Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
November

CVEs published in November 2008

433 vulnerabilities, 92 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

tkmantkman in tkman 2.2 allows local users to overwrite arbitrary files via a symlink attack on a (1) ...CVE-2008-5137Fix available6.9 MediumNovember 18, 2008
ldrolez tkusrtkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the ...CVE-2008-51366.9 MediumNovember 18, 2008
debian os-prober** DISPUTED ** os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a...CVE-2008-5135Disputed6.2 MediumNovember 18, 2008
linux kernelBuffer overflow in the lbs_process_bss function in drivers/net/wireless/libertas/scan.c in the...CVE-2008-513410.0 HighNovember 18, 2008
sun opensolaris, solaris +1 moreipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server...CVE-2008-51335.8 MediumNovember 18, 2008
memht portalSQL injection vulnerability in inc/ajax/ajax_rating.php in MemHT Portal 4.0.1 allows remote...CVE-2008-5132Public exploit7.5 HighNovember 18, 2008
develop it easy news and article systemMultiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow...CVE-2008-5131Public exploit7.5 HighNovember 18, 2008
ocean12 technologies calendar managerOcean12 Calendar Manager Gold 2.04 stores sensitive information under the web root with...CVE-2008-51305.0 MediumNovember 18, 2008
ocean12 technologies poll managerOcean12 Poll Manager Pro 1.00 stores sensitive information under the web root with insufficient...CVE-2008-51295.0 MediumNovember 18, 2008
ocean12 technologies membership manager proOcean12 Membership Manager Pro stores sensitive information under the web root with insufficient...CVE-2008-51285.0 MediumNovember 18, 2008
ocean12 technologies contact managerOcean12 Contact Manager Pro 1.02 stores sensitive information under the web root with...CVE-2008-51275.0 MediumNovember 18, 2008
boutikone cmsCross-site scripting (XSS) vulnerability in search.php in BoutikOne CMS allows remote attackers...CVE-2008-5126Public exploit4.3 MediumNovember 18, 2008
castillocentral ccleagueadmin.php in CCleague Pro 1.2 allows remote attackers to bypass authentication by setting the...CVE-2008-5125Public exploit6.8 MediumNovember 18, 2008
jscape secure ftp appletJSCAPE Secure FTP Applet 4.8.0 and earlier does not ask the user to verify a new or mismatched...CVE-2008-51247.5 HighNovember 18, 2008
castillocentral ccleagueSQL injection vulnerability in admin.php in CCleague Pro 1.2 allows remote attackers to execute...CVE-2008-5123Public exploit6.8 MediumNovember 18, 2008
ektron cms4000.netSQL injection vulnerability in WorkArea/ContentRatingGraph.aspx in Ektron CMS400.NET 7.5.2 and...CVE-2008-51227.5 HighNovember 18, 2008
citrix deterministic network enhancerdne2000.sys in Citrix Deterministic Network Enhancer (DNE) 2.21.7.233 through 3.21.7.17464, as...CVE-2008-5121Public exploit7.2 HighNovember 18, 2008
hp openvmsStack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP...CVE-2008-5120Public exploit10.0 HighNovember 18, 2008
scripts4profit dxshopcartCross-site scripting (XSS) vulnerability in search.php in Scripts4Profit DXShopCart 4.30mc allows...CVE-2008-51194.3 MediumNovember 18, 2008
sun java system identity managerSun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to...CVE-2008-51184.3 MediumNovember 18, 2008
sun java system identity managerOpen redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1...CVE-2008-51176.4 MediumNovember 18, 2008
sun java system identity managerDirectory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity...CVE-2008-51167.8 HighNovember 18, 2008
sun java system identity managerCross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6...CVE-2008-5115Public exploit6.8 MediumNovember 18, 2008
sun java system identity managerMultiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0...CVE-2008-51144.3 MediumNovember 18, 2008
wordpressWordPress 2.6.3 relies on the REQUEST superglobal array in certain dangerous situations, which...CVE-2008-5113Fix available4.0 MediumNovember 17, 2008
microsoft windows, windows 2000 +1 moreThe LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2...CVE-2008-5112Public exploitEPSS 17.4%5.0 MediumNovember 17, 2008
sun opensolaris, solaris +1 moreUnspecified vulnerability in the socket function in Sun Solaris 10 and OpenSolaris snv_57 through...CVE-2008-51114.7 MediumNovember 17, 2008
linux kernelStack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux...CVE-2008-50257.8 HighNovember 17, 2008
rpath initscriptsrc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete...CVE-2008-48326.9 MediumNovember 17, 2008
hp service managerUnspecified vulnerability in HP Service Manager (HPSM) before 7.01.71 allows remote authenticated...CVE-2008-44159.0 HighNovember 17, 2008
trend micro serverprotectHeap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58...CVE-2008-001410.0 HighNovember 17, 2008
trend micro serverprotectHeap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58...CVE-2008-001310.0 HighNovember 17, 2008
trend micro serverprotectHeap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58...CVE-2008-001210.0 HighNovember 17, 2008
trend micro serverprotectHeap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58...CVE-2007-007410.0 HighNovember 17, 2008
trend micro serverprotectHeap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58...CVE-2007-007310.0 HighNovember 17, 2008
trend micro serverprotectHeap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58...CVE-2007-007210.0 HighNovember 17, 2008
trend micro serverprotectHeap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58...CVE-2006-526910.0 HighNovember 17, 2008
trend micro serverprotectUnspecified vulnerability in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to...CVE-2006-526810.0 HighNovember 17, 2008
oneidentity syslog-ngsyslog-ng does not call chdir when it calls chroot, which might allow attackers to escape the...CVE-2008-5110Fix available9.3 HighNovember 17, 2008
adobe airUnspecified vulnerability in Adobe AIR 1.1 and earlier allows context-dependent attackers to...CVE-2008-51086.8 MediumNovember 17, 2008
adobe flash playerMultiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before...CVE-2008-4824EPSS 21.1%9.3 HighNovember 17, 2008
citrix desktop server, presentation server +1 moreThe installation process for Citrix Presentation Server 4.5 and Desktop Server 1.0, when MSI...CVE-2008-51071.9 LowNovember 17, 2008
karjasoft sami ftp serverBuffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of...CVE-2008-5106Public exploitEPSS 12.5%10.0 HighNovember 17, 2008
karjasoft sami ftp serverKarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon...CVE-2008-5105Public exploit5.0 MediumNovember 17, 2008
dcgrendel vmbuilderUbuntu 6.06 LTS, 7.10, 8.04 LTS, and 8.10, when installed as a virtual machine by (1) python-vm...CVE-2008-51047.2 HighNovember 17, 2008
dcgrendel vmbuilderThe (1) python-vm-builder and (2) ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8...CVE-2008-51037.2 HighNovember 17, 2008
zopePythonScripts in Zope 2 2.11.2 and earlier, as used in Conga and other products, allows remote...CVE-2008-5102Public exploit4.0 MediumNovember 17, 2008
optipngBuffer overflow in the BMP reader in OptiPNG 0.6 and 0.6.1 allows user-assisted attackers to...CVE-2008-5101Fix available9.3 HighNovember 17, 2008
microsoft .net frameworkThe strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital...CVE-2008-510010.0 HighNovember 17, 2008
sun logical domain managerSun Logical Domain Manager (aka LDoms Manager or ldm) 1.0 through 1.0.3 displays the value of the...CVE-2008-50994.6 MediumNovember 17, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open