# CVEs published 2008-02-04

15 CVEs were published on February 4, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4130](https://cve.now/CVE-2007-4130.md): The Linux kernel 2.6.9 before 2.6.9-67 in Red Hat Enterprise Linux (RHEL) 4 on Itanium (ia64) does not properly handle page faults during NU (no CVSS)
- [CVE-2008-0178](https://cve.now/CVE-2008-0178.md): Cross-site scripting (XSS) vulnerability in the Enterprise Admin Session Monitoring component in Liferay Portal 4.3.6 allows remote authenti (no CVSS)
- [CVE-2008-0179](https://cve.now/CVE-2008-0179.md): Cross-site scripting (XSS) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to inject (no CVSS)
- [CVE-2008-0180](https://cve.now/CVE-2008-0180.md): Cross-site scripting (XSS) vulnerability in themes/\_unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to (no CVSS)
- [CVE-2008-0181](https://cve.now/CVE-2008-0181.md): Cross-site scripting (XSS) vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary (no CVSS)
- [CVE-2008-0182](https://cve.now/CVE-2008-0182.md): Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to per (no CVSS)
- [CVE-2008-0563](https://cve.now/CVE-2008-0563.md): Cross-site request forgery (CSRF) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to (no CVSS)
- [CVE-2007-6699](https://cve.now/CVE-2007-6699.md): Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures (YGP) Picture Editor all (no CVSS)
- [CVE-2008-0386](https://cve.now/CVE-2008-0386.md): Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument t (no CVSS)
- [CVE-2008-0557](https://cve.now/CVE-2008-0557.md): SQL injection vulnerability in index.php in the CatalogShop (com\_catalogshop) 1.0b1 componenent for Mambo and Joomla! allows remote attacker (no CVSS)
- [CVE-2008-0558](https://cve.now/CVE-2008-0558.md): Cross-site scripting (XSS) vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2008-0559](https://cve.now/CVE-2008-0559.md): Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files vi (no CVSS)
- [CVE-2008-0560](https://cve.now/CVE-2008-0560.md): PHP remote file inclusion vulnerability in cforms-css.php in Oliver Seidel cforms (contactforms), a Wordpress plugin, allows remote attacker (no CVSS)
- [CVE-2008-0561](https://cve.now/CVE-2008-0561.md): SQL injection vulnerability in index.php in the Arthur Konze AkoGallery (com\_akogallery) 2.5 beta component for Mambo and Joomla! allows rem (no CVSS)
- [CVE-2008-0562](https://cve.now/CVE-2008-0562.md): SQL injection vulnerability in index.php in the Restaurant (com\_restaurant) 1.0 component for Mambo and Joomla! allows remote attackers to e (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-02-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.