Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
October

CVEs published in October 2008

540 vulnerabilities, 114 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

lynxlynx 2.8.6dev.15 and earlier, when advanced mode is enabled and lynx is configured as a URL...CVE-2008-469010.0 HighOctober 22, 2008
mantisMantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for...CVE-2008-46897.5 HighOctober 22, 2008
mantiscore/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before...CVE-2008-4688EPSS 11.7%5.0 MediumOctober 22, 2008
mantismanage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute...CVE-2008-4687Public exploitEPSS 67.5%9.0 HighOctober 22, 2008
videolan vlc media playerMultiple integer overflows in ty.c in the TY demux plugin (aka the TiVo demuxer) in VideoLAN VLC...CVE-2008-4686Public exploitFix available9.3 HighOctober 22, 2008
wiresharkUse-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931...CVE-2008-4685Fix available5.0 MediumOctober 22, 2008
wiresharkpacket-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post...CVE-2008-4684Fix available4.3 MediumOctober 22, 2008
wiresharkThe dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector in Wireshark 0.99...CVE-2008-4683Fix available5.0 MediumOctober 22, 2008
wiresharkwtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service ...CVE-2008-4682Public exploitFix available5.0 MediumOctober 22, 2008
wiresharkUnspecified vulnerability in the Bluetooth RFCOMM dissector in Wireshark 0.99.7 through 1.0.3...CVE-2008-4681Fix available4.3 MediumOctober 22, 2008
wiresharkpacket-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to...CVE-2008-4680Fix available4.3 MediumOctober 22, 2008
ibm websphere application serverThe Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2...CVE-2008-46796.8 MediumOctober 22, 2008
ibm websphere application serverThe HTTP_Request_Parser method in the HTTP Transport component in IBM WebSphere Application...CVE-2008-46787.8 HighOctober 22, 2008
vim netrwautoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions before 133k for Vim 7.1...CVE-2008-46774.3 MediumOctober 22, 2008
citrix access essentials, presentation server, xenapp +2 moreUnspecified vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and...CVE-2008-46766.8 MediumOctober 22, 2008
phpcounterSQL injection vulnerability in index.php in PHPcounter 1.3.2 and earlier allows remote attackers...CVE-2008-4675Public exploit7.5 HighOctober 22, 2008
conkurent real estateSQL injection vulnerability in realestate-index.php in Conkurent Real Estate Manager 1.01 allows...CVE-2008-4674Public exploit6.8 MediumOctober 22, 2008
webbiscuits events calendarPHP remote file inclusion vulnerability in panel/common/theme/default/header_setup.php in...CVE-2008-4673Public exploit10.0 HighOctober 22, 2008
goodlyrics lyrics scriptCross-site scripting (XSS) vulnerability in search_results.php in buymyscripts Lyrics Script...CVE-2008-4672Public exploit4.3 MediumOctober 22, 2008
wordpress muCross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2...CVE-2008-4671Public exploit4.3 MediumOctober 22, 2008
ed putal clickbank portalCross-site scripting (XSS) vulnerability in search.php in Ed Pudol Clickbank Portal allows remote...CVE-2008-4670Public exploit4.3 MediumOctober 22, 2008
dan fletcher recipe scriptCross-site scripting (XSS) vulnerability in search.php in Dan Fletcher Recipe Script allows...CVE-2008-4669Public exploit4.3 MediumOctober 22, 2008
joomla com imagebrowserDirectory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for...CVE-2008-4668Public exploitEPSS 21.5%9.0 HighOctober 22, 2008
arabcmsDirectory traversal vulnerability in rss.php in ArabCMS 2.0 beta 1 allows remote attackers to...CVE-2008-4667Public exploit7.5 HighOctober 22, 2008
