Skip to content
OpenAdvisories

Archive

August 2008

Vulnerabilities first published in this month (UTC), newest first.

← July 2008 2008 / August September 2008 →
  1. 122
  2. 2 
  3. 3 
  4. 427
  5. 58
  6. 623
  7. 710
  8. 821
  9. 9 
  10. 1024
  11. 1110
  12. 1226
  13. 1339
  14. 1420
  15. 156
  16. 16 
  17. 17 
  18. 1811
  19. 1913
  20. 2018
  21. 2118
  22. 2210
  23. 23 
  24. 24 
  25. 253
  26. 2611
  27. 2735
  28. 287
  29. 2911
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

373 results · Feed

  • Unscored —
    CVE-2008-3389

    Stack-based buffer overflow in the libbecompat library in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 200…

  • Unscored —
    CVE-2008-3356

    verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and other Uni…

  • High 8.8
    CVE-2008-3431 Exploited Public exploit

    The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communica…

    KEV Mar 3, 2022
  • Unscored —
    CVE-2008-3357

    Untrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 rel…

  • Unscored —
    CVE-2008-3454 Public exploit

    JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by s…

  • Unscored —
    CVE-2008-3459

    Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote ser…

    openvpn Debian
  • Unscored —
    CVE-2008-3455 Public exploit

    PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attack…

  • Unscored —
    CVE-2008-3451

    PhpWebGallery 1.7.0 and 1.7.1 allows remote authenticated users with advisor privileges to obtain the real e-mail addre…

  • Unscored —
    CVE-2008-3453

    Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors, related to modules/admin…

  • Unscored —
    CVE-2008-3458

    Vtiger CRM before 5.0.4 stores sensitive information under the web root with insufficient access control, which allows …

  • Unscored —
    CVE-2008-3456

    phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains…

    phpmyadmin Debian
  • Unscored —
    CVE-2008-3452 Public exploit

    SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-3457

    Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers…

    phpmyadmin Debian
  • Unscored —
    CVE-2008-3450

    Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users to gain privileges…

  • Unscored —
    CVE-2008-3447 Public exploit

    The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop)…

  • Unscored —
    CVE-2008-3448 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in common solutions csphonebook 1.02 allows remote attackers to i…

  • Unscored —
    CVE-2008-3445 Public exploit

    SQL injection vulnerability in index.php in phpMyRealty (PMR) 2.0.0 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2008-3449

    MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service (crash) via multi…

  • Unscored —
    CVE-2008-3446 Public exploit

    Directory traversal vulnerability in inc/wysiwyg.php in LetterIt 2 allows remote attackers to include and execute arbit…

  • Unscored —
    CVE-2004-2760

    sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attem…

    openssh Debian
  • Unscored —
    CVE-2008-3444

    The content layout component in Mozilla Firefox 3.0 and 3.0.1 allows remote attackers to cause a denial of service (NUL…

  • Unscored —
    CVE-2003-1562

    sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication…

    openssh Debian
  • Medium —
    CVE-2008-1232 Public exploit EPSS 76%

    Apache Tomcat Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the Http…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2008-3423

    IBM WebSphere Portal 5.1 through 6.1.0.0 allows remote attackers to bypass authentication and obtain administrative acc…

  • Unscored —
    CVE-2008-2324

    The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file,…

  • Medium —
    CVE-2008-2370 Public exploit EPSS 53%

    Apache Tomcat Path Traversal Vulnerability

    Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attac…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2008-2321 Public exploit EPSS 12%

    Unspecified vulnerability in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-2322

    Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-2325

    QuickLook in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of s…

  • Unscored —
    CVE-2008-2323

    Unspecified vulnerability in Data Detectors Engine in Apple Mac OS X 10.5.4 allows attackers to cause a denial of servi…

  • Unscored —
    CVE-2008-2320

    Stack-based buffer overflow in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.4, iPhone OS 1.0 through 2.2.1, and iPhone…

  • Unscored —
    CVE-2008-1662

    Unspecified vulnerability in the HP System Administration Manager (SAM) on HP-UX B.11.11 and B.11.23, when used to conf…

  • Unscored —
    CVE-2008-1376

    A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrap…

  • Unscored —
    CVE-2008-1810

    Untrusted search path vulnerability in dbmsrv in SAP MaxDB 7.6.03.15 on Linux allows local users to gain privileges via…

  • Unscored —
    CVE-2008-3433

    SpeedBit Download Accelerator Plus (DAP) before 8.6.3.9 does not properly verify the authenticity of updates, which all…

  • Unscored —
    CVE-2008-3143

    Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via…

    python-py Azure Linux
  • Unscored —
    CVE-2008-3434

    Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attacke…

  • Unscored —
    CVE-2008-3440

    Sun Java 1.6.0_03 and earlier versions, and possibly later versions, does not properly verify the authenticity of updat…

  • Unscored —
    CVE-2008-3439

    SpeedBit Video Acceleration before 2.2.1.8 does not properly verify the authenticity of updates, which allows man-in-th…

  • Unscored —
    CVE-2008-3437

    OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle …