10, 2008
ec-cubeSQL injection vulnerability in EC-CUBE Ver2 2.1.2a and earlier, and Ver2 RC 2.3.0-rc1 and earlier...CVE-2008-45347.5 HighOctober 10, 2008
katan web serverCross-site scripting (XSS) vulnerability in Kantan WEB Server 1.8 and earlier allows remote...CVE-2008-45334.3 MediumOctober 10, 2008
gentoo portageMultiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current...CVE-2008-43946.9 MediumOctober 10, 2008
apple mac os x serverWeblog in Mac OS X Server 10.4.11 does not properly check an error condition when a weblog...CVE-2008-42157.5 HighOctober 10, 2008
apple mac os x, mac os x server +1 moreUnspecified vulnerability in Script Editor in Mac OS X 10.4.11 and 10.5.5 allows local users to...CVE-2008-42144.6 MediumOctober 10, 2008
apple mac os x, mac os x server +1 moreUnspecified vulnerability in rlogind in the rlogin component in Mac OS X 10.4.11 and 10.5.5...CVE-2008-421210.0 HighOctober 10, 2008
apple iphone os, mac os x, mac os x server +2 moreInteger signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple...CVE-2008-421110.0 HighOctober 10, 2008
apple mac os x, mac os x server +1 moreBuffer overflow in PSNormalizer in Mac OS X 10.4.11 and 10.5.5 allows remote attackers to cause a...CVE-2008-36479.3 HighOctober 10, 2008
apple mac os xThe Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when...CVE-2008-36466.8 MediumOctober 10, 2008
apple mac os x, mac os x server +1 moreHeap-based buffer overflow in the local IPC component in the EAPOLController plugin for configd ...CVE-2008-36457.2 HighOctober 10, 2008
apple mac os x, mac os x server +1 moreUnspecified vulnerability in Finder in Mac OS X 10.5.5 allows user-assisted attackers to cause a...CVE-2008-36437.8 HighOctober 10, 2008
apple mac os x, mac os x server +1 moreBuffer overflow in ColorSync in Mac OS X 10.4.11 and 10.5.5 allows remote attackers to cause a...CVE-2008-36429.3 HighOctober 10, 2008
apple cupsThe Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers...CVE-2008-3641Public exploitFix availableEPSS 24.1%10.0 HighOctober 10, 2008
vimHeap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3...CVE-2008-3432Public exploit6.8 MediumOctober 10, 2008
maxiscript website directoryCross-site scripting (XSS) vulnerability in index.php in MaxiScript Website Directory allows...CVE-2008-4532Public exploit4.3 MediumOctober 9, 2008
drupal brilliant gallerySQL injection vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows...CVE-2008-45317.5 HighOctober 9, 2008
drupal brilliant galleryCross-site scripting (XSS) vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for...CVE-2008-45303.5 LowOctober 9, 2008
asicmsMultiple PHP remote file inclusion vulnerabilities in asiCMS alpha 0.208 allow remote attackers...CVE-2008-4529Public exploit7.5 HighOctober 9, 2008
phlatline personal information managerDirectory traversal vulnerability in notes.php in Phlatline's Personal Information Manager (pPIM)...CVE-2008-4528Public exploit7.5 HighOctober 9, 2008
php-fusion recepies moduleSQL injection vulnerability in recept.php in the Recepies (Recept) module 1.1 for PHP-Fusion...CVE-2008-4527Public exploit7.5 HighOctober 9, 2008
customcms ccmsMultiple directory traversal vulnerabilities in CCMS 3.1 allow remote attackers to include and...CVE-2008-4526Public exploit10.0 HighOctober 9, 2008
ampjukeSQL injection vulnerability in index.php in AmpJuke 0.7.5 allows remote attackers to execute...CVE-2008-4525Public exploit7.5 HighOctober 9, 2008
adaptcmsAdaptCMS SQL Injection vulnerabilityCVE-2008-4524Public exploit7.5 HighOctober 9, 2008
ip reg regSQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to...CVE-2008-4523Public exploit7.5 HighOctober 9, 2008
jesse-web jmweb mp3 music audio search and download scriptMultiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script...CVE-2008-4522Public exploit7.5 HighOctober 9, 2008
php-fusion world of warcraft tracker infusion moduleSQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion ...CVE-2008-4521Public exploit7.5 HighOctober 9, 2008
autonessusCross-site scripting (XSS) vulnerability in bulk_update.pl in AutoNessus before 1.2.2 allows...CVE-2008-45204.3 MediumOctober 9, 2008
fastpublish cmsMultiple directory traversal vulnerabilities in Fastpublish CMS 1.9999 d allow remote attackers...CVE-2008-4519Public exploit7.5 HighOctober 9, 2008
fastpublish cmsMultiple SQL injection vulnerabilities in Fastpublish CMS 1.9.9.9.9 d (1.9999 d) allow remote...CVE-2008-4518Public exploit7.5 HighOctober 9, 2008
geccbbliteSQL injection vulnerability in leggi.php in geccBBlite 2.0 allows remote attackers to execute...CVE-2008-4517Public exploit7.5 HighOctober 9, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open