# CVEs published 2008-03-06

37 CVEs were published on March 6, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1185](https://cve.now/CVE-2008-1185.md): Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and ea (no CVSS)
- [CVE-2008-1186](https://cve.now/CVE-2008-1186.md): Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.2 (no CVSS)
- [CVE-2008-1187](https://cve.now/CVE-2008-1187.md): Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2 (no CVSS)
- [CVE-2008-1188](https://cve.now/CVE-2008-1188.md): Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and (no CVSS)
- [CVE-2008-1189](https://cve.now/CVE-2008-1189.md): Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2\_16 and earlier all (no CVSS)
- [CVE-2008-1190](https://cve.now/CVE-2008-1190.md): Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2\_16 and e (no CVSS)
- [CVE-2008-1191](https://cve.now/CVE-2008-1191.md): Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files via (no CVSS)
- [CVE-2008-1192](https://cve.now/CVE-2008-1192.md): Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4 (no CVSS)
- [CVE-2008-1193](https://cve.now/CVE-2008-1193.md): Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and (no CVSS)
- [CVE-2008-1194](https://cve.now/CVE-2008-1194.md): Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlie (no CVSS)
- [CVE-2008-1195](https://cve.now/CVE-2008-1195.md): Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JR (no CVSS)
- [CVE-2008-1196](https://cve.now/CVE-2008-1196.md): Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK (no CVSS)
- [CVE-2008-1198](https://cve.now/CVE-2008-1198.md): The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, (no CVSS)
- [CVE-2008-1199](https://cve.now/CVE-2008-1199.md): Dovecot before 1.0.11, when configured to use mail\_extra\_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users to (no CVSS)
- [CVE-2008-1200](https://cve.now/CVE-2008-1200.md): Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file, possi (no CVSS)
- [CVE-2003-1546](https://cve.now/CVE-2003-1546.md): Cross-site scripting (XSS) vulnerability in gbook.php in Filebased guestbook 1.1.3 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2003-1547](https://cve.now/CVE-2003-1547.md): Cross-site scripting (XSS) vulnerability in block-Forums.php in the Splatt Forum module for PHP-Nuke 6.x allows remote attackers to inject a (no CVSS)
- [CVE-2003-1548](https://cve.now/CVE-2003-1548.md): MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to obtain sensitive information via an invalid IDAdmin or other parameter, which rev (no CVSS)
- [CVE-2003-1549](https://cve.now/CVE-2003-1549.md): Cross-site scripting (XSS) vulnerability in header.php in MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2003-1550](https://cve.now/CVE-2003-1550.md): XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter, whic (no CVSS)
- [CVE-2008-0072](https://cve.now/CVE-2008-0072.md): Format string vulnerability in the emf\_multipart\_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attack (no CVSS)
- [CVE-2008-0883](https://cve.now/CVE-2008-0883.md): acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files related to SS (no CVSS)
- [CVE-2008-0985](https://cve.now/CVE-2008-0985.md): Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allows remote attackers to (no CVSS)
- [CVE-2008-0986](https://cve.now/CVE-2008-0986.md): Integer overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK m3-rc37a and earlier, and m5-rc14, allows (no CVSS)
- [CVE-2008-1172](https://cve.now/CVE-2008-1172.md): Cross-site request forgery (CSRF) vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certa (no CVSS)
- [CVE-2008-1173](https://cve.now/CVE-2008-1173.md): Cross-site scripting (XSS) vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2008-1174](https://cve.now/CVE-2008-1174.md): Cross-site scripting (XSS) vulnerability in editUser.asp in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-1175](https://cve.now/CVE-2008-1175.md): Cross-site scripting (XSS) vulnerability in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the use (no CVSS)
- [CVE-2008-1176](https://cve.now/CVE-2008-1176.md): Cross-site scripting (XSS) vulnerability in function/sideblock.php in Affiliate Market (affmarket) 0.1 BETA allows remote attackers to injec (no CVSS)
- [CVE-2008-1177](https://cve.now/CVE-2008-1177.md): SQL injection vulnerability in shop/detail.php in Affiliate Market (affmarket) 0.1 BETA allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2008-1178](https://cve.now/CVE-2008-1178.md): Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files v (no CVSS)
- [CVE-2008-1179](https://cve.now/CVE-2008-1179.md): Multiple cross-site scripting (XSS) vulnerabilities in include/common/javascript/color\_picker.php in Centreon 1.4.2.3 and earlier allow remo (no CVSS)
- [CVE-2008-1180](https://cve.now/CVE-2008-1180.md): Cross-site scripting (XSS) vulnerability in dana-na/auth/rdremediate.cgi in Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows re (no CVSS)
- [CVE-2008-1181](https://cve.now/CVE-2008-1181.md): Juniper Networks Secure Access 2000 5.5 R1 (build 11711) allows remote attackers to obtain sensitive information via a direct request for re (no CVSS)
- [CVE-2008-1182](https://cve.now/CVE-2008-1182.md): Cross-site scripting (XSS) vulnerability in BSD Perimeter pfSense before 1.2 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-1183](https://cve.now/CVE-2008-1183.md): Multiple cross-site scripting (XSS) vulnerabilities in Crafty Syntax Live Help (CSLH) before 2.14.6 allow remote attackers to inject arbitra (no CVSS)
- [CVE-2008-1184](https://cve.now/CVE-2008-1184.md): The DNSSEC validation library (libval) library in dnssec-tools before 1.3.1 does not properly check that the signing key is the APEX trust a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-03-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.