# CVEs published 2008-08-14

20 CVEs were published on August 14, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3443](https://cve.now/CVE-2008-3443.md): The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 (no CVSS)
- [CVE-2008-3699](https://cve.now/CVE-2008-3699.md): The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to o (no CVSS)
- [CVE-2005-4876](https://cve.now/CVE-2005-4876.md): Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.2.2, and possi (no CVSS)
- [CVE-2005-4877](https://cve.now/CVE-2005-4877.md): Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.3.0 Beta 2 all (no CVSS)
- [CVE-2006-7233](https://cve.now/CVE-2006-7233.md): Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.6.0, and possi (no CVSS)
- [CVE-2008-3686](https://cve.now/CVE-2008-3686.md): The rt6\_fill\_node function in net/ipv6/route.c in Linux kernel 2.6.26-rc4, 2.6.26.2, and possibly other 2.6.26 versions, allows local users (no CVSS)
- [CVE-2008-3687](https://cve.now/CVE-2008-3687.md): Heap-based buffer overflow in the flask\_security\_label function in Xen 3.3, when compiled with the XSM:FLASK module, allows unprivileged dom (no CVSS)
- [CVE-2008-3688](https://cve.now/CVE-2008-3688.md): sockethandler.cpp in HTTP Antivirus Proxy (HAVP) 0.88 allows remote attackers to cause a denial of service (hang) by connecting to a non-res (no CVSS)
- [CVE-2008-2369](https://cve.now/CVE-2008-2369.md): manzier.pxt in Red Hat Network Satellite Server before 5.1.1 has a hard-coded authentication key, which allows remote attackers to connect t (no CVSS)
- [CVE-2008-2940](https://cve.now/CVE-2008-2940.md): The alert-mailing implementation in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to gain privileges and send e-mail messag (no CVSS)
- [CVE-2008-2941](https://cve.now/CVE-2008-2941.md): The hpssd message parser in hpssd.py in HP Linux Imaging and Printing (HPLIP) 1.6.7 allows local users to cause a denial of service (process (no CVSS)
- [CVE-2008-3683](https://cve.now/CVE-2008-3683.md): Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to c (no CVSS)
- [CVE-2008-3675](https://cve.now/CVE-2008-3675.md): Directory traversal vulnerability in classes/imgsize.php in Gelato 0.95 allows remote attackers to read arbitrary files via (1) a .. (no CVSS)
- [CVE-2008-3676](https://cve.now/CVE-2008-3676.md): Unspecified vulnerability in the IMAP server in hMailServer 4.4.1 allows remote authenticated users to cause a denial of service (resource e (no CVSS)
- [CVE-2008-3677](https://cve.now/CVE-2008-3677.md): Directory traversal vulnerability in includes/events\_application\_top.php in Freeway before 1.4.2.197 allows remote attackers to include and (no CVSS)
- [CVE-2008-3678](https://cve.now/CVE-2008-3678.md): Cross-site scripting (XSS) vulnerability in admin/search\_links.php in Freeway before 1.4.2.197 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2008-3679](https://cve.now/CVE-2008-3679.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2008-3680](https://cve.now/CVE-2008-3680.md): The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of service (NULL pointer (no CVSS)
- [CVE-2008-3681](https://cve.now/CVE-2008-3681.md): components/com\_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows remote attackers to (no CVSS)
- [CVE-2008-3682](https://cve.now/CVE-2008-3682.md): SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-08-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.