Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
October

CVEs published in October 2008

540 vulnerabilities, 114 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

sentex jheadThe DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to...CVE-2008-4640Fix available3.6 LowOctober 21, 2008
sentex jheadjhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files...CVE-2008-4639Fix available4.6 MediumOctober 21, 2008
symantec veritas file systemqioadmin in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX,...CVE-2008-46384.6 MediumOctober 21, 2008
cpcommerceCross-site scripting (XSS) vulnerability in cpCommerce before 1.2.4 allows remote attackers to...CVE-2008-46374.3 MediumOctober 21, 2008
cpcommerceMultiple cross-site scripting (XSS) vulnerabilities in cpCommerce before 1.2.4 allow remote...CVE-2008-41214.3 MediumOctober 21, 2008
symantec veritas file systemqiomkfile in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX,...CVE-2008-32484.6 MediumOctober 21, 2008
hp sitescopeCross-site scripting (XSS) vulnerability in the management interface in HP SiteScope 9.0 build...CVE-2007-43504.3 MediumOctober 21, 2008
hisanaga electric co hisa cartUnspecified vulnerability in Hisanaga Electric Co, Ltd. hisa_cart 1.29 and earlier, a module for...CVE-2008-46355.0 MediumOctober 21, 2008
six apart movable typeCross-site scripting (XSS) vulnerability in Movable Type 4 through 4.21 allows remote attackers...CVE-2008-46343.5 LowOctober 21, 2008
drupal node cloneSQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for...CVE-2008-46336.0 MediumOctober 21, 2008
kureMultiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magic_quotes_gpc is...CVE-2008-4632Public exploit6.8 MediumOctober 21, 2008
myer sound laboratories muscleStack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE...CVE-2008-463110.0 HighOctober 21, 2008
midgard components frameworkMultiple unspecified vulnerabilities in Midgard Components (MidCOM) Framework before 8.09.1 have...CVE-2008-463010.0 HighOctober 21, 2008
usagi mynetsCross-site scripting (XSS) vulnerability in Usagi Project MyNETS 1.2.0 and earlier allows remote...CVE-2008-46294.3 MediumOctober 21, 2008
mywebland minibloggieSQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to...CVE-2008-4628Public exploit7.5 HighOctober 21, 2008
rgallery pluginSQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board (WBB) allows...CVE-2008-4627Public exploit7.5 HighOctober 21, 2008
zirkon box yappa-ngDirectory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next...CVE-2008-4626Public exploit6.8 MediumOctober 21, 2008
shiftthis shifthis newsletterSQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin...CVE-2008-4625Public exploit7.5 HighOctober 21, 2008
ftrsoft fast click sql litePHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when...CVE-2008-4624Public exploit9.3 HighOctober 21, 2008
martin diphoorn com ds-syndicateSQL injection vulnerability in the DS-Syndicate (com_ds-syndicate) component 1.1.1 for Joomla...CVE-2008-4623Public exploit7.5 HighOctober 21, 2008
phpfastnewsThe isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to...CVE-2008-4622Public exploit7.5 HighOctober 21, 2008
zeescripts zeepropertySQL injection vulnerability in bannerclick.php in ZeeScripts Zeeproperty allows remote attackers...CVE-2008-4621Public exploit7.5 HighOctober 21, 2008
mrbsSQL injection vulnerability in Meeting Room Booking System (MRBS) before 1.4 allows remote...CVE-2008-4620Public exploit7.5 HighOctober 21, 2008
microsoft exchange serverOpen redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for...CVE-2008-1547Public exploitEPSS 48.1%4.3 MediumOctober 21, 2008
sun sunosThe RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon...CVE-2008-4619Public exploitEPSS 12.0%10.0 HighOctober 20, 2008
linux kernelThe Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.27...CVE-2008-46187.8 HighOctober 20, 2008
pyxicom actualiteSQL injection vulnerability in the actualite module 1.0 for Joomla! allows remote attackers to...CVE-2008-4617Public exploit7.5 HighOctober 20, 2008
the spanner spambam pluginThe SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog...CVE-2008-4616Public exploit5.0 MediumOctober 20, 2008
portalappUnspecified vulnerability in i_utils.asp in PortalApp before 4.01a has unknown impact and attack...CVE-2008-461510.0 HighOctober 20, 2008
portalappPortalApp 4.0 does not require authentication for (1) forums.asp and (2) content.asp, which...CVE-2008-4614Public exploit7.5 HighOctober 20, 2008
portalappSQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute...CVE-2008-4613Public exploit7.5 HighOctober 20, 2008
portalappCross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject...CVE-2008-4612Public exploit4.3 MediumOctober 20, 2008
php arsivimiz ziyaretci defteriSQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote...CVE-2008-4611Public exploit7.5 HighOctober 20, 2008
mplayerMPlayer allows remote attackers to cause a denial of service (application crash) via (1) a...CVE-2008-4610Public exploitFix available5.0 MediumOctober 20, 2008
bsd, bsdi bsd os, cisco catalyst blade switch 3020 firmware +16 more +18 moreThe TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4)...CVE-2008-4609Public exploitFix availableEPSS 32.4%7.1 HighOctober 20, 2008
mplayerMPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service (SIGSEGV and...CVE-2007-6718Fix available4.3 MediumOctober 20, 2008
libspf libspf2Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2...CVE-2008-2469Public exploitFix availableEPSS 22.2%10.0 HighOctober 20, 2008
ip reg regMultiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to...CVE-2008-4606Public exploit7.5 HighOctober 17, 2008
cafeengine easycafeengineSQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL...CVE-2008-4605Public exploit7.5 HighOctober 17, 2008
cafeengine easycafeengineSQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to...CVE-2008-4604Public exploit7.5 HighOctober 17, 2008
igaming cmsSQL injection vulnerability in search.php in iGaming CMS 2.0 Alpha 1 allows remote attackers to...CVE-2008-4603Public exploit7.5 HighOctober 17, 2008
qualityunit post affiliate proDirectory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote...CVE-2008-4602Public exploit6.5 MediumOctober 17, 2008
habari cmsCross-site scripting (XSS) vulnerability in the login feature in Habari CMS 0.5.1 allows remote...CVE-2008-4601Public exploit4.3 MediumOctober 17, 2008
steve dawson pokermax poker league tournament scriptconfigure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass...CVE-2008-4600Public exploit7.5 HighOctober 17, 2008
mosaic commerce commerceSQL injection vulnerability in category.php in Mosaic Commerce allows remote attackers to execute...CVE-2008-4599Public exploit7.5 HighOctober 17, 2008
drupal shindig-integratorUnspecified vulnerability in Shindig-Integrator 5.x, a module for Drupal, has unspecified impact...CVE-2008-45987.5 HighOctober 17, 2008
drupal shindig-integratorShindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access,...CVE-2008-45977.5 HighOctober 17, 2008
drupal shindig-integratorCross-site scripting (XSS) vulnerability in Shindig-Integrator 5.x, a module for Drupal, allows...CVE-2008-45964.3 MediumOctober 17, 2008
slaytanic scripts content plusMultiple unspecified vulnerabilities in Slaytanic Scripts Content Plus 2.1.1 have unknown impact...CVE-2008-459510.0 HighOctober 17, 2008
linksys wap400nUnspecified vulnerability in the SNMPv3 component in Linksys WAP4400N firmware 1.2.14 on the...CVE-2008-459410.0 HighOctober 17, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open