# CVEs published 2008-10-10

17 CVEs were published on October 10, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4534](https://cve.now/CVE-2008-4534.md): SQL injection vulnerability in EC-CUBE Ver2 2.1.2a and earlier, and Ver2 RC 2.3.0-rc1 and earlier, allows remote attackers to execute… (no CVSS)
- [CVE-2008-4535](https://cve.now/CVE-2008-4535.md): Cross-site scripting (XSS) vulnerability in EC-CUBE Ver2 2.1.2a and earlier, EC-CUBE Ver2 Beta(RC) 2.2.0-beta and earlier, and EC-CUBE… (no CVSS)
- [CVE-2008-4536](https://cve.now/CVE-2008-4536.md): Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier… (no CVSS)
- [CVE-2008-4537](https://cve.now/CVE-2008-4537.md): Cross-site scripting (XSS) vulnerability in EC-CUBE Ver1 1.4.6 and earlier, Ver1 Beta 1.5.0-beta and earlier, Ver2 2.1.2a and earlier… (no CVSS)
- [CVE-2008-3432](https://cve.now/CVE-2008-3432.md): Heap-based buffer overflow in the mch\_expand\_wildcards function in os\_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute… (no CVSS)
- [CVE-2008-3641](https://cve.now/CVE-2008-3641.md): The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen… (no CVSS)
- [CVE-2008-3642](https://cve.now/CVE-2008-3642.md): Buffer overflow in ColorSync in Mac OS X 10.4.11 and 10.5.5 allows remote attackers to cause a denial of service (application termination)… (no CVSS)
- [CVE-2008-3643](https://cve.now/CVE-2008-3643.md): Unspecified vulnerability in Finder in Mac OS X 10.5.5 allows user-assisted attackers to cause a denial of service (continuous termination… (no CVSS)
- [CVE-2008-3645](https://cve.now/CVE-2008-3645.md): Heap-based buffer overflow in the local IPC component in the EAPOLController plugin for configd (Networking component) in Mac OS X 10.4.11… (no CVSS)
- [CVE-2008-3646](https://cve.now/CVE-2008-3646.md): The Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when mail is sent from a local command-line… (no CVSS)
- [CVE-2008-3647](https://cve.now/CVE-2008-3647.md): Buffer overflow in PSNormalizer in Mac OS X 10.4.11 and 10.5.5 allows remote attackers to cause a denial of service (application… (no CVSS)
- [CVE-2008-4211](https://cve.now/CVE-2008-4211.md): Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS… (no CVSS)
- [CVE-2008-4212](https://cve.now/CVE-2008-4212.md): Unspecified vulnerability in rlogind in the rlogin component in Mac OS X 10.4.11 and 10.5.5 applies hosts.equiv entries to root despite… (no CVSS)
- [CVE-2008-4214](https://cve.now/CVE-2008-4214.md): Unspecified vulnerability in Script Editor in Mac OS X 10.4.11 and 10.5.5 allows local users to cause the scripting dictionary to be… (no CVSS)
- [CVE-2008-4215](https://cve.now/CVE-2008-4215.md): Weblog in Mac OS X Server 10.4.11 does not properly check an error condition when a weblog posting access control list is specified for a… (no CVSS)
- [CVE-2008-4394](https://cve.now/CVE-2008-4394.md): Multiple untrusted search path vulnerabilities in Portage before 2.1.4.5 include the current working directory in the Python search path… (no CVSS)
- [CVE-2008-4533](https://cve.now/CVE-2008-4533.md): Cross-site scripting (XSS) vulnerability in Kantan WEB Server 1.8 and earlier allows remote attackers to inject arbitrary web script or… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-10-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.