deeserver ultimate webboardSQL injection vulnerability in webboard.php in Ultimate Webboard 3.00 allows remote attackers to...CVE-2008-4666Public exploit6.8 MediumOctober 22, 2008
datingpro matchmakingSQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL...CVE-2008-4665Public exploit7.5 HighOctober 22, 2008
qvod playerHeap-based buffer overflow in QvodInsert.QvodCtrl.1 ActiveX control (QvodInsert.dll) in QVOD...CVE-2008-4664Public exploit9.3 HighOctober 22, 2008
kumacchi ks cgi access logCross-site scripting (XSS) vulnerability in analysis.cgi 1.44, as used in K's CGI Access Log...CVE-2008-46634.3 MediumOctober 21, 2008
lokicmsDirectory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magic_quotes_gpc is...CVE-2008-4662Public exploit6.8 MediumOctober 21, 2008
typo3 page improvementsCross-site scripting (XSS) vulnerability in the Page Improvements (sm_pageimprovements) 1.1.0 and...CVE-2008-46614.3 MediumOctober 21, 2008
typo3 m1 internSQL injection vulnerability in the M1 Intern (m1_intern) 1.0.0 extension for TYPO3 allows remote...CVE-2008-46607.5 HighOctober 21, 2008
typo3 mannschaftslisteSQL injection vulnerability in the Mannschaftsliste (kiddog_playerlist) 1.0.3 and earlier...CVE-2008-46597.5 HighOctober 21, 2008
typo3 jobcontrolSQL injection vulnerability in the JobControl (dmmjobcontrol) 1.15.4 and earlier extension for...CVE-2008-46587.5 HighOctober 21, 2008
typo3 econda pluginSQL injection vulnerability in the Econda Plugin (econda) 0.0.2 and earlier extension for TYPO3...CVE-2008-46577.5 HighOctober 21, 2008
typo3 frontend users viewSQL injection vulnerability in the Frontend Users View (feusersview) 0.1.6 and earlier extension...CVE-2008-46567.5 HighOctober 21, 2008
typo3 simplesurveySQL injection vulnerability in the Simple survey (simplesurvey) 1.7.0 and earlier extension for...CVE-2008-46557.5 HighOctober 21, 2008
videolan vlc media playerStack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty...CVE-2008-4654Public exploitFix availableEPSS 57.5%9.3 HighOctober 21, 2008
xoops makaleSQL injection vulnerability in makale.php in Makale 0.26 and possibly other versions, a module...CVE-2008-4653Public exploit7.5 HighOctober 21, 2008
dart powertcp ftp for activexBuffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP for...CVE-2008-4652Public exploitEPSS 10.1%9.3 HighOctober 21, 2008
jetbox cmsMultiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow remote authenticated users to...CVE-2008-4651Public exploit6.0 MediumOctober 21, 2008
mywebland myeventSQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute...CVE-2008-4650Public exploit7.5 HighOctober 21, 2008
elxis cmsSession fixation vulnerability in Elxis CMS 2008.1 revision 2204 allows remote attackers to...CVE-2008-4649Public exploit7.5 HighOctober 21, 2008
elxis cmsCross-site scripting (XSS) vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows...CVE-2008-4648Public exploit4.3 MediumOctober 21, 2008
sweetcmsSQL injection vulnerability in index.php in sweetCMS 1.5.2 allows remote attackers to execute...CVE-2008-46477.5 HighOctober 21, 2008
websense enterpiseThe Websense Reporter Module in Websense Enterprise 6.3.2 stores the SQL database system...CVE-2008-46462.1 LowOctober 21, 2008
phpwebgalleryplugins/event_tracer/event_list.php in PhpWebGallery 1.7.2 and earlier allows remote...CVE-2008-4645Public exploit9.0 HighOctober 21, 2008
mywebland mystatshits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a...CVE-2008-4644Public exploit7.5 HighOctober 21, 2008
mywebland mystatsSQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute...CVE-2008-4643Public exploit7.5 HighOctober 21, 2008
astrospacesSQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to...CVE-2008-4642Public exploit7.5 HighOctober 21, 2008
sentex jheadThe DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to...CVE-2008-4641Fix available10.0 HighOctober 21, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open