# CVEs published 2008-03-31

37 CVEs were published on March 31, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0211](https://cve.now/CVE-2008-0211.md): Unspecified vulnerability in the BIOS F.04 through F.11 for the HP Compaq Business Notebook PC allows local users to cause a denial of servi (no CVSS)
- [CVE-2008-0706](https://cve.now/CVE-2008-0706.md): Unspecified vulnerability in the BIOS F.26 and earlier for the HP Compaq Notebook PC allows physically proximate attackers to obtain privile (no CVSS)
- [CVE-2008-1591](https://cve.now/CVE-2008-1591.md): The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magic\_quotes\_runtime is enabled, which allows rem (no CVSS)
- [CVE-2008-1592](https://cve.now/CVE-2008-1592.md): MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for exec (no CVSS)
- [CVE-2008-1593](https://cve.now/CVE-2008-1593.md): The checkpoint and restart feature in the kernel in IBM AIX 5.2, 5.3, and 6.1 does not properly protect kernel memory, which allows local us (no CVSS)
- [CVE-2008-1594](https://cve.now/CVE-2008-1594.md): The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple node (no CVSS)
- [CVE-2008-1595](https://cve.now/CVE-2008-1595.md): The proc filesystem in the kernel in IBM AIX 5.2 and 5.3 does not properly enforce directory permissions when a file executing from a direct (no CVSS)
- [CVE-2008-1596](https://cve.now/CVE-2008-1596.md): Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk\_block\_write function, which might allow local (no CVSS)
- [CVE-2008-1597](https://cve.now/CVE-2008-1597.md): The WPAR system call implementation in the kernel in IBM AIX 6.1 allows local users to cause a denial of service via unknown calls that trig (no CVSS)
- [CVE-2008-1598](https://cve.now/CVE-2008-1598.md): The kernel in IBM AIX 6.1 allows local users with ProbeVue privileges to read arbitrary kernel memory and obtain sensitive information via u (no CVSS)
- [CVE-2008-1599](https://cve.now/CVE-2008-1599.md): The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges (no CVSS)
- [CVE-2008-1600](https://cve.now/CVE-2008-1600.md): The lsmcode program on IBM AIX 5.2, 5.3, and 6.1 does not properly handle environment variables, which allows local users to gain privileges (no CVSS)
- [CVE-2008-1601](https://cve.now/CVE-2008-1601.md): Stack-based buffer overflow in the reboot program on IBM AIX 5.2 and 5.3 allows local users in the shutdown group to gain privileges. (no CVSS)
- [CVE-2008-1560](https://cve.now/CVE-2008-1560.md): Multiple cross-site scripting (XSS) vulnerabilities in Digiappz DigiDomain 2.2 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-1561](https://cve.now/CVE-2008-1561.md): Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) 0.99.5 through 0.99.8 allow remote attackers to cause a denial of serv (no CVSS)
- [CVE-2008-1562](https://cve.now/CVE-2008-1562.md): The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application (no CVSS)
- [CVE-2008-1563](https://cve.now/CVE-2008-1563.md): The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 allows remote attacke (no CVSS)
- [CVE-2008-1564](https://cve.now/CVE-2008-1564.md): Directory traversal vulnerability in Dan Costin File Transfer before 1.2f allows remote attackers to read arbitrary files via a "..\\" (dot d (no CVSS)
- [CVE-2008-1565](https://cve.now/CVE-2008-1565.md): Directory traversal vulnerability in forum/irc/irc.php in the PJIRC 0.5 module for phpBB allows remote attackers to include and execute arbi (no CVSS)
- [CVE-2008-1566](https://cve.now/CVE-2008-1566.md): Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine Applications Manager 8.x allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2008-1567](https://cve.now/CVE-2008-1567.md): phpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish secret key, in cleartext in a Session file u (no CVSS)
- [CVE-2008-1568](https://cve.now/CVE-2008-1568.md): comix 3.6.4 allows attackers to execute arbitrary commands via a filename containing shell metacharacters that are not properly sanitized wh (no CVSS)
- [CVE-2008-1569](https://cve.now/CVE-2008-1569.md): policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files tha (no CVSS)
- [CVE-2008-1570](https://cve.now/CVE-2008-1570.md): Race condition in the create\_lockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by cr (no CVSS)
- [CVE-2008-0070](https://cve.now/CVE-2008-0070.md): Integer overflow in Orb Networks Orb 2.00.1014 and Winamp Remote BETA allows remote attackers to execute arbitrary code via an RPC request t (no CVSS)
- [CVE-2008-1548](https://cve.now/CVE-2008-1548.md): Multiple cross-site scripting (XSS) vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle Software Aries Student Information S (no CVSS)
- [CVE-2008-1549](https://cve.now/CVE-2008-1549.md): Multiple SQL injection vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle Software Aries Student Information System allow r (no CVSS)
- [CVE-2008-1550](https://cve.now/CVE-2008-1550.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in CubeCart 4.2.1 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-1551](https://cve.now/CVE-2008-1551.md): SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-1552](https://cve.now/CVE-2008-1552.md): The silc\_pkcs1\_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC (no CVSS)
- [CVE-2008-1553](https://cve.now/CVE-2008-1553.md): Directory traversal vulnerability in mod.php in TopperMod 1.0 allows remote attackers to include and execute arbitrary local files via a .. (no CVSS)
- [CVE-2008-1554](https://cve.now/CVE-2008-1554.md): SQL injection vulnerability in account/index.php in TopperMod 2.0, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arb (no CVSS)
- [CVE-2008-1555](https://cve.now/CVE-2008-1555.md): Directory traversal vulnerability in system/\_b/contentFiles/gbincluder.php in BolinOS 4.6.1 allows remote attackers to include and execute a (no CVSS)
- [CVE-2008-1556](https://cve.now/CVE-2008-1556.md): Multiple cross-site scripting (XSS) vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web script or HTML via the ( (no CVSS)
- [CVE-2008-1557](https://cve.now/CVE-2008-1557.md): BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/\_b/contentFiles/gBphpInfo. (no CVSS)
- [CVE-2008-1558](https://cve.now/CVE-2008-1558.md): Uncontrolled array index in the sdpplin\_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite (no CVSS)
- [CVE-2008-1559](https://cve.now/CVE-2008-1559.md): SQL injection vulnerability in the Bernard Gilly AlphaContent (com\_alphacontent) 2.5.8 component for Joomla! allows remote attackers to exec (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-03-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.