# CVEs published 2008-03-19

15 CVEs were published on March 19, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0062](https://cve.now/CVE-2008-0062.md): KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial (no CVSS)
- [CVE-2008-0063](https://cve.now/CVE-2008-0063.md): The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused portion of a buffer when generating an error me (no CVSS)
- [CVE-2008-0947](https://cve.now/CVE-2008-0947.md): Buffer overflow in the RPC library used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.4 through 1.6.3 allows remote attackers to execu (no CVSS)
- [CVE-2008-0948](https://cve.now/CVE-2008-0948.md): Buffer overflow in the RPC library (lib/rpc/rpc\_dtablesize.c) used by libgssrpc and kadmind in MIT Kerberos 5 (krb5) 1.2.2, and probably oth (no CVSS)
- [CVE-2008-1001](https://cve.now/CVE-2008-1001.md): Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1, when running on Windows XP or Vista, allows remote attackers to inject (no CVSS)
- [CVE-2008-1002](https://cve.now/CVE-2008-1002.md): Cross-site scripting (XSS) vulnerability in Apple Safari before 3.1 allows remote attackers to inject arbitrary web script or HTML via a cra (no CVSS)
- [CVE-2008-1003](https://cve.now/CVE-2008-1003.md): Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2008-1004](https://cve.now/CVE-2008-1004.md): Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2008-1005](https://cve.now/CVE-2008-1005.md): WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri inpu (no CVSS)
- [CVE-2008-1006](https://cve.now/CVE-2008-1006.md): Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2008-1007](https://cve.now/CVE-2008-1007.md): WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to (no CVSS)
- [CVE-2008-1008](https://cve.now/CVE-2008-1008.md): Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2008-1009](https://cve.now/CVE-2008-1009.md): Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary JavaScr (no CVSS)
- [CVE-2008-1010](https://cve.now/CVE-2008-1010.md): Buffer overflow in WebKit, as used in Apple Safari before 3.1, allows remote attackers to execute arbitrary code via crafted regular express (no CVSS)
- [CVE-2008-1011](https://cve.now/CVE-2008-1011.md): Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web scri (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-03-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.