Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
October

CVEs published in October 2008

540 vulnerabilities, 114 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

pressography wp comment remix pluginCross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before...CVE-2008-47334.3 MediumOctober 24, 2008
pressography wp comment remix pluginSQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for...CVE-2008-4732Public exploit7.5 HighOctober 24, 2008
michael christen yacyMultiple unspecified vulnerabilities in YaCy before 0.61 have unknown impact and attack vectors.CVE-2008-473110.0 HighOctober 24, 2008
phpmyidCross-site scripting (XSS) vulnerability in MyID.php in phpMyID 0.9 allows remote attackers to...CVE-2008-47304.3 MediumOctober 24, 2008
hummingbird exceed, exceed powersuite +1 moreStack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in...CVE-2008-4729Public exploit6.8 MediumOctober 23, 2008
hummingbird deployment wizardMultiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll)...CVE-2008-4728Public exploitEPSS 31.6%9.3 HighOctober 23, 2008
sungard banner studentCross-site scripting (XSS) vulnerability in the contact update page (ss/bwgkoemr...CVE-2008-4727Public exploit4.3 MediumOctober 23, 2008
goodtechsystems goodtech sshStack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated...CVE-2008-4726Public exploitEPSS 44.3%9.0 HighOctober 23, 2008
opera browserCross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to...CVE-2008-4725Public exploit4.3 MediumOctober 23, 2008
google chromeMultiple cross-site scripting (XSS) vulnerabilities in Google Chrome 0.2.149.30 allow remote...CVE-2008-47244.3 MediumOctober 23, 2008
mozilla firefoxMultiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 3.0.1 through 3.0.3 allow...CVE-2008-47234.3 MediumOctober 23, 2008
sun integrated lights-out manager, blade 6000 modular system with chassis, blade 6048 modular system with chassis +34 more +36 moreUnspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26...CVE-2008-47229.0 HighOctober 23, 2008
opera browserOpera before 9.61 does not properly block scripts during preview of a news feed, which allows...CVE-2008-46985.8 MediumOctober 23, 2008
opera browserThe Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a...CVE-2008-46974.3 MediumOctober 23, 2008
operaCross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote...CVE-2008-4696Public exploitEPSS 45.7%4.3 MediumOctober 23, 2008
operaOpera before 9.60 allows remote attackers to obtain sensitive information and have unspecified...CVE-2008-46959.3 HighOctober 23, 2008
opera browserUnspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of...CVE-2008-4694Public exploit9.3 HighOctober 23, 2008
microsoft windows, windows 2000, windows server 2003 +3 more +5 moreThe Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista...CVE-2008-4250In KEVPublic exploitEPSS 98.8%10.0 HighOctober 23, 2008
gnu enscriptStack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1...CVE-2008-3863Fix available7.6 HighOctober 23, 2008
trend micro officescanStack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4...CVE-2008-3862EPSS 18.4%10.0 HighOctober 23, 2008
cisco pix security appliance, adaptive security appliance 5500 series +1 moreMemory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 8...CVE-2008-38177.8 HighOctober 23, 2008
cisco pix security appliance, adaptive security appliance 5500 series +1 moreUnspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX...CVE-2008-38167.8 HighOctober 23, 2008
cisco pix, asa 5500 +1 moreUnspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX...CVE-2008-38154.3 MediumOctober 23, 2008
hp openview performance agent, openview reporter, performance agent +1 more +3 moreThe Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView...CVE-2007-43494.3 MediumOctober 23, 2008
