cve.nowby Sazabi

CVEs published August 4, 2008

27 CVEs were published on August 4, 2008: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 27
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 27
Now in CISA KEV: 0
Fix available: 2

Most affected products

org.apache.tomcat:tomcat: 2

Medium, low and unrated 27

CVE-2008-3451PhpWebGallery 1.7.0 and 1.7.1 allows remote authenticated users with advisor privileges to obtain the real e-mail addresses of other users…UnratedAug 4, 2008
CVE-2008-3452SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the…UnratedAug 4, 2008
CVE-2008-3453Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors, related to modules/admin.php and "a few…UnratedAug 4, 2008
CVE-2008-3454JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the "adm"…UnratedAug 4, 2008
CVE-2008-3455PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attackers to execute…UnratedAug 4, 2008
CVE-2008-3456phpMyAdmin before 2.11.8 does not sufficiently prevent its pages from using frames that point to pages in other domains, which makes it…UnratedAug 4, 2008
CVE-2008-3457Cross-site scripting (XSS) vulnerability in setup.php in phpMyAdmin before 2.11.8 allows user-assisted remote attackers to inject…UnratedAug 4, 2008
CVE-2008-3458Vtiger CRM before 5.0.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to…UnratedAug 4, 2008
CVE-2008-3459Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute…UnratedAug 4, 2008
CVE-2008-3450Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users to gain privileges or cause a denial…UnratedAug 4, 2008
CVE-2008-3445SQL injection vulnerability in index.php in phpMyRealty (PMR) 2.0.0 allows remote attackers to execute arbitrary SQL commands via the…UnratedAug 4, 2008
CVE-2008-3446Directory traversal vulnerability in inc/wysiwyg.php in LetterIt 2 allows remote attackers to include and execute arbitrary local files…UnratedAug 4, 2008
CVE-2008-3447The scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of service (infinite loop) via a malformed…UnratedAug 4, 2008
CVE-2008-3448Cross-site scripting (XSS) vulnerability in index.php in common solutions csphonebook 1.02 allows remote attackers to inject arbitrary web…UnratedAug 4, 2008
CVE-2008-3449MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service (crash) via multiple IMAP connection…UnratedAug 4, 2008
CVE-2003-1562sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a…UnratedAug 4, 2008
CVE-2004-2760sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attempt with the correct…UnratedAug 4, 2008
CVE-2008-3444The content layout component in Mozilla Firefox 3.0 and 3.0.1 allows remote attackers to cause a denial of service (NULL pointer…UnratedAug 4, 2008
CVE-2008-1232Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows…org.apache.tomcat:tomcatUnratedFix availableAug 4, 2008
CVE-2008-2320Stack-based buffer overflow in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.4, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch…UnratedAug 4, 2008
CVE-2008-2321Unspecified vulnerability in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause…UnratedAug 4, 2008
CVE-2008-2322Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote attackers to execute arbitrary code or cause…UnratedAug 4, 2008
CVE-2008-2323Unspecified vulnerability in Data Detectors Engine in Apple Mac OS X 10.5.4 allows attackers to cause a denial of service (resource…UnratedAug 4, 2008
CVE-2008-2324The Repair Permissions tool in Disk Utility in Apple Mac OS X 10.4.11 adds the setuid bit to the emacs executable file, which allows local…UnratedAug 4, 2008
CVE-2008-2325QuickLook in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory…UnratedAug 4, 2008

Show all 27 entriesShow fewer entries