# CVEs published 2008-03-27

17 CVEs were published on March 27, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1530](https://cve.now/CVE-2008-1530.md): GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted dup (no CVSS)
- [CVE-2008-1531](https://cve.now/CVE-2008-1531.md): The connection\_state\_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0, allows remote attackers to cau (no CVSS)
- [CVE-2008-1150](https://cve.now/CVE-2008-1150.md): The virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (resource (no CVSS)
- [CVE-2008-1151](https://cve.now/CVE-2008-1151.md): Memory leak in the virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2008-1152](https://cve.now/CVE-2008-1152.md): The data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device restart (no CVSS)
- [CVE-2008-1384](https://cve.now/CVE-2008-1384.md): Integer overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service and possibly have unspecified othe (no CVSS)
- [CVE-2008-1391](https://cve.now/CVE-2008-1391.md): Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-depen (no CVSS)
- [CVE-2008-0537](https://cve.now/CVE-2008-0537.md): Unspecified vulnerability in the Supervisor Engine 32 (Sup32), Supervisor Engine 720 (Sup720), and Route Switch Processor 720 (RSP720) for m (no CVSS)
- [CVE-2008-1153](https://cve.now/CVE-2008-1153.md): Cisco IOS 12.1, 12.2, 12.3, and 12.4, with IPv4 UDP services and the IPv6 protocol enabled, allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2008-1156](https://cve.now/CVE-2008-1156.md): Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remo (no CVSS)
- [CVE-2008-1233](https://cve.now/CVE-2008-1233.md): Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attacker (no CVSS)
- [CVE-2008-1234](https://cve.now/CVE-2008-1234.md): Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows (no CVSS)
- [CVE-2008-1235](https://cve.now/CVE-2008-1235.md): Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attacker (no CVSS)
- [CVE-2008-1236](https://cve.now/CVE-2008-1236.md): Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remot (no CVSS)
- [CVE-2008-1237](https://cve.now/CVE-2008-1237.md): Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remot (no CVSS)
- [CVE-2008-1238](https://cve.now/CVE-2008-1238.md): Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it co (no CVSS)
- [CVE-2008-1241](https://cve.now/CVE-2008-1241.md): GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and r (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-03-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
