# CVEs published 2008-09-09

14 CVEs were published on September 9, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3912](https://cve.now/CVE-2008-3912.md): libclamav in ClamAV before 0.94 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors r (no CVSS)
- [CVE-2008-3913](https://cve.now/CVE-2008-3913.md): Multiple memory leaks in freshclam/manager.c in ClamAV before 0.94 might allow attackers to cause a denial of service (memory consumption) v (no CVSS)
- [CVE-2008-3914](https://cve.now/CVE-2008-3914.md): Multiple unspecified vulnerabilities in ClamAV before 0.94 have unknown impact and attack vectors related to file descriptor leaks on the "e (no CVSS)
- [CVE-2008-3915](https://cve.now/CVE-2008-3915.md): Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via ve (no CVSS)
- [CVE-2008-3956](https://cve.now/CVE-2008-3956.md): orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or possibl (no CVSS)
- [CVE-2008-3957](https://cve.now/CVE-2008-3957.md): The Microsoft Windows Image Acquisition Logger ActiveX control allows remote attackers to force the download of arbitrary files onto a clien (no CVSS)
- [CVE-2008-3958](https://cve.now/CVE-2008-3958.md): IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause a denial of service (instance crash) via a crafted CONNECT/ATTACH data strea (no CVSS)
- [CVE-2008-3959](https://cve.now/CVE-2008-3959.md): IBM DB2 UDB 8.1 before FixPak 16, 8.2 before FixPak 9, and 9.1 before FixPak 4a allows remote attackers to cause a denial of service (instan (no CVSS)
- [CVE-2008-3960](https://cve.now/CVE-2008-3960.md): Unspecified vulnerability in the JDBC Applet Server Service (aka db2jds) in IBM DB2 UDB 8 before Fixpak 17 allows remote attackers to cause (no CVSS)
- [CVE-2008-3951](https://cve.now/CVE-2008-3951.md): SQL injection vulnerability in view\_ann.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbi (no CVSS)
- [CVE-2008-3952](https://cve.now/CVE-2008-3952.md): SQL injection vulnerability in questions.php in EsFaq 2.0 allows remote attackers to execute arbitrary SQL commands via the idcat parameter. (no CVSS)
- [CVE-2008-3953](https://cve.now/CVE-2008-3953.md): SQL injection vulnerability in keyword\_search\_action.php in Vastal I-Tech Shaadi Zone 1.0.9 allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2008-3954](https://cve.now/CVE-2008-3954.md): SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-3955](https://cve.now/CVE-2008-3955.md): SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute arbitrary SQL comman (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-09-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.