CVEs published July 14, 2008
26 CVEs were published on July 14, 2008: 0 critical, 0 high.
- Published
- 26
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 26
- CVE-2003-1559Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http://
- CVE-2003-1560Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially
- CVE-2003-1561Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to o
- CVE-2008-3162Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remote attackers to cause
- CVE-2008-3163Directory traversal vulnerability in dodosmail.php in DodosMail 2.5 allows remote attackers to include and execute arbitrary local files via
- CVE-2008-3164Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote attackers to include
- CVE-2008-3165Directory traversal vulnerability in rss.php in fuzzylime (cms) 3.01a and earlier, when magic_quotes_gpc is disabled, allows remote attacker
- CVE-2008-3166PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals is enabled, allows re
- CVE-2008-3167Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow remote attackers to exec
- CVE-2008-3168The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRN
- CVE-2008-3169Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service or possibly execute
- CVE-2008-3170Apple Safari allows web sites to set cookies for country-specific top-level domains, such as co.uk and com.au, which could allow remote atta
- CVE-2008-3171Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially s
- CVE-2008-3172Opera allows web sites to set cookies for country-specific top-level domains that have DNS A records, such as co.tv, which could allow remot
- CVE-2008-3173Microsoft Internet Explorer allows web sites to set cookies for domains that have a public suffix with more than one dot character, which co
- CVE-2008-1588Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces
- CVE-2008-1589Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site w
- CVE-2008-1590JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which al
- CVE-2008-1809Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitr
- CVE-2008-2303Integer signedness error in Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to execute arbitrary code or
- CVE-2008-2304Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows user-assisted attackers
- CVE-2008-2317WebCore in Apple Safari does not properly perform garbage collection of JavaScript document elements, which allows remote attackers to execu
- CVE-2008-2318The WOHyperlink implementation in WebObjects in Apple Xcode tools before 3.1 appends local session IDs to generated non-local URLs, which al
- CVE-2008-3159Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote a
- CVE-2008-3160Multiple unspecified vulnerabilities in IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N series Filer and IBM System Storage
- CVE-2008-3161Multiple cross-site scripting (XSS) vulnerabilities in jsp/common/system/debug.jsp in IBM Maximo 4.1 and 5.2 allow remote attackers to injec