CVEs published September 27, 2008
16 CVEs were published on September 27, 2008: 0 critical, 0 high.
- Published
- 16
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 16
- CVE-2008-3528The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux kernel 2.6.26.5 does
- CVE-2008-4070Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of s
- CVE-2008-4119Multiple cross-site scripting (XSS) vulnerabilities in CA Service Desk 11.2 and CMDB 11.0 through 11.2 allow remote attackers to inject arbi
- CVE-2008-4195Opera before 9.52 does not properly restrict the ability of a framed web page to change the address associated with a different frame, which
- CVE-2008-4196Cross-site scripting (XSS) vulnerability in Opera before 9.52 allows remote attackers to inject arbitrary web script or HTML via unspecified
- CVE-2008-4197Opera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and menu commands, can produce argument strings t
- CVE-2008-4198Opera before 9.52, when rendering an http page that has loaded an https page into a frame, displays a padlock icon and offers a security inf
- CVE-2008-4199Opera before 9.52 does not prevent use of links from web pages to feed source files on the local disk, which might allow remote attackers to
- CVE-2008-4200Opera before 9.52 does not ensure that the address field of a news feed represents the feed's actual URL, which allows remote attackers to c
- CVE-2008-4292Opera before 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vect
- CVE-2008-4293Unspecified vulnerability in Opera before 9.52 on Windows, when registered as a protocol handler, allows remote attackers to cause a denial
- CVE-2008-4294IBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 preserves cached user privileges after logout, which allows physically proximate attackers to h
- CVE-2008-4295Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth co
- CVE-2008-4296The Cisco Linksys WRT350N with firmware 1.0.3.7 has "admin" as its default password for the "admin" account, which makes it easier for remot
- CVE-2008-4297Mercurial before 1.0.2 does not enforce the allowpull permission setting for a pull operation from hgweb, which allows remote attackers to r
- CVE-2008-4298Memory leak in the http_request_parse function in request.c in lighttpd before 1.4.20 allows remote attackers to cause a denial of service (