Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
December

CVEs published in December 2008

528 vulnerabilities, 129 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

sun jdk, jre, sdk +2 moreStack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and...CVE-2008-53549.3 HighDecember 5, 2008
sun jdk, jre, sdk +2 moreThe Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0...CVE-2008-5353Public exploitEPSS 86.1%10.0 HighDecember 5, 2008
sun jdk, jre +1 moreInteger overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in...CVE-2008-53529.3 HighDecember 5, 2008
sun jdk, jre, sdk +2 moreJava Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0...CVE-2008-53517.5 HighDecember 5, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and...CVE-2008-53505.0 MediumDecember 5, 2008
sun jdk, jre +1 moreUnspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and...CVE-2008-53497.1 HighDecember 5, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and...CVE-2008-53487.1 HighDecember 5, 2008
sun jdk, jre +1 moreMultiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6...CVE-2008-53477.5 HighDecember 5, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and...CVE-2008-53467.1 HighDecember 5, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and...CVE-2008-53457.5 HighDecember 5, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update...CVE-2008-53447.5 HighDecember 5, 2008
sun jdk, jre, sdk +2 moreJava Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5...CVE-2008-53439.0 HighDecember 5, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun...CVE-2008-53425.0 MediumDecember 5, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update...CVE-2008-53415.0 MediumDecember 5, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update...CVE-2008-534010.0 HighDecember 5, 2008
sun jdk, jre, sdk +2 moreUnspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update...CVE-2008-53395.0 MediumDecember 5, 2008
sun jdk, jre, sdk +2 moreSun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0...CVE-2008-20869.3 HighDecember 5, 2008
multimania bandsite portal system, bandwebsite +1 moreCross-site scripting (XSS) vulnerability in info.php in Bandwebsite (aka Bandsite portal system)...CVE-2008-5338Public exploit4.3 MediumDecember 5, 2008
multimania bandsite portal system, bandwebsite +1 moreSQL injection vulnerability in lyrics.php in Bandwebsite (aka Bandsite portal system) 1.5 allows...CVE-2008-5337Public exploit7.5 HighDecember 5, 2008
bdigital web solutions webstudio cmsSQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute...CVE-2008-5336Public exploit7.5 HighDecember 5, 2008
php-fusionSQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when...CVE-2008-5335Public exploit6.8 MediumDecember 5, 2008
nitrotechPHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote...CVE-2008-5334Public exploit10.0 HighDecember 5, 2008
nitrotechSQL injection vulnerability in members.php in NitroTech 0.0.3a allows remote attackers to execute...CVE-2008-5333Public exploit7.5 HighDecember 5, 2008
pieMultiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute...CVE-2008-5332Public exploit10.0 HighDecember 5, 2008
inspector it wiz-adSQL injection vulnerability in Wiz-Ad 1.3 allows remote attackers to execute arbitrary SQL...CVE-2007-67197.5 HighDecember 5, 2008
adobe acrobatAdobe Acrobat 9 uses more efficient encryption than previous versions, which makes it easier for...CVE-2008-53317.5 HighDecember 5, 2008
ibm rational clearquestMultiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server...CVE-2008-5330Public exploit4.3 MediumDecember 5, 2008
ibm rational clearquestClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a...CVE-2008-53297.5 HighDecember 5, 2008
ibm rational clearquestThe ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password...CVE-2008-53284.6 MediumDecember 5, 2008
ibm rational clearquestThe ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database...CVE-2008-53276.5 MediumDecember 5, 2008
ibm rational clearquestThe ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before...CVE-2008-53264.4 MediumDecember 5, 2008
ibm rational clearquestMultiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 7.0.0...CVE-2008-53254.3 MediumDecember 5, 2008
ibm rational clearquestMultiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 2007...CVE-2008-53244.3 MediumDecember 5, 2008
hp hp-uxUnspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial...CVE-2008-44164.6 MediumDecember 5, 2008
squirrelmailCross-site scripting (XSS) vulnerability in SquirrelMail before 1.4.17 allows remote attackers to...CVE-2008-2379Fix available4.3 MediumDecember 5, 2008
easy-script wysi wiki wygCross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote...CVE-2008-5323Public exploit4.3 MediumDecember 3, 2008
easy-script wysi wiki wygWysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup...CVE-2008-5322Public exploit7.8 HighDecember 3, 2008
xoops hocasi gesgaleriSQL injection vulnerability in index.php in GesGaleri, a module for XOOPS, allows remote...CVE-2008-5321Public exploit7.5 HighDecember 3, 2008
e107SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote...CVE-2008-5320Public exploit6.5 MediumDecember 3, 2008
tiki tikiwiki cms\/groupwareUnspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to...CVE-2008-53195.0 MediumDecember 3, 2008
tiki tikiwiki cms\/groupwareUnspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to...CVE-2008-53185.0 MediumDecember 3, 2008
littlecms lcms, little cms color engine +1 moreInteger signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color...CVE-2008-531710.0 HighDecember 3, 2008
littlecms lcms, little cms color engine +1 moreBuffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine ...CVE-2008-531610.0 HighDecember 3, 2008
apple iphone configuration web utilityDirectory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility...CVE-2008-53157.8 HighDecember 3, 2008
clam anti-virus clamavStack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote...CVE-2008-5314Public exploitFix available4.3 MediumDecember 3, 2008
mailscannermailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite...CVE-2008-53136.9 MediumDecember 3, 2008
mailscannermailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite...CVE-2008-53126.9 MediumDecember 3, 2008
videolan vlc media playerInteger overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN...CVE-2008-5276Fix available9.3 HighDecember 3, 2008
octeth oempromember/settings_account.php in Octeth Oempro 3.5.5.1, and possibly other versions before 4, uses...CVE-2008-30594.0 MediumDecember 3, 2008
octeth oemproMultiple SQL injection vulnerabilities in Octeth Oempro 3.5.5.1, and possibly other versions...CVE-2008-3058Public exploit7.5 HighDecember 3, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open