php jabbers post commentPHP Jabbers Post Comment 3.0 allows remote attackers to bypass authentication and gain...CVE-2008-4721Public exploit7.5 HighOctober 23, 2008
arzdev gemini portalMultiple PHP remote file inclusion vulnerabilities in The Gemini Portal 4.7 allow remote...CVE-2008-4720Public exploit9.3 HighOctober 23, 2008
openenginePHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0...CVE-2008-4719Public exploit9.3 HighOctober 23, 2008
x7 group chatDirectory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote...CVE-2008-4718Public exploit7.5 HighOctober 23, 2008
zeeways zeelyricsSQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to...CVE-2008-4717Public exploit7.5 HighOctober 23, 2008
scriptdemo php-lanceSQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to...CVE-2008-4716Public exploit7.5 HighOctober 23, 2008
jpad project jpadSQL injection vulnerability in the Jpad (com_jpad) 1.0 component for Joomla! allows remote...CVE-2008-4715Public exploit7.5 HighOctober 23, 2008
atomic photo album photo albumAtomic Photo Album 1.1.0 pre4 does not properly handle the apa_cookie_login and...CVE-2008-4714Public exploit7.5 HighOctober 23, 2008
212cafe 212cafeboardSQL injection vulnerability in view.php in 212cafe Board 0.07 allows remote attackers to execute...CVE-2008-4713Public exploit7.5 HighOctober 23, 2008
lnblogDirectory traversal vulnerability in pages/showblog.php in LnBlog 0.9.0 and earlier, when...CVE-2008-4712Public exploit6.8 MediumOctober 23, 2008
jooviliSQL injection vulnerability in Joovili 3.0 and earlier, when magic_quotes_gpc is disabled, allows...CVE-2008-4711Public exploit6.8 MediumOctober 23, 2008
drupal stock moduleCross-site scripting (XSS) vulnerability in the stock quotes page in Stock 6.x before 6.x-1.0, a...CVE-2008-47104.3 MediumOctober 23, 2008
pilot group etrainingSQL injection vulnerability in news_read.php in Pilot Group (PG) eTraining allows remote...CVE-2008-4709Public exploit7.5 HighOctober 23, 2008
sylvain pasquet bbzl.phpBbZL.PhP 0.92 allows remote attackers to bypass authentication and gain administrative access by...CVE-2008-4708Public exploit7.5 HighOctober 23, 2008
sylvain pasquet bbzl phpDirectory traversal vulnerability in index.php in BbZL.PhP 0.92 allows remote attackers to access...CVE-2008-4707Public exploit5.0 MediumOctober 23, 2008
vbulletin vbgooglemapSQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows...CVE-2008-4706Public exploit7.5 HighOctober 23, 2008
phponlinedatingsoftware myphpdatingSQL injection vulnerability in success_story.php in php Online Dating Software MyPHPDating allows...CVE-2008-4705Public exploit7.5 HighOctober 23, 2008
mitre sezhooPHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote...CVE-2008-4704Public exploit10.0 HighOctober 23, 2008
bosdev bosnewsSQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute...CVE-2008-4703Public exploit7.5 HighOctober 23, 2008
phpwebgalleryMultiple directory traversal vulnerabilities in PhpWebGallery 1.3.4 allow remote attackers to...CVE-2008-4702Public exploit7.5 HighOctober 22, 2008
liberiacms liberia cmsSQL injection vulnerability in admin.php in Libera CMS 1.12, when magic_quotes_gpc is disabled,...CVE-2008-4701Public exploit6.8 MediumOctober 22, 2008
liberiacms liberia cmsSQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magic_quotes_gpc is...CVE-2008-4700Public exploit6.8 MediumOctober 22, 2008
microsoft peachtree accountingInsecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004...CVE-2008-4699Public exploitEPSS 27.2%9.3 HighOctober 22, 2008
ibm db2The SORT/LIST SERVICES component in IBM DB2 9.1 before FP6 and 9.5 before FP2 writes sensitive...CVE-2008-46935.0 MediumOctober 22, 2008
ibm db2The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5...CVE-2008-469210.0 HighOctober 22, 2008
ibm db2Unspecified vulnerability in the SQLNLS_UNPADDEDCHARLEN function in the New Compiler (aka...CVE-2008-46915.0 MediumOctober 22, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open