CVEs published October 15, 2008
42 CVEs were published on October 15, 2008: 0 critical, 1 high. Browse them by severity, product and exploitation status.
- Published
- 42
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 40
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- plone
- 1
High 1
Medium, low and unrated 41
- CVE-2008-4583Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll) allows remote attackers to overwrite arbitrary…
- CVE-2008-4584Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files…
- CVE-2008-4585Belong Software Site Builder 0.1 beta allows remote attackers to bypass intended access restrictions and perform administrative actions…
- CVE-2008-4586Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macrovision FLEXnet…
- CVE-2008-4587Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) in…
- CVE-2008-4588Stack-based buffer overflow in the FTP server in Etype Eserv 3.x, possibly 3.26, allows remote attackers to cause a denial of service…
- CVE-2008-4589Heap-based buffer overflow in the tvtumin.sys kernel driver in Lenovo Rescue and Recovery 4.20, including 4.20.0511 and 4.20.0512, allows…
- CVE-2008-4577The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to…
- CVE-2008-4578The ACL plugin in Dovecot before 1.1.4 allows attackers to bypass intended access restrictions by using the "k" right to create…
- CVE-2008-4579The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode…
- CVE-2008-4580fence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink attack on the…
- CVE-2008-4581The Editor in IBM ENOVIA SmarTeam 5 before release 18 SP5, and release 19 before SP01, allows remote authenticated users to bypass…
- CVE-2008-4582Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Windows, do not…
- CVE-2008-4553qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on…
- CVE-2008-4554The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag…
- CVE-2008-4575Buffer overflow in the DoCommand function in jhead before 2.84 might allow context-dependent attackers to cause a denial of service…
- CVE-2008-4576sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that states the peer…
- CVE-2008-4569SQL injection vulnerability in xlacomments.asp in XIGLA Software Absolute Poll Manager XE 4.1 allows remote attackers to execute arbitrary…
- CVE-2008-4570SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat…
- CVE-2008-4571Cross-site scripting (XSS) vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web…plone
- CVE-2008-4572GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute…
- CVE-2008-4573SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL commands via the…
- CVE-2008-4574SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL commands via the linkid…
- CVE-2008-1446Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0…
- CVE-2008-2250The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly…
Show all 41 entriesShow fewer entries
- CVE-2008-2251Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and…
- CVE-2008-2252The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly…
- CVE-2008-3464afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not…
- CVE-2008-3466Microsoft Host Integration Server (HIS) 2000, 2004, and 2006 does not limit RPC access to administrative functions, which allows remote…
- CVE-2008-3471Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3…
- CVE-2008-3472Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote…
- CVE-2008-3473Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote…
- CVE-2008-3474Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote…
- CVE-2008-3475Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml objects that have been…
- CVE-2008-3476Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle errors associated with access to uninitialized memory, which allows…
- CVE-2008-3477Microsoft Excel 2000 SP3, 2002 SP3, and 2003 SP2 and SP3 does not properly validate data in the VBA Performance Cache when processing an…
- CVE-2008-3479Heap-based buffer overflow in the Microsoft Message Queuing (MSMQ) service (mqsvc.exe) in Microsoft Windows 2000 SP4 allows remote…
- CVE-2008-4019Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer…
- CVE-2008-4020Cross-site scripting (XSS) vulnerability in Microsoft Office XP SP3 allows remote attackers to inject arbitrary web script or HTML via a…
- CVE-2008-4023Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote…
- CVE-2008-4038Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote…