cve.nowby Sazabi

CVEs published June 3, 2008

27 CVEs were published on June 3, 2008: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 27
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 27
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 27

CVE-2008-1035Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger…UnratedJun 3, 2008
CVE-2008-0169Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and…UnratedJun 3, 2008
CVE-2008-2520Multiple PHP remote file inclusion vulnerabilities in BigACE 2.4, when register_globals is enabled, allow remote attackers to execute…UnratedJun 3, 2008
CVE-2008-2521SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script (aka MFH or MFHS) 1.2 allows remote authenticated users to…UnratedJun 3, 2008
CVE-2008-2522SQL injection vulnerability in members.php in Battle.net Clan Script for PHP 1.5.3 and earlier, when magic_quotes_gpc is disabled, allows…UnratedJun 3, 2008
CVE-2008-2523SQL injection vulnerability in the Autopatcher server plugin in RakNet before 3.23 allows remote attackers to execute arbitrary SQL…UnratedJun 3, 2008
CVE-2008-2524BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified…UnratedJun 3, 2008
CVE-2008-2525Cross-site scripting (XSS) vulnerability in the Event Database (aka rlmp_eventdb) extension before 1.1.2 for TYPO3 allows remote attackers…UnratedJun 3, 2008
CVE-2008-2526Cross-site scripting (XSS) vulnerability in the WT Gallery (aka wt_gallery) extension 2.6.2 and earlier for TYPO3 allows remote attackers…UnratedJun 3, 2008
CVE-2008-2527Cross-site scripting (XSS) vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and…UnratedJun 3, 2008
CVE-2008-2528Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows…UnratedJun 3, 2008
CVE-2008-2529SQL injection vulnerability in read.php in Advanced Links Management (ALM) 1.5.2 allows remote attackers to execute arbitrary SQL commands…UnratedJun 3, 2008
CVE-2008-2530Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the…UnratedJun 3, 2008
CVE-2008-2531Cross-site scripting (XSS) vulnerability in the search script in Build A Niche Store (BANS) 3.0 allows remote attackers to inject…UnratedJun 3, 2008
CVE-2008-2532SQL injection vulnerability in forum/topic_detail.php in AJ Square aj-hyip (aka AJ HYIP Acme) allows remote attackers to execute arbitrary…UnratedJun 3, 2008
CVE-2008-2533Multiple cross-site scripting (XSS) vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary…UnratedJun 3, 2008
CVE-2008-2534Directory traversal vulnerability in admin/admin_frame.php in Phoenix View CMS Pre Alpha2 and earlier allows remote attackers to include…UnratedJun 3, 2008
CVE-2008-2535Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbitrary SQL commands…UnratedJun 3, 2008
CVE-2008-2536SQL injection vulnerability in out.php in YABSoft Advanced Image Hosting (AIH) Script 2.1 and earlier allows remote attackers to execute…UnratedJun 3, 2008
CVE-2008-2537SQL injection vulnerability in cat.php in HispaH Model Search allows remote attackers to execute arbitrary SQL commands via the cat…UnratedJun 3, 2008
CVE-2008-2538Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv_93, allows local users to insert cron jobs…UnratedJun 3, 2008
CVE-2008-2539The Sun Cluster Global File System in Sun Cluster 3.1 on Sun Solaris 8 through 10, when an underlying ufs filesystem is used, might allow…UnratedJun 3, 2008
CVE-2008-2540Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized…UnratedJun 3, 2008
CVE-2008-2516pam_sm_authenticate in pam_pgsql.c in libpam-pgsql 0.6.3 does not properly consider operator precedence when evaluating the success of a…UnratedJun 3, 2008
CVE-2008-2517The sarab.sh script in SaraB before 0.2.4 places the dar program's encryption key on the command line, which allows local users to obtain…UnratedJun 3, 2008

Show all 27 entriesShow fewer entries