Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
November

CVEs published in November 2008

433 vulnerabilities, 92 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

sun java system messaging serverCross-site scripting (XSS) vulnerability in Sun Java System Messaging Server 6.2 and 6.3 allows...CVE-2008-50984.3 MediumNovember 17, 2008
apple safariThe plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from...CVE-2008-42164.3 MediumNovember 17, 2008
apple safariApple Safari before 3.2 does not properly prevent caching of form data for form fields that have...CVE-2008-36441.9 LowNovember 17, 2008
apple safariHeap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1...CVE-2008-36239.3 HighNovember 17, 2008
xmlsoft libxmlInteger overflow in the xmlSAX2Characters function in libxml2 2.7.2 allows context-dependent...CVE-2008-4226Fix available10.0 HighNovember 17, 2008
xmlsoft libxmlInteger overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent...CVE-2008-4225Fix available7.8 HighNovember 17, 2008
myfwbSQL injection vulnerability in index.php in MyFWB 1.0 allows remote attackers to execute...CVE-2008-5097Public exploit7.5 HighNovember 14, 2008
typo3 file list extensionUnspecified vulnerability in the TYPO3 File List (file_list) extension 0.2.1 and earlier allows...CVE-2008-50965.0 MediumNovember 14, 2008
novell identity manager roles based provisioning module, user application +1 moreCross-site scripting (XSS) vulnerability in the Novell User Application 3.0.1, 3.5.0, and 3.5.1;...CVE-2008-50954.3 MediumNovember 14, 2008
novell edirectoryHeap-based buffer overflow in the NDS Service in Novell eDirectory before 8.8 SP3 has unknown...CVE-2008-509410.0 HighNovember 14, 2008
novell edirectoryCross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell...CVE-2008-50934.3 MediumNovember 14, 2008
novell edirectoryHeap-based buffer overflows in Novell eDirectory HTTP protocol stack (HTTPSTK) before 8.8 SP3...CVE-2008-509210.0 HighNovember 14, 2008
novell edirectoryBuffer overflow in the LDAP Service in Novell eDirectory 8.7.3 before SP10a and 8.8 before SP3...CVE-2008-509110.0 HighNovember 14, 2008
anelectron advanced electron forumElectron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary...CVE-2008-5090Public exploit10.0 HighNovember 14, 2008
datadynamics activereportsMultiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control ...CVE-2008-50899.3 HighNovember 14, 2008
knowledgebase-script phpkb knowledge base softwareMultiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow...CVE-2008-5088Public exploit7.5 HighNovember 14, 2008
typo3 another backend loginSQL injection vulnerability in TYPO3 Another Backend Login (wrg_anotherbelogin) extension before...CVE-2008-50877.5 HighNovember 14, 2008
htophtop 0.7 writes process names to a terminal without sanitizing non-printable characters, which...CVE-2008-5076Fix available4.6 MediumNovember 14, 2008
scriptsfrenzy e-uploader proMultiple SQL injection vulnerabilities in E-Uploader Pro 1.0 (aka Uploader PRO), when...CVE-2008-5075Public exploit6.8 MediumNovember 14, 2008
php-fusion freshlinks moduleSQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows...CVE-2008-5074Public exploit7.5 HighNovember 14, 2008
novell zenworks desktop managementHeap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows...CVE-2008-5073Public exploit9.3 HighNovember 14, 2008
k-lite mega codec packvsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of...CVE-2008-5072Public exploit4.3 MediumNovember 14, 2008
yoxelMultiple eval injection vulnerabilities in itpm_estimate.php in Yoxel 1.23beta and earlier allow...CVE-2008-5071Public exploit9.0 HighNovember 14, 2008
pro chat rooms chat roomsSQL injection vulnerability in Pro Chat Rooms 3.0.3, when magic_quotes_gpc is disabled, allows...CVE-2008-5070Public exploit7.5 HighNovember 14, 2008
deeserver panuwat promoteweb mysqlSQL injection vulnerability in go.php in Panuwat PromoteWeb MySQL, when magic_quotes_gpc is...CVE-2008-5069Public exploit7.5 HighNovember 14, 2008
kkeim kmita galleryMultiple cross-site scripting (XSS) vulnerabilities in Kmita Gallery allow remote attackers to...CVE-2008-5068Public exploit4.3 MediumNovember 13, 2008
kkeim kmita catalogueCross-site scripting (XSS) vulnerability in search.php in Kmita Catalogue 2.x allows remote...CVE-2008-5067Public exploit4.3 MediumNovember 13, 2008
agaresmedia themesitescriptPHP remote file inclusion vulnerability in upload/admin/frontpage_right.php in Agares Media...CVE-2008-5066Public exploit10.0 HighNovember 13, 2008
easy-script tlguesbookTlGuestBook 1.2 allows remote attackers to bypass authentication and gain administrative access...CVE-2008-5065Public exploit7.5 HighNovember 13, 2008
h\&h websoccerSQL injection vulnerability in liga.php in H&H WebSoccer 2.80 allows remote attackers to execute...CVE-2008-5064Public exploit7.5 HighNovember 13, 2008
otmanagerPHP remote file inclusion vulnerability in Admin/ADM_Pagina.php in OTManager 2.4 allows remote...CVE-2008-5063Public exploit10.0 HighNovember 13, 2008
smolinari mini web calendarDirectory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2 allows...CVE-2008-5062Public exploit5.0 MediumNovember 13, 2008
smolinari mini web calendarCross-site scripting (XSS) vulnerability in php/cal_default.php in Mini Web Calendar (mwcal) 1.2...CVE-2008-5061Public exploit4.3 MediumNovember 13, 2008
modernbillMultiple PHP remote file inclusion vulnerabilities in ModernBill 4.4 and earlier allow remote...CVE-2008-5060Public exploit10.0 HighNovember 13, 2008
modernbillCross-site scripting (XSS) vulnerability in index.php in ModernBill 4.4 and earlier allows remote...CVE-2008-5059Public exploit4.3 MediumNovember 13, 2008
preproject pre simple cmsSQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote...CVE-2008-5058Public exploit7.5 HighNovember 13, 2008
aspindir dizi portaliSQL injection vulnerability in film.asp in Yigit Aybuga Dizi Portali allows remote attackers to...CVE-2008-5057Public exploit7.5 HighNovember 13, 2008
activecampaign trioliveCross-site scripting (XSS) vulnerability in department_offline_context.php in ActiveCampaign...CVE-2008-50564.3 MediumNovember 13, 2008
activecampaign trioliveSQL injection vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1...CVE-2008-50557.5 HighNovember 13, 2008
develop it easy membership systemMultiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote...CVE-2008-5054Public exploit7.5 HighNovember 13, 2008
joomla com rssreaderPHP remote file inclusion vulnerability in admin.rssreader.php in the Simple RSS Reader ...CVE-2008-5053Public exploitEPSS 64.1%10.0 HighNovember 13, 2008
mozilla firefox, seamonkey, thunderbird +2 moreThe AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18...CVE-2008-505210.0 HighNovember 13, 2008
mozilla firefox, seamonkey, thunderbird +2 more +4 moreMozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18,...CVE-2008-50247.5 HighNovember 13, 2008
mozilla firefox, seamonkey, canonical ubuntu linux +1 more +3 moreFirefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows...CVE-2008-50237.5 HighNovember 13, 2008
mozilla firefox, seamonkey, thunderbird +2 more +4 moreThe nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before...CVE-2008-50227.5 HighNovember 13, 2008
mozilla firefox, seamonkey, thunderbird +10 more +12 morensFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2...CVE-2008-50219.3 HighNovember 13, 2008
mozilla firefox, canonical ubuntu linux, debian linux +2 moreThe session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows...CVE-2008-50194.3 MediumNovember 13, 2008
mozilla firefox, seamonkey, thunderbird +2 more +4 moreThe JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18,...CVE-2008-501810.0 HighNovember 13, 2008
mozilla firefox, seamonkey, thunderbird +2 more +4 moreInteger overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0...CVE-2008-501710.0 HighNovember 13, 2008
mozilla firefox, seamonkey, thunderbird +2 moreThe layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and...CVE-2008-50165.0 MediumNovember 13, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open