# CVEs published 2008-11-10

33 CVEs were published on November 10, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5036](https://cve.now/CVE-2008-5036.md): Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code… (no CVSS)
- [CVE-2008-4387](https://cve.now/CVE-2008-4387.md): Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2008-5029](https://cve.now/CVE-2008-5029.md): The \_\_scm\_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself… (no CVSS)
- [CVE-2008-5030](https://cve.now/CVE-2008-5030.md): Heap-based buffer overflow in the cddb\_read\_disc\_data function in cddb.c in libcdaudio 0.99.12p2 allows remote CDDB servers to execute… (no CVSS)
- [CVE-2008-5031](https://cve.now/CVE-2008-5031.md): Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large… (no CVSS)
- [CVE-2008-5032](https://cve.now/CVE-2008-5032.md): Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code… (no CVSS)
- [CVE-2008-5033](https://cve.now/CVE-2008-5033.md): The chip\_command function in drivers/media/video/tvaudio.c in the Linux kernel 2.6.25.x before 2.6.25.19, 2.6.26.x before 2.6.26.7, and… (no CVSS)
- [CVE-2008-5034](https://cve.now/CVE-2008-5034.md): master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug… (no CVSS)
- [CVE-2008-5035](https://cve.now/CVE-2008-5035.md): The Resource Monitoring and Control (RMC) daemon in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 and 3.3.0 SP2 allows remote… (no CVSS)
- [CVE-2008-5009](https://cve.now/CVE-2008-5009.md): Race condition in the s\_xout kernel module in Sun Solstice X.25 9.2, when running on a multiple CPU machine, allows local users to cause a… (no CVSS)
- [CVE-2008-5010](https://cve.now/CVE-2008-5010.md): in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv\_103, allows remote attackers to cause a denial… (no CVSS)
- [CVE-2008-5011](https://cve.now/CVE-2008-5011.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1 before 8.1.0.2 services for Lotus Domino allow remote… (no CVSS)
- [CVE-2008-5026](https://cve.now/CVE-2008-5026.md): Microsoft SharePoint uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files… (no CVSS)
- [CVE-2008-5027](https://cve.now/CVE-2008-5027.md): The Nagios process in (1) Nagios before 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote authenticated users to bypass authorization… (no CVSS)
- [CVE-2008-5028](https://cve.now/CVE-2008-5028.md): Cross-site request forgery (CSRF) vulnerability in cmd.cgi in (1) Nagios 3.0.5 and (2) op5 Monitor before 4.0.1 allows remote attackers to… (no CVSS)
- [CVE-2008-4281](https://cve.now/CVE-2008-4281.md): Directory traversal vulnerability in VMWare ESXi 3.5 before ESXe350-200810401-O-UG and ESX 3.5 before ESX350-200810201-UG allows… (no CVSS)
- [CVE-2008-4818](https://cve.now/CVE-2008-4818.md): Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2008-4819](https://cve.now/CVE-2008-4819.md): Unspecified vulnerability in Adobe Flash Player 9.0.124.0 and earlier makes it easier for remote attackers to conduct DNS rebinding… (no CVSS)
- [CVE-2008-4820](https://cve.now/CVE-2008-4820.md): Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to… (no CVSS)
- [CVE-2008-4821](https://cve.now/CVE-2008-4821.md): Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to… (no CVSS)
- [CVE-2008-4822](https://cve.now/CVE-2008-4822.md): Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to bypass a non-root… (no CVSS)
- [CVE-2008-4823](https://cve.now/CVE-2008-4823.md): Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2008-4831](https://cve.now/CVE-2008-4831.md): Unspecified vulnerability in Adobe ColdFusion 8 and 8.0.1 and ColdFusion MX 7.0.2 allows local users to bypass sandbox restrictions, and… (no CVSS)
- [CVE-2008-4915](https://cve.now/CVE-2008-4915.md): The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through… (no CVSS)
- [CVE-2008-5000](https://cve.now/CVE-2008-5000.md): SQL injection vulnerability in admin/includes/news.inc.php in PHPX 3.5.16, when magic\_quotes\_gpc is disabled, allows remote attackers to… (no CVSS)
- [CVE-2008-5001](https://cve.now/CVE-2008-5001.md): Multiple stack-based buffer overflows in multiple functions in vncviewer/FileTransfer.cpp in vncviewer for UltraVNC 1.0.2 and 1.0.4 before… (no CVSS)
- [CVE-2008-5002](https://cve.now/CVE-2008-5002.md): Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control (ChilkatCrypt2.dll 4.3.2.1) in Chilkat Crypt ActiveX… (no CVSS)
- [CVE-2008-5003](https://cve.now/CVE-2008-5003.md): SQL injection vulnerability in ndetail.php in Shahrood allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2008-5004](https://cve.now/CVE-2008-5004.md): SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2008-5005](https://cve.now/CVE-2008-5005.md): Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine… (no CVSS)
- [CVE-2008-5006](https://cve.now/CVE-2008-5006.md): smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service… (no CVSS)
- [CVE-2008-5007](https://cve.now/CVE-2008-5007.md): create\_lazarus\_export\_tgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a (1)… (no CVSS)
- [CVE-2008-5008](https://cve.now/CVE-2008-5008.md): Buffer overflow in src/src\_sinc.c in Secret Rabbit Code (aka SRC or libsamplerate) before 0.1.4, when "extreme low conversion ratios" are… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-11-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.