# CVEs published 2008-09-17

11 CVEs were published on September 17, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4118](https://cve.now/CVE-2008-4118.md): Cross-site scripting (XSS) vulnerability in High Norm Sound Master 2nd 1.0 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2008-1093](https://cve.now/CVE-2008-1093.md): Acresso InstallShield Update Agent does not properly verify the authenticity of Rule Scripts obtained from GetRules.asp web pages on FLEXnet (no CVSS)
- [CVE-2008-2468](https://cve.now/CVE-2008-2468.md): Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 an (no CVSS)
- [CVE-2008-3195](https://cve.now/CVE-2008-3195.md): Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows r (no CVSS)
- [CVE-2008-3961](https://cve.now/CVE-2008-3961.md): Multiple unspecified vulnerabilities in Adobe Illustrator CS2 on Macintosh allow user-assisted attackers to execute arbitrary code via a cra (no CVSS)
- [CVE-2008-4096](https://cve.now/CVE-2008-4096.md): libraries/database\_interface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request (no CVSS)
- [CVE-2008-4097](https://cve.now/CVE-2008-4097.md): MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTO (no CVSS)
- [CVE-2008-4098](https://cve.now/CVE-2008-4098.md): MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA D (no CVSS)
- [CVE-2008-4109](https://cve.now/CVE-2008-4109.md): A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE use (no CVSS)
- [CVE-2008-4116](https://cve.now/CVE-2008-4116.md): Buffer overflow in Apple QuickTime 7.5.5 and iTunes 8.0 allows remote attackers to cause a denial of service (browser crash) or possibly exe (no CVSS)
- [CVE-2008-4117](https://cve.now/CVE-2008-4117.md): Unspecified vulnerability in a web page in the PRM module in Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to cause a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-09-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.