Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
November

CVEs published in November 2008

433 vulnerabilities, 92 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

ecryptfs utilsThe (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam...CVE-2008-5188Fix available7.2 HighNovember 21, 2008
enlightenment imlib2The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows...CVE-2008-5187Fix available7.5 HighNovember 21, 2008
geshi** DISPUTED ** The set_language_path function in geshi.php in Generic Syntax Highlighter (GeSHi)...CVE-2008-5186Fix availableDisputed7.5 HighNovember 21, 2008
geshiThe highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to...CVE-2008-5185Public exploitFix available5.0 MediumNovember 21, 2008
apple cupsThe web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the guest username when a user is...CVE-2008-5184Fix available10.0 HighNovember 21, 2008
apple cups, mac os x, mac os x server +2 more +4 morecupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a...CVE-2008-5183Public exploitFix available7.5 HighNovember 21, 2008
linux kernelThe inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain...CVE-2008-51826.9 MediumNovember 21, 2008
microsoft office communicatorMicrosoft Communicator allows remote attackers to cause a denial of service (application or...CVE-2008-5181EPSS 12.7%5.0 MediumNovember 20, 2008
microsoft office communicatorMicrosoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers...CVE-2008-5180Public exploitEPSS 68.0%5.0 MediumNovember 20, 2008
microsoft office communications server, office communicator, windows live messenger +2 moreUnspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator,...CVE-2008-5179EPSS 16.4%5.0 MediumNovember 20, 2008
operaHeap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary...CVE-2008-5178Public exploitEPSS 31.5%9.3 HighNovember 20, 2008
insight-tech yosemite backupStack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote...CVE-2008-5177Public exploitEPSS 16.9%10.0 HighNovember 20, 2008
clientsoftware wincom mpd totalMultiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote...CVE-2008-51769.3 HighNovember 20, 2008
visicommedia aceftpDirectory traversal vulnerability in the FTP client in AceFTP Freeware 3.80.3 and AceFTP Pro 3.80...CVE-2008-5175Public exploit9.3 HighNovember 19, 2008
easysitenetwork jokes complete websiteSQL injection vulnerability in joke.php in Jokes Complete Website 2.1.3 allows remote attackers...CVE-2008-5174Public exploit7.5 HighNovember 19, 2008
testmakerUnspecified vulnerability in testMaker before 3.0p16 allows remote authenticated users to execute...CVE-2008-51739.0 HighNovember 19, 2008
forumsoftware yazd forum softwareMultiple cross-site scripting (XSS) vulnerabilities in Yazd Forum Software 3.x allow remote...CVE-2008-51724.3 MediumNovember 19, 2008
phpblaster cmsMultiple directory traversal vulnerabilities in admin/minibb/index.php in phpBLASTER CMS 1.0 RC1,...CVE-2008-5171Public exploit9.3 HighNovember 19, 2008
easysitenetwork cheats complete websiteSQL injection vulnerability in item.php in Cheats Complete Website 1.1.1 allows remote attackers...CVE-2008-5170Public exploit7.5 HighNovember 19, 2008
easysitenetwork drinks complete websiteSQL injection vulnerability in drinks/drink.php in Drinks Complete Website 2.1.0 allows remote...CVE-2008-5169Public exploit7.5 HighNovember 19, 2008
easysitenetwork tips complete websiteSQL injection vulnerability in tip.php in Tips Complete Website 1.2.0 allows remote attackers to...CVE-2008-5168Public exploit7.5 HighNovember 19, 2008
boonex orcaPHP remote file inclusion vulnerability in layout/default/params.php in Boonex Orca 2.0 and 2.0.2...CVE-2008-5167Public exploit9.3 HighNovember 19, 2008
easysitenetwork riddles websiteSQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to...CVE-2008-5166Public exploit7.5 HighNovember 19, 2008
eticketMultiple SQL injection vulnerabilities in eTicket 1.5.7 allow remote attackers to execute...CVE-2008-51657.5 HighNovember 19, 2008
theratstudios the rat cmsMultiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote...CVE-2008-5164Public exploit4.3 MediumNovember 19, 2008
theratstudios the rat cmsMultiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to...CVE-2008-5163Public exploit7.5 HighNovember 19, 2008
openbsd openssh, ssh tectia client, tectia connector +2 more +4 moreError handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through...CVE-2008-5161Public exploitFix availableEPSS 18.6%2.6 LowNovember 19, 2008
myserverUnspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service...CVE-2008-5160Public exploit5.0 MediumNovember 18, 2008
clientsoftware wincome mpd totalInteger overflow in the remote administration protocol processing in Client Software WinCom LPD...CVE-2008-5159Public exploitEPSS 59.7%10.0 HighNovember 18, 2008
clientsoftware wincome mpd totalClient Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass...CVE-2008-51587.5 HighNovember 18, 2008
uoregon tautau 2.16.4 allows local users to overwrite arbitrary files via a symlink attack on a (1) /tmp...CVE-2008-51576.9 MediumNovember 18, 2008
dann frazier systemimager-serversi_mkbootserver in systemimager-server 3.6.3 allows local users to overwrite arbitrary files via...CVE-2008-51566.9 MediumNovember 18, 2008
smsclientmail2sms.sh in smsclient 2.0.8z allows local users to overwrite arbitrary files via a symlink...CVE-2008-51559.3 HighNovember 18, 2008
koeniglich p3nfsbluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack...CVE-2008-51546.9 MediumNovember 18, 2008
moodleMoodle vulnerable to symlink attackCVE-2008-5153Fix available6.9 MediumNovember 18, 2008
peter s galbraith mh-bookinmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink...CVE-2008-51526.9 MediumNovember 18, 2008
abottoms mayavitest_parser.py in mayavi 1.5 allows local users to overwrite arbitrary files via a symlink attack...CVE-2008-51516.9 MediumNovember 18, 2008
jose carlos medeiros maildirsyncsample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink...CVE-2008-51506.9 MediumNovember 18, 2008
aucko libncbi6fwd_check.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a...CVE-2008-5149Fix available6.9 MediumNovember 18, 2008
geda gnetlistsch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a...CVE-2008-51486.9 MediumNovember 18, 2008
holloway docverttest-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files...CVE-2008-51476.9 MediumNovember 18, 2008
erl wustl ctnadd-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink...CVE-2008-51466.9 MediumNovember 18, 2008
debian ltpltpmenu in ltp 20060918 allows local users to overwrite arbitrary files via a symlink attack on a...CVE-2008-51456.9 MediumNovember 18, 2008
federico di gregorio nvidia-cg-toolkitnvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite...CVE-2008-51446.9 MediumNovember 18, 2008
mohammed sameer multi-gnome-terminalmgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a...CVE-2008-51436.9 MediumNovember 18, 2008
freebsd freebsd-sendprsendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux allows local users to overwrite arbitrary...CVE-2008-51426.9 MediumNovember 18, 2008
dann frazier flamethrowerflamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink...CVE-2008-5141Fix available6.9 MediumNovember 18, 2008
debian mailscannertrend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local...CVE-2008-51406.9 MediumNovember 18, 2008
javier fernandez jailerupdatejail in jailer 0.4 allows local users to overwrite arbitrary files via a symlink attack on...CVE-2008-5139Fix available6.9 MediumNovember 18, 2008
bkleineidam libpam mountpasswdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink...CVE-2008-5138Fix available6.9 MediumNovember 18, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open