Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
November

CVEs published in November 2008

433 vulnerabilities, 92 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

adobe flash media serverThe default configuration of Adobe Flash Media Server (FMS) 3.0 does not enable SWF Verification...CVE-2008-51095.0 MediumNovember 25, 2008
streamripperMultiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute...CVE-2008-4829Fix available9.3 HighNovember 25, 2008
apple iphone os, safari +1 moreSafari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not...CVE-2008-42332.6 LowNovember 25, 2008
apple iphone os, safari +1 moreSafari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not...CVE-2008-42325.0 MediumNovember 25, 2008
apple iphone os, safari +1 moreSafari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not...CVE-2008-42319.3 HighNovember 25, 2008
apple iphone osThe Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1...CVE-2008-42301.9 LowNovember 25, 2008
apple iphone osRace condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for...CVE-2008-42293.7 LowNovember 25, 2008
apple iphone osThe Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1...CVE-2008-42283.6 LowNovember 25, 2008
apple iphone osApple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the...CVE-2008-42277.5 HighNovember 25, 2008
apple iphone osImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow...CVE-2008-15867.1 HighNovember 25, 2008
mambads, mambo +1 moreSQL injection vulnerability in the MambAds (com_mambads) component 1.0 RC1 Beta and 1.0 RC1 for...CVE-2008-5226Public exploit7.5 HighNovember 25, 2008
xerox docushareMultiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote...CVE-2008-5225Public exploit4.3 MediumNovember 25, 2008
kent-web martCross-site scripting (XSS) vulnerability in Kent Web Mart 1.61 and earlier allows remote...CVE-2008-52244.3 MediumNovember 25, 2008
airvae commerceSQL injection vulnerability in index.php in Airvae Commerce 3.0 allows remote attackers to...CVE-2008-5223Public exploit7.5 HighNovember 25, 2008
dvbbsSQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute...CVE-2008-5222Public exploit7.5 HighNovember 25, 2008
wportfolioThe account_save action in admin/userinfo.php in wPortfolio 0.3 and earlier does not require...CVE-2008-5221Public exploit7.5 HighNovember 25, 2008
wportfolioUnrestricted file upload vulnerability in admin/upload_form.php in wPortfolio 0.3 and earlier...CVE-2008-5220Public exploitEPSS 14.3%10.0 HighNovember 25, 2008
videoscriptThe password change feature (admin/cp.php) in VideoScript 4.0.1.50 and earlier does not check for...CVE-2008-5219Public exploit7.5 HighNovember 25, 2008
scriptsez freeze greetingsScriptsEz FREEze Greetings 1.0 stores pwd.txt under the web root with insufficient access control...CVE-2008-5218Public exploit5.0 MediumNovember 25, 2008
phpc0d3r txtcmsDirectory traversal vulnerability in index.php in txtCMS 0.3, when register_globals is enabled...CVE-2008-5217Public exploit5.1 MediumNovember 24, 2008
aj square zeuscartSQL injection vulnerability in category_list.php in AJ Square ZeusCart 2.0 and earlier allows...CVE-2008-5216Public exploit7.5 HighNovember 24, 2008
clanliteSQL injection vulnerability in service/profil.php in ClanLite 2.2006.05.20 allows remote...CVE-2008-5215Public exploit7.5 HighNovember 24, 2008
clanliteCross-site scripting (XSS) vulnerability in service/calendrier.php in ClanLite 2.2006.05.20...CVE-2008-5214Public exploit4.3 MediumNovember 24, 2008
aj square articleSQL injection vulnerability in featured_article.php in AJ Article 1.0 allows remote attackers to...CVE-2008-5213Public exploit7.5 HighNovember 24, 2008
aj square auctionSQL injection vulnerability in classifide_ad.php in AJ Auction 6.2.1 and earlier allows remote...CVE-2008-5212Public exploit7.5 HighNovember 24, 2008
