Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
December

CVEs published in December 2008

528 vulnerabilities, 129 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

darkwet webcam xpMultiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier...CVE-2008-5674Public exploit9.4 HighDecember 18, 2008
phparanoidPHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated...CVE-2008-56736.5 MediumDecember 18, 2008
phparanoidMultiple cross-site request forgery (CSRF) vulnerabilities in PHParanoid before 0.4 allow remote...CVE-2008-56726.8 MediumDecember 18, 2008
joomlaPHP remote file inclusion vulnerability in index.php in Joomla! 1.0.11 through 1.0.14, when...CVE-2008-56717.5 HighDecember 18, 2008
textpatternTextpattern (aka Txp CMS) 4.0.5 does not ask for the old password during a password reset, which...CVE-2008-56706.8 MediumDecember 18, 2008
textpatternindex.php in the comments preview section in Textpattern (aka Txp CMS) 4.0.5 allows remote...CVE-2008-56695.0 MediumDecember 18, 2008
textpatternMultiple cross-site scripting (XSS) vulnerabilities in Textpattern (aka Txp CMS) 4.0.5 allow...CVE-2008-56684.3 MediumDecember 18, 2008
virusblokada vba32 personal antivirusThe scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to...CVE-2008-5667Public exploit5.0 MediumDecember 18, 2008
wftpserver winftp ftp serverWinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users...CVE-2008-5666Public exploitEPSS 20.6%3.5 LowDecember 18, 2008
xoopsSQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers...CVE-2008-5665Public exploit7.5 HighDecember 18, 2008
realtek media playerStack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or...CVE-2008-5664Public exploitEPSS 36.2%9.3 HighDecember 18, 2008
kusabaMultiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote...CVE-2008-5663Public exploit9.0 HighDecember 18, 2008
adobe flash player for linuxUnspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier,...CVE-2008-5499Public exploitFix availableEPSS 79.4%9.3 HighDecember 18, 2008
mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreUnspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and...CVE-2008-55134.3 MediumDecember 17, 2008
mozilla firefox, seamonkey, thunderbird +2 more +4 moreMultiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19,...CVE-2008-55126.8 MediumDecember 17, 2008
mozilla firefox, seamonkey, thunderbird +2 more +4 moreMozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and...CVE-2008-55114.3 MediumDecember 17, 2008
mozilla firefox, seamonkey, thunderbird +2 more +4 moreThe CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x...CVE-2008-55105.0 MediumDecember 17, 2008
mozilla firefox, seamonkey, thunderbird +2 more +4 moreMozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and...CVE-2008-55084.3 MediumDecember 17, 2008
mozilla firefox, seamonkey, thunderbird +2 more +4 moreMozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and...CVE-2008-55076.0 MediumDecember 17, 2008
mozilla firefox, seamonkey, thunderbird +2 more +4 moreMozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and...CVE-2008-55066.8 MediumDecember 17, 2008
mozilla firefoxMozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions...CVE-2008-55055.0 MediumDecember 17, 2008
mozilla firefoxMozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with...CVE-2008-55047.5 HighDecember 17, 2008
mozilla firefox, seamonkey, thunderbird +2 moreThe loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2...CVE-2008-55032.6 LowDecember 17, 2008
mozilla firefox, seamonkey, canonical ubuntu linux +2 moreThe layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and...CVE-2008-55025.0 MediumDecember 17, 2008
mozilla firefox, seamonkey, canonical ubuntu linux +2 moreThe layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and...CVE-2008-55015.0 MediumDecember 17, 2008
mozilla firefox, seamonkey, thunderbird +2 more +4 moreThe layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x...CVE-2008-550010.0 HighDecember 17, 2008
sun java wireless toolkit for cldcMultiple buffer overflows in Sun Java Wireless Toolkit (WTK) for CLDC 2.5.2 and earlier allow...CVE-2008-56629.3 HighDecember 17, 2008
sun opensolaris, solaris +1 moreThe IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv_47 through snv_82, with certain...CVE-2008-56615.4 MediumDecember 17, 2008
gnome vinagreFormat string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in...CVE-2008-5660Public exploitFix available6.8 MediumDecember 17, 2008
gnu classpathThe gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed...CVE-2008-5659Public exploit7.5 HighDecember 17, 2008
phpDirectory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier...CVE-2008-56587.5 HighDecember 17, 2008
quassel coreCRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC...CVE-2008-5657Fix available7.5 HighDecember 17, 2008
typo3typo3/cms-felogin Cross-site Scripting vulnerabilityCVE-2008-5656Fix available4.3 MediumDecember 17, 2008
myiosoft easybookmarkerMultiple SQL injection vulnerabilities in MyioSoft EasyBookMarker 4.0 allow remote attackers to...CVE-2008-5655Public exploit7.5 HighDecember 17, 2008
myiosoft easycalendarSQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyCalendar 4.0...CVE-2008-5654Public exploit7.5 HighDecember 17, 2008
myiosoft.com ajaxportalSQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft AjaxPortal 3.0...CVE-2008-5653Public exploit7.5 HighDecember 17, 2008
myiosoft easybookmarkerSQL injection vulnerability in the loginADP function in ajaxp.php in MyioSoft EasyBookMarker 4.0...CVE-2008-5652Public exploit7.5 HighDecember 17, 2008
myiosoft easybookmarkerSQL injection vulnerability in plugins/bookmarker/bookmarker_backend.php in MyioSoft...CVE-2008-5651Public exploit7.5 HighDecember 17, 2008
alstrasoft webhost directorySQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote...CVE-2008-5650Public exploit7.5 HighDecember 17, 2008
alstrasoft article manager proSQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro 1.6 allows...CVE-2008-5649Public exploit10.0 HighDecember 17, 2008
deltascripts php shopSQL injection vulnerability in admin/login.php in DeltaScripts PHP Shop 1.0 allows remote...CVE-2008-5648Public exploit7.5 HighDecember 17, 2008
tracTrac has vulnerability in HTML sanitizer filterCVE-2008-5647Fix available5.0 MediumDecember 17, 2008
tracTrac vulnerable to denial of serviceCVE-2008-5646Fix available7.5 HighDecember 17, 2008
orb networks orbDirectory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows...CVE-2008-56457.8 HighDecember 17, 2008
typo3TYPO3 Cross-site Scripting vulnerability in the file backend moduleCVE-2008-5644Fix available4.3 MediumDecember 17, 2008
joomla com booksSQL injection vulnerability in the Books (com_books) component for Joomla! allows remote...CVE-2008-5643Public exploit7.5 HighDecember 17, 2008
cmsmadesimple cms made simpleDirectory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote...CVE-2008-5642Public exploit5.0 MediumDecember 17, 2008
activewebsoftwares active photo gallerySQL injection vulnerability in account.asp in Active Photo Gallery 6.2 allows remote attackers to...CVE-2008-5641Public exploit7.5 HighDecember 17, 2008
activewebsoftwares active bidsSQL injection vulnerability in bidhistory.asp in Active Bids 3.5 allows remote attackers to...CVE-2008-5640Public exploit7.5 HighDecember 17, 2008
txtblogcms txtblogDirectory traversal vulnerability in index.php in TxtBlog 1.0 Alpha allows remote attackers to...CVE-2008-5639Public exploit4.3 MediumDecember 17, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open