# CVEs published 2008-08-29

11 CVEs were published on August 29, 2008: 0 critical, 1 high. Days are UTC.

- [CVE-2008-2928](https://cve.now/CVE-2008-2928.md): Multiple buffer overflows in the adminutil library in CGI applications in Red Hat Directory Server 7.1 before SP7 allow remote attackers to (no CVSS)
- [CVE-2008-2929](https://cve.now/CVE-2008-2929.md): Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Se (no CVSS)
- [CVE-2008-2930](https://cve.now/CVE-2008-2930.md): Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a den (no CVSS)
- [CVE-2008-3282](https://cve.now/CVE-2008-3282.md): Integer overflow in the rtl\_allocateMemory function in sal/rtl/source/alloc\_global.c in the memory allocator in OpenOffice.org (OOo) 2.4.1, (CVSS 7.8)
- [CVE-2008-3283](https://cve.now/CVE-2008-3283.md): Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier (no CVSS)
- [CVE-2008-3480](https://cve.now/CVE-2008-3480.md): Stack-based buffer overflow in the Anzio Web Print Object (WePO) ActiveX control 3.2.19 and 3.2.24, as used in Anzio Print Wizard, allows re (no CVSS)
- [CVE-2008-3873](https://cve.now/CVE-2008-3873.md): The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard (no CVSS)
- [CVE-2008-3874](https://cve.now/CVE-2008-3874.md): Cross-site scripting (XSS) vulnerability in account.php in Lussumo Vanilla 1.1.5-rc1, 1.1.4, and earlier allows remote authenticated users t (no CVSS)
- [CVE-2008-3859](https://cve.now/CVE-2008-3859.md): Davlin Thickbox Gallery 2 allows remote attackers to obtain the administrative username and MD5 password hash via a direct request to conf/a (no CVSS)
- [CVE-2008-3860](https://cve.now/CVE-2008-3860.md): Multiple cross-site scripting (XSS) vulnerabilities (1) in the WYSIWYG editors, (2) during local group creation, (3) during HTML redirects, (no CVSS)
- [CVE-2008-3861](https://cve.now/CVE-2008-3861.md): Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via ( (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-08-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.