cve.nowby Sazabi

CVEs published October 23, 2008

40 CVEs were published on October 23, 2008: 1 critical, 0 high. 1 is now in CISA KEV.

Published: 40
Critical: 1
High: 0
Medium: 0
Low: 0
Unrated: 39
Now in CISA KEV: 1
Fix available: 0

Critical 1

CVE-2008-4250The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta aCritical · 9.8KEVOct 23, 2008

Medium, low and unrated 39

CVE-2008-4726Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbitrary code via a…UnratedOct 23, 2008
CVE-2008-4727Cross-site scripting (XSS) vulnerability in the contact update page (ss/bwgkoemr.P_UpdateEmrgContacts) in SunGard Banner Student 7.3…UnratedOct 23, 2008
CVE-2008-4728Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird…UnratedOct 23, 2008
CVE-2008-4729Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and…UnratedOct 23, 2008
CVE-2007-4349The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP…UnratedOct 23, 2008
CVE-2008-2469Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to…UnratedOct 23, 2008
CVE-2008-3815Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)3, 7.1…UnratedOct 23, 2008
CVE-2008-3816Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2(4)9 and 7.2(4)10 allows…UnratedOct 23, 2008
CVE-2008-3817Memory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 8.0 before 8.0(4) and 8.1 before 8.1(2)…UnratedOct 23, 2008
CVE-2008-3862Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374…UnratedOct 23, 2008
CVE-2008-3863Stack-based buffer overflow in the read_special_escape function in src/psgen.c in GNU Enscript 1.6.1 and 1.6.4 beta, when the -e (aka…UnratedOct 23, 2008
CVE-2008-4694Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash) or execute…UnratedOct 23, 2008
CVE-2008-4695Opera before 9.60 allows remote attackers to obtain sensitive information and have unspecified other impact by predicting the cache…UnratedOct 23, 2008
CVE-2008-4696Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML…UnratedOct 23, 2008
CVE-2008-4697The Fast Forward feature in Opera before 9.61, when a page is located in a frame, executes a javascript: URL in the context of the…UnratedOct 23, 2008
CVE-2008-4698Opera before 9.61 does not properly block scripts during preview of a news feed, which allows remote attackers to create arbitrary new…UnratedOct 23, 2008
CVE-2008-4722Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26 allows remote authenticated users to (1)…UnratedOct 23, 2008
CVE-2008-4723Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 3.0.1 through 3.0.3 allow remote attackers to inject arbitrary web…UnratedOct 23, 2008
CVE-2008-4724Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome 0.2.149.30 allow remote attackers to inject arbitrary web script or…UnratedOct 23, 2008
CVE-2008-4725Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the…UnratedOct 23, 2008
CVE-2008-4716SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL commands via the…UnratedOct 23, 2008
CVE-2008-4717SQL injection vulnerability in bannerclick.php in ZEELYRICS 2.0 allows remote attackers to execute arbitrary SQL commands via the adid…UnratedOct 23, 2008
CVE-2008-4718Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include and execute…UnratedOct 23, 2008
CVE-2008-4719PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when register_globals is enabled…UnratedOct 23, 2008
CVE-2008-4720Multiple PHP remote file inclusion vulnerabilities in The Gemini Portal 4.7 allow remote attackers to execute arbitrary PHP code via a URL…UnratedOct 23, 2008

Show all 39 entriesShow fewer entries