# CVEs published 2008-08-08 21 CVEs were published on August 8, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-1664](https://cve.now/CVE-2008-1664.md): Unspecified vulnerability in libc on HP HP-UX B.11.23 and B.11.31 allows remote attackers to cause a denial of service via unknown vectors. (no CVSS) - [CVE-2008-1945](https://cve.now/CVE-2008-1945.md): QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by… (no CVSS) - [CVE-2008-2377](https://cve.now/CVE-2008-2377.md): Use-after-free vulnerability in the \_gnutls\_handshake\_hash\_buffers\_clear function in lib/gnutls\_handshake.c in libgnutls in GnuTLS 2.3.5… (no CVSS) - [CVE-2008-3337](https://cve.now/CVE-2008-3337.md): PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS… (no CVSS) - [CVE-2008-3532](https://cve.now/CVE-2008-3532.md): The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user… (no CVSS) - [CVE-2008-3534](https://cve.now/CVE-2008-3534.md): The shmem\_delete\_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows local users to cause… (no CVSS) - [CVE-2008-3535](https://cve.now/CVE-2008-3535.md): Off-by-one error in the iov\_iter\_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a… (no CVSS) - [CVE-2008-3550](https://cve.now/CVE-2008-3550.md): The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information (page source… (no CVSS) - [CVE-2008-3551](https://cve.now/CVE-2008-3551.md): Multiple unspecified vulnerabilities in Sun Java Platform Micro Edition (aka Java ME, J2ME, or mobile Java), as distributed in Sun… (no CVSS) - [CVE-2008-3552](https://cve.now/CVE-2008-3552.md): Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition FP1, and possibly later devices, allow remote attackers to execute… (no CVSS) - [CVE-2008-3553](https://cve.now/CVE-2008-3553.md): Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition devices allow remote attackers to execute arbitrary code via unknown… (no CVSS) - [CVE-2008-3554](https://cve.now/CVE-2008-3554.md): SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via the searchid… (no CVSS) - [CVE-2008-3555](https://cve.now/CVE-2008-3555.md): Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3) Knowledge Base… (no CVSS) - [CVE-2008-3556](https://cve.now/CVE-2008-3556.md): Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2008-3557](https://cve.now/CVE-2008-3557.md): Free Hosting Manager 1.2 and 2.0 allows remote attackers to bypass authentication and gain administrative access by setting both the… (no CVSS) - [CVE-2008-3558](https://cve.now/CVE-2008-3558.md): Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919… (no CVSS) - [CVE-2008-3559](https://cve.now/CVE-2008-3559.md): Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web script or HTML via… (no CVSS) - [CVE-2008-3560](https://cve.now/CVE-2008-3560.md): Cross-site scripting (XSS) vulnerability in kshop\_search.php in the Kshop module 2.22 for Xoops allows remote attackers to inject… (no CVSS) - [CVE-2008-0964](https://cve.now/CVE-2008-0964.md): Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv\_96, when the -o option is omitted… (no CVSS) - [CVE-2008-0965](https://cve.now/CVE-2008-0965.md): Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv\_96, when the -o option is omitted… (no CVSS) - [CVE-2008-3272](https://cve.now/CVE-2008-3272.md): The snd\_seq\_oss\_synth\_make\_info function in sound/core/seq/oss/seq\_oss\_synth.c in the sound subsystem in the Linux kernel before… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2008-08-08 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.