# CVEs published 2008-09-09

14 CVEs were published on September 9, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3912](https://cve.now/CVE-2008-3912.md): libclamav in ClamAV before 0.94 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors… (no CVSS)
- [CVE-2008-3913](https://cve.now/CVE-2008-3913.md): Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption)… (no CVSS)
- [CVE-2008-3914](https://cve.now/CVE-2008-3914.md): Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the… (no CVSS)
- [CVE-2008-3915](https://cve.now/CVE-2008-3915.md): Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via… (no CVSS)
- [CVE-2008-3956](https://cve.now/CVE-2008-3956.md): orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or… (no CVSS)
- [CVE-2008-3957](https://cve.now/CVE-2008-3957.md): The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a… (no CVSS)
- [CVE-2008-3958](https://cve.now/CVE-2008-3958.md): IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT/ATTACH data… (no CVSS)
- [CVE-2008-3959](https://cve.now/CVE-2008-3959.md): IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2008-3960](https://cve.now/CVE-2008-3960.md): Unspecified vulnerability in the JDBC Applet Server Service (aka db2jds) in IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to… (no CVSS)
- [CVE-2008-3951](https://cve.now/CVE-2008-3951.md): SQL injection vulnerability in view\_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute… (no CVSS)
- [CVE-2008-3952](https://cve.now/CVE-2008-3952.md): SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the idcat parameter. (no CVSS)
- [CVE-2008-3953](https://cve.now/CVE-2008-3953.md): SQL injection vulnerability in keyword\_search\_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2008-3954](https://cve.now/CVE-2008-3954.md): SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-3955](https://cve.now/CVE-2008-3955.md): SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-09-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.