# CVEs published 2008-08-08

21 CVEs were published on August 8, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1664](https://cve.now/CVE-2008-1664.md): Unspecified vulnerability in libc on HP HP-UX B.11.23 and B.11.31 allows remote attackers to cause a denial of service via unknown vectors. (no CVSS)
- [CVE-2008-1945](https://cve.now/CVE-2008-1945.md): QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using (no CVSS)
- [CVE-2008-2377](https://cve.now/CVE-2008-2377.md): Use-after-free vulnerability in the \_gnutls\_handshake\_hash\_buffers\_clear function in lib/gnutls\_handshake.c in libgnutls in GnuTLS 2.3.5 thr (no CVSS)
- [CVE-2008-3337](https://cve.now/CVE-2008-3337.md): PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches (no CVSS)
- [CVE-2008-3532](https://cve.now/CVE-2008-3532.md): The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user int (no CVSS)
- [CVE-2008-3534](https://cve.now/CVE-2008-3534.md): The shmem\_delete\_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows local users to cause a (no CVSS)
- [CVE-2008-3535](https://cve.now/CVE-2008-3535.md): Off-by-one error in the iov\_iter\_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial (no CVSS)
- [CVE-2008-3550](https://cve.now/CVE-2008-3550.md): The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information (page source code) (no CVSS)
- [CVE-2008-3551](https://cve.now/CVE-2008-3551.md): Multiple unspecified vulnerabilities in Sun Java Platform Micro Edition (aka Java ME, J2ME, or mobile Java), as distributed in Sun Wireless (no CVSS)
- [CVE-2008-3552](https://cve.now/CVE-2008-3552.md): Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition FP1, and possibly later devices, allow remote attackers to execute arbit (no CVSS)
- [CVE-2008-3553](https://cve.now/CVE-2008-3553.md): Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition devices allow remote attackers to execute arbitrary code via unknown vec (no CVSS)
- [CVE-2008-3554](https://cve.now/CVE-2008-3554.md): SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via the searchid paramet (no CVSS)
- [CVE-2008-3555](https://cve.now/CVE-2008-3555.md): Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3) Knowledge Base (WSNK (no CVSS)
- [CVE-2008-3556](https://cve.now/CVE-2008-3556.md): Multiple SQL injection vulnerabilities in index.php in Battle.net Clan Script 1.5.2 allow remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-3557](https://cve.now/CVE-2008-3557.md): Free Hosting Manager 1.2 and 2.0 allows remote attackers to bypass authentication and gain administrative access by setting both the adminus (no CVSS)
- [CVE-2008-3558](https://cve.now/CVE-2008-3558.md): Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 al (no CVSS)
- [CVE-2008-3559](https://cve.now/CVE-2008-3559.md): Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2008-3560](https://cve.now/CVE-2008-3560.md): Cross-site scripting (XSS) vulnerability in kshop\_search.php in the Kshop module 2.22 for Xoops allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2008-0964](https://cve.now/CVE-2008-0964.md): Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv\_96, when the -o option is omitted, all (no CVSS)
- [CVE-2008-0965](https://cve.now/CVE-2008-0965.md): Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv\_96, when the -o option is omitted, al (no CVSS)
- [CVE-2008-3272](https://cve.now/CVE-2008-3272.md): The snd\_seq\_oss\_synth\_make\_info function in sound/core/seq/oss/seq\_oss\_synth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-08-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.