# CVEs published 2008-07-09

43 CVEs were published on July 9, 2008: 1 critical, 0 high. Days are UTC.

- [CVE-2008-3103](https://cve.now/CVE-2008-3103.md): Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Up (no CVSS)
- [CVE-2008-3104](https://cve.now/CVE-2008-3104.md): Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 1 (no CVSS)
- [CVE-2008-3105](https://cve.now/CVE-2008-3105.md): Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allow (no CVSS)
- [CVE-2008-3106](https://cve.now/CVE-2008-3106.md): Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earl (no CVSS)
- [CVE-2008-3107](https://cve.now/CVE-2008-3107.md): Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 bef (no CVSS)
- [CVE-2008-3108](https://cve.now/CVE-2008-3108.md): Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2\_18, and SDK and JR (no CVSS)
- [CVE-2008-3109](https://cve.now/CVE-2008-3109.md): Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows c (no CVSS)
- [CVE-2008-3110](https://cve.now/CVE-2008-3110.md): Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows r (no CVSS)
- [CVE-2008-3111](https://cve.now/CVE-2008-3111.md): Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x be (no CVSS)
- [CVE-2008-3112](https://cve.now/CVE-2008-3112.md): Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE (no CVSS)
- [CVE-2008-3113](https://cve.now/CVE-2008-3113.md): Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2\_18 allows remote atta (no CVSS)
- [CVE-2008-3114](https://cve.now/CVE-2008-3114.md): Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x be (no CVSS)
- [CVE-2008-3115](https://cve.now/CVE-2008-3115.md): Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of (no CVSS)
- [CVE-2008-2244](https://cve.now/CVE-2008-2244.md): Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited (no CVSS)
- [CVE-2008-3087](https://cve.now/CVE-2008-3087.md): Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-3088](https://cve.now/CVE-2008-3088.md): Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2008-3089](https://cve.now/CVE-2008-3089.md): SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2008-3090](https://cve.now/CVE-2008-3090.md): Multiple SQL injection vulnerabilities in index.php in BlognPlus (BURO GUN +) 2.5.5 MySQL and PostgreSQL editions allow remote attackers to (no CVSS)
- [CVE-2008-3091](https://cve.now/CVE-2008-3091.md): Cross-site scripting (XSS) vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, (no CVSS)
- [CVE-2008-3092](https://cve.now/CVE-2008-3092.md): SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated users, with create o (no CVSS)
- [CVE-2008-3093](https://cve.now/CVE-2008-3093.md): Unrestricted file upload vulnerability in ImperialBB 2.3.5 and earlier allows remote authenticated users to upload and execute arbitrary PHP (no CVSS)
- [CVE-2008-3094](https://cve.now/CVE-2008-3094.md): The Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote attackers to obtain sensiti (no CVSS)
- [CVE-2008-3095](https://cve.now/CVE-2008-3095.md): Cross-site scripting (XSS) vulnerability in the Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupa (no CVSS)
- [CVE-2008-3096](https://cve.now/CVE-2008-3096.md): The Outline Designer module 5.x before 5.x-1.4 for Drupal changes each content reader's authentication level to match that of the content au (no CVSS)
- [CVE-2008-3097](https://cve.now/CVE-2008-3097.md): Cross-site scripting (XSS) vulnerability in the Tinytax module (aka Tinytax taxonomy block) 5.x before 5.x-1.10-1 for Drupal allows remote a (no CVSS)
- [CVE-2008-2931](https://cve.now/CVE-2008-2931.md): The do\_change\_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP\_SYS\_ADMIN capabi (no CVSS)
- [CVE-2008-2991](https://cve.now/CVE-2008-2991.md): Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary web script or HTML via (CVSS 6.1)
- [CVE-2007-1899](https://cve.now/CVE-2007-1899.md): Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL commands via (1) the use (no CVSS)
- [CVE-2007-3650](https://cve.now/CVE-2007-3650.md): myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to calendar.php, reached (CVSS 5.3)
- [CVE-2007-3651](https://cve.now/CVE-2007-3651.md): class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to obtain sensitive information via a '; (quote semicolon) (CVSS 5.3)
- [CVE-2007-3652](https://cve.now/CVE-2007-3652.md): SQL injection vulnerability in class/page.php in Farsi Script (aka FaScript) FaName 1.0 allows remote attackers to execute arbitrary SQL com (CVSS 9.8)
- [CVE-2007-3653](https://cve.now/CVE-2007-3653.md): Multiple cross-site scripting (XSS) vulnerabilities in Farsi Script (aka FaScript) FaName 1.0 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2008-1663](https://cve.now/CVE-2008-1663.md): Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) 2.1.10 and 2.1.11 on Linux and Windows allows remote attacke (no CVSS)
- [CVE-2008-2375](https://cve.now/CVE-2008-2375.md): Memory leak in a certain Red Hat deployment of vsftpd before 2.0.5 on Red Hat Enterprise Linux (RHEL) 3 and 4, when PAM is used, allows remo (no CVSS)
- [CVE-2008-2376](https://cve.now/CVE-2008-2376.md): Integer overflow in the rb\_ary\_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial o (no CVSS)
- [CVE-2008-2812](https://cve.now/CVE-2008-2812.md): The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system cr (no CVSS)
- [CVE-2008-3077](https://cve.now/CVE-2008-3077.md): arch/x86/kernel/ptrace.c in the Linux kernel before 2.6.25.10 on the x86\_64 platform leaks task\_struct references into the sys32\_ptrace func (no CVSS)
- [CVE-2008-3078](https://cve.now/CVE-2008-3078.md): Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote attackers to read unin (no CVSS)
- [CVE-2008-3079](https://cve.now/CVE-2008-3079.md): Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors. (no CVSS)
- [CVE-2008-3080](https://cve.now/CVE-2008-3080.md): Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to perform edit actions as (no CVSS)
- [CVE-2008-3081](https://cve.now/CVE-2008-3081.md): Multiple unspecified "input validation" vulnerabilities in the Web management interface (aka Messaging Administration interface) in Avaya Me (no CVSS)
- [CVE-2008-3082](https://cve.now/CVE-2008-3082.md): Cross-site scripting (XSS) vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and 5 allows remote atta (no CVSS)
- [CVE-2008-3083](https://cve.now/CVE-2008-3083.md): SQL injection vulnerability in Brightcode Weblinks (com\_brightweblinks) component for Joomla! allows remote attackers to execute arbitrary S (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-07-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.