cve.nowby Sazabi

CVEs published November 10, 2008

33 CVEs were published on November 10, 2008: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 33
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 33
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 33

CVE-2008-5036Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code…UnratedNov 10, 2008
CVE-2008-4387Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary…UnratedNov 10, 2008
CVE-2008-5029The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself…UnratedNov 10, 2008
CVE-2008-5030Heap-based buffer overflow in the cddb_read_disc_data function in cddb.c in libcdaudio 0.99.12p2 allows remote CDDB servers to execute…UnratedNov 10, 2008
CVE-2008-5031Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large…UnratedNov 10, 2008
CVE-2008-5032Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code…UnratedNov 10, 2008
CVE-2008-5033The chip_command function in drivers/media/video/tvaudio.c in the Linux kernel 2.6.25.x before 2.6.25.19, 2.6.26.x before 2.6.26.7, and…UnratedNov 10, 2008
CVE-2008-5034master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug…UnratedNov 10, 2008
CVE-2008-5035The Resource Monitoring and Control (RMC) daemon in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 and 3.3.0 SP2 allows remote…UnratedNov 10, 2008
CVE-2008-5009Race condition in the s_xout kernel module in Sun Solstice X.25 9.2, when running on a multiple CPU machine, allows local users to cause a…UnratedNov 10, 2008
CVE-2008-5010in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote attackers to cause a denial…UnratedNov 10, 2008
CVE-2008-5011Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allow remote…UnratedNov 10, 2008
CVE-2008-5026Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files…UnratedNov 10, 2008
CVE-2008-5027The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization…UnratedNov 10, 2008
CVE-2008-5028Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to…UnratedNov 10, 2008
CVE-2008-4281Directory traversal vulnerability in VMWare ESXi 3.5 before ESXe350-200810401-O-UG and ESX 3.5 before ESX350-200810201-UG allows…UnratedNov 10, 2008
CVE-2008-4818Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web…UnratedNov 10, 2008
CVE-2008-4819Unspecified vulnerability in Adobe Flash Player 9.0.124.0 and earlier makes it easier for remote attackers to conduct DNS rebinding…UnratedNov 10, 2008
CVE-2008-4820Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to…UnratedNov 10, 2008
CVE-2008-4821Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to…UnratedNov 10, 2008
CVE-2008-4822Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to bypass a non-root…UnratedNov 10, 2008
CVE-2008-4823Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web…UnratedNov 10, 2008
CVE-2008-4831Unspecified vulnerability in Adobe ColdFusion 8 and 8.0.1 and ColdFusion MX 7.0.2 allows local users to bypass sandbox restrictions, and…UnratedNov 10, 2008
CVE-2008-4915The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through…UnratedNov 10, 2008
CVE-2008-5000SQL injection vulnerability in admin/includes/news.inc.php in PHPX 3.5.16, when magic_quotes_gpc is disabled, allows remote attackers to…UnratedNov 10, 2008

Show all 33 entriesShow fewer entries