# CVEs published 2008-07-07

57 CVEs were published on July 7, 2008: 1 critical, 0 high. Days are UTC.

- [CVE-2008-1676](https://cve.now/CVE-2008-1676.md): Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server or RHCS) 7.1 through 7.3, and Netscape Cer (no CVSS)
- [CVE-2008-2371](https://cve.now/CVE-2008-2371.md): Heap-based buffer overflow in pcre\_compile.c in the Perl-Compatible Regular Expression (PCRE) library 7.7 allows context-dependent attackers (no CVSS)
- [CVE-2008-2374](https://cve.now/CVE-2008-2374.md): src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string lengt (CVSS 9.8)
- [CVE-2008-2430](https://cve.now/CVE-2008-2430.md): Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitr (no CVSS)
- [CVE-2008-2463](https://cve.now/CVE-2008-2463.md): The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Micro (no CVSS)
- [CVE-2008-2667](https://cve.now/CVE-2008-2667.md): SQL injection vulnerability in the Courier Authentication Library (aka courier-authlib) before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and ot (no CVSS)
- [CVE-2008-2798](https://cve.now/CVE-2008-2798.md): Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow (no CVSS)
- [CVE-2008-2799](https://cve.now/CVE-2008-2799.md): Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow (no CVSS)
- [CVE-2008-2800](https://cve.now/CVE-2008-2800.md): Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to bypass the Same Origin Policy and conduct cross-site s (no CVSS)
- [CVE-2008-2801](https://cve.now/CVE-2008-2801.md): Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote attackers to execute (no CVSS)
- [CVE-2008-2802](https://cve.now/CVE-2008-2802.md): Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to execute arbitrary c (no CVSS)
- [CVE-2008-2803](https://cve.now/CVE-2008-2803.md): The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1 (no CVSS)
- [CVE-2008-2805](https://cve.now/CVE-2008-2805.md): Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary local files from a clien (no CVSS)
- [CVE-2008-2806](https://cve.now/CVE-2008-2806.md): Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 on Mac OS X allow remote attackers to bypass the Same Origin Policy and create a (no CVSS)
- [CVE-2008-2807](https://cve.now/CVE-2008-2807.md): Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an add-on, which allows r (no CVSS)
- [CVE-2008-2808](https://cve.now/CVE-2008-2808.md): Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows (no CVSS)
- [CVE-2008-2810](https://cve.now/CVE-2008-2810.md): Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut files, which allows use (no CVSS)
- [CVE-2008-2811](https://cve.now/CVE-2008-2811.md): The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allows rem (no CVSS)
- [CVE-2008-2927](https://cve.now/CVE-2008-2927.md): Multiple integer overflows in the msn\_slplink\_process\_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (no CVSS)
- [CVE-2008-2950](https://cve.now/CVE-2008-2950.md): The Page destructor in Page.cc in libpoppler in Poppler 0.8.4 and earlier deletes a pageWidgets object even if it is not initialized by a Pa (no CVSS)
- [CVE-2008-3067](https://cve.now/CVE-2008-3067.md): sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password (no CVSS)
- [CVE-2008-3068](https://cve.now/CVE-2008-3068.md): Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation Li (no CVSS)
- [CVE-2008-3025](https://cve.now/CVE-2008-3025.md): SQL injection vulnerability in ad.php in plx Ad Trader 3.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter (no CVSS)
- [CVE-2008-3026](https://cve.now/CVE-2008-3026.md): SQL injection vulnerability in index.php in OneClick CMS (aka Sisplet CMS) 2008-01-24 allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2008-3027](https://cve.now/CVE-2008-3027.md): SQL injection vulnerability in get\_article.php in VanGogh Web CMS 0.9 allows remote attackers to execute arbitrary SQL commands via the arti (no CVSS)
- [CVE-2008-3028](https://cve.now/CVE-2008-3028.md): Multiple cross-site scripting (XSS) vulnerabilities in the Send-A-Card (sr\_sendcard) extension 2.2.2 and earlier for TYPO3 allow remote atta (no CVSS)
- [CVE-2008-3029](https://cve.now/CVE-2008-3029.md): Cross-site scripting (XSS) vulnerability in the WEC Discussion Forum (wec\_discussion) extension 1.6.2 and earlier for TYPO3 allows remote at (no CVSS)
- [CVE-2008-3030](https://cve.now/CVE-2008-3030.md): SQL injection vulnerability in default.asp in EfesTECH Shop 2.0 allows remote attackers to execute arbitrary SQL commands via the cat\_id par (no CVSS)
- [CVE-2008-3031](https://cve.now/CVE-2008-3031.md): Directory traversal vulnerability in index.php in Simple PHP Agenda 2.2.4 and earlier allows remote attackers to include and execute arbitra (no CVSS)
- [CVE-2008-3032](https://cve.now/CVE-2008-3032.md): Cross-site scripting (XSS) vulnerability in the phpMyAdmin (phpmyadmin) extension 3.0.1 and earlier for TYPO3 allows remote attackers to inj (no CVSS, mehrwert/phpmyadmin)
- [CVE-2008-3033](https://cve.now/CVE-2008-3033.md): RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remote attackers to acces (no CVSS)