sphiderCross-site scripting (XSS) vulnerability in search.php in Sphider 1.3.4, when the search...CVE-2008-5211Public exploit2.6 LowNovember 24, 2008
phpblockMultiple PHP remote file inclusion vulnerabilities in PhpBlock A8.5 allow remote attackers to...CVE-2008-5210Public exploit9.3 HighNovember 24, 2008
admidioDirectory traversal vulnerability in modules/download/get_file.php in Admidio 1.4.8 allows remote...CVE-2008-5209Public exploit5.0 MediumNovember 24, 2008
joomla com datsogallerySQL injection vulnerability in sub_votepic.php in the Datsogallery (com_datsogallery) module 1.6...CVE-2008-5208Public exploit7.5 HighNovember 24, 2008
gnu escriptMultiple buffer overflows in the (1) recognize_eps_file function (src/psgen.c) and (2)...CVE-2008-5078Fix available6.8 MediumNovember 24, 2008
hfUntrusted search path vulnerability in hfkernel in hf 0.7.3 and 0.8 allows local users to gain...CVE-2008-2378Fix available7.2 HighNovember 22, 2008
jonascmsMultiple directory traversal vulnerabilities in Jonascms 1.2 allow remote attackers to include...CVE-2008-52076.8 MediumNovember 21, 2008
mosxmlPHP remote file inclusion vulnerability in modules/mod_mainmenu.php in MosXML 1 Alpha allows...CVE-2008-52067.5 HighNovember 21, 2008
wellyblogCross-site scripting (XSS) vulnerability in edit.php in wellyblog allows remote attackers to...CVE-2008-52054.3 MediumNovember 21, 2008
powerawardMultiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when register_globals is...CVE-2008-5204Public exploit6.8 MediumNovember 21, 2008
powerawardCross-site scripting (XSS) vulnerability in external_vote.php in PowerAward 1.1.0 RC1 allows...CVE-2008-5203Public exploit4.3 MediumNovember 21, 2008
otmanager cmsCross-site scripting (XSS) vulnerability in index.php in OTManager CMS 24a allows remote...CVE-2008-5202Public exploit4.3 MediumNovember 21, 2008
otmanager cmsDirectory traversal vulnerability in index.php in OTManager CMS 24a allows remote attackers to...CVE-2008-5201Public exploit7.5 HighNovember 21, 2008
joomla com xewebtvSQL injection vulnerability in the Xe webtv (com_xewebtv) component for Joomla! allows remote...CVE-2008-5200Public exploit7.5 HighNovember 21, 2008
phpoutsourcing ideaboxPHP remote file inclusion vulnerability in include.php in PHPOutsourcing IdeaBox (aka IdeBox) 1.1...CVE-2008-5199Public exploit7.5 HighNovember 21, 2008
vizzed acmlmboardSQL injection vulnerability in memberlist.php in Acmlmboard 1.A2 allows remote attackers to...CVE-2008-5198Public exploit7.5 HighNovember 21, 2008
php-fusionSQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute...CVE-2008-5197Public exploit7.5 HighNovember 21, 2008
php-fusion the kroax moduleSQL injection vulnerability in kroax.php in the Kroax (the_kroax) 4.42 and earlier module for PHP...CVE-2008-5196Public exploit7.5 HighNovember 21, 2008
sebrac sebraccmsMultiple SQL injection vulnerabilities in SebracCMS (sbcms) 0.4 allow remote attackers to execute...CVE-2008-5195Public exploit7.5 HighNovember 21, 2008
softvisions software online booking managerSQL injection vulnerability in checkavail.php in SoftVisions Software Online Booking Manager (obm...CVE-2008-5194Public exploit7.5 HighNovember 21, 2008
philboardCross-site scripting (XSS) vulnerability in search.asp in W1L3D4 Philboard 1.14 and 1.2 allows...CVE-2008-5193Public exploit4.3 MediumNovember 21, 2008
philboardSQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers...CVE-2008-5192Public exploit7.5 HighNovember 21, 2008
seportalMultiple SQL injection vulnerabilities in SePortal 2.4 allow remote attackers to execute...CVE-2008-5191Public exploitEPSS 17.6%7.5 HighNovember 21, 2008
eshop100SQL injection vulnerability in index.php in eSHOP100 allows remote attackers to execute arbitrary...CVE-2008-5190Public exploit7.5 HighNovember 21, 2008
rubyonrails rails, ruby on rails +1 morerails is vulnerable to CRLF injectionCVE-2008-5189Fix available5.0 MediumNovember 21, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open