- [CVE-2008-3034](https://cve.now/CVE-2008-3034.md): Multiple SQL injection vulnerabilities in RSS-aggregator 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) IdFlux par (no CVSS)
- [CVE-2008-3035](https://cve.now/CVE-2008-3035.md): SQL injection vulnerability in newThread.php in XchangeBoard 1.70 Final and earlier allows remote authenticated users to execute arbitrary S (no CVSS)
- [CVE-2008-3036](https://cve.now/CVE-2008-3036.md): Directory traversal vulnerability in index.php in CMS little 0.0.1 allows remote attackers to include and execute arbitrary local files, and (no CVSS)
- [CVE-2008-3037](https://cve.now/CVE-2008-3037.md): Cross-site scripting (XSS) vulnerability in the Address Directory (sp\_directory) extension 0.2.10 and earlier for TYPO3 allows remote attack (no CVSS)
- [CVE-2008-3038](https://cve.now/CVE-2008-3038.md): SQL injection vulnerability in the Address Directory (sp\_directory) extension 0.2.10 and earlier for TYPO3 allows remote attackers to execut (no CVSS)
- [CVE-2008-3039](https://cve.now/CVE-2008-3039.md): SQL injection vulnerability in the DAM Frontend (dam\_frontend) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbi (no CVSS)
- [CVE-2008-3040](https://cve.now/CVE-2008-3040.md): Unspecified vulnerability in the DAM Frontend (dam\_frontend) extension 0.1.0 and earlier for TYPO3 allows remote attackers to obtain sensiti (no CVSS)
- [CVE-2008-3041](https://cve.now/CVE-2008-3041.md): Unspecified vulnerability in the DAM Frontend (dam\_frontend) extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors rel (no CVSS)
- [CVE-2008-3042](https://cve.now/CVE-2008-3042.md): Unspecified vulnerability in the DAM Frontend (dam\_frontend) extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors rel (no CVSS)
- [CVE-2008-3043](https://cve.now/CVE-2008-3043.md): Unspecified vulnerability in the WEC Discussion Forum (wec\_discussion) extension 1.6.2 and earlier for TYPO3 allows attackers to execute arb (no CVSS)
- [CVE-2008-3044](https://cve.now/CVE-2008-3044.md): SQL injection vulnerability in the News Calendar (newscalendar) extension 1.0.7 and earlier for TYPO3 allows remote attackers to execute arb (no CVSS)
- [CVE-2008-3045](https://cve.now/CVE-2008-3045.md): Unspecified vulnerability in the Industry Database (aka Branchendatenbank pro\_industrydb) extension 1.0.0 and earlier for TYPO3 has unknown (no CVSS)
- [CVE-2008-3046](https://cve.now/CVE-2008-3046.md): Incomplete blacklist vulnerability in the Packman (kb\_packman) extension 0.2.1 and earlier for TYPO3 has unknown impact and attack vectors. (no CVSS)
- [CVE-2008-3047](https://cve.now/CVE-2008-3047.md): Incomplete blacklist vulnerability in the KB Unpack (kb\_unpack) extension 0.1.0 and earlier for TYPO3 has unknown impact and attack vectors. (no CVSS)
- [CVE-2008-3048](https://cve.now/CVE-2008-3048.md): Unspecified vulnerability in the PDF Generator 2 (pdf\_generator2) extension 0.5.0 and earlier for TYPO3 has unknown impact and attack vector (no CVSS)
- [CVE-2008-3049](https://cve.now/CVE-2008-3049.md): The PDF Generator 2 (pdf\_generator2) extension 0.5.0 and earlier for TYPO3 allows attackers to obtain sensitive information via unspecified (no CVSS)
- [CVE-2008-3050](https://cve.now/CVE-2008-3050.md): Unspecified vulnerability in the PDF Generator 2 (pdf\_generator2) extension 0.5.0 and earlier for TYPO3 allows attackers to cause a denial o (no CVSS)
- [CVE-2008-3051](https://cve.now/CVE-2008-3051.md): SQL injection vulnerability in the Pinboard extension 0.0.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-3052](https://cve.now/CVE-2008-3052.md): Unspecified vulnerability in the SQL Frontend (mh\_omsqlio) extension 1.0.11 and earlier for TYPO3 allows remote attackers to cause a denial (no CVSS)
- [CVE-2008-3053](https://cve.now/CVE-2008-3053.md): SQL injection vulnerability in the SQL Frontend (mh\_omsqlio) extension 1.0.11 and earlier for TYPO3 allows remote attackers to execute arbit (no CVSS)
- [CVE-2008-3054](https://cve.now/CVE-2008-3054.md): SQL injection vulnerability in the Branchenbuch (aka Yellow Pages o (mh\_branchenbuch) extension 0.8.1 and earlier for TYPO3 allows remote at (no CVSS)
- [CVE-2008-3055](https://cve.now/CVE-2008-3055.md): SQL injection vulnerability in the Support view (ext\_tbl) extension 0.0.102 and earlier for TYPO3 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2008-3056](https://cve.now/CVE-2008-3056.md): SQL injection vulnerability in the Codeon Petition (cd\_petition) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute ar (no CVSS)
- [CVE-2008-3022](https://cve.now/CVE-2008-3022.md): Multiple PHP remote file inclusion vulnerabilities in sablonlar/gunaysoft/gunaysoft.php in PHPortal 1.2 Beta allow remote attackers to execu (no CVSS)
- [CVE-2008-3023](https://cve.now/CVE-2008-3023.md): Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet (no CVSS)
- [CVE-2008-3024](https://cve.now/CVE-2008-3024.md): Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal f (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-07-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.