# CVEs published 2008-10-01

13 CVEs were published on October 1, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4368](https://cve.now/CVE-2008-4368.md): The default configuration of Java 1.5 on Apple Mac OS X 10.5.4 and 10.5.5 contains a jurisdiction policy that limits Java Cryptography Exten (no CVSS)
- [CVE-2008-4369](https://cve.now/CVE-2008-4369.md): SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid par (no CVSS)
- [CVE-2008-4370](https://cve.now/CVE-2008-4370.md): Multiple cross-site scripting (XSS) vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-4371](https://cve.now/CVE-2008-4371.md): SQL injection vulnerability in articles.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-4372](https://cve.now/CVE-2008-4372.md): Cross-site scripting (XSS) vulnerability in articles.php in AvailScript Article Script allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2008-4373](https://cve.now/CVE-2008-4373.md): SQL injection vulnerability in job\_seeker/applynow.php in AvailScript Job Portal Script allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2008-4374](https://cve.now/CVE-2008-4374.md): SQL injection vulnerability in index.php in CMS Buzz allows remote attackers to execute arbitrary SQL commands via the id parameter in a pla (no CVSS)
- [CVE-2008-4375](https://cve.now/CVE-2008-4375.md): SQL injection vulnerability in viewprofile.php in Availscript Classmate Script allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-4376](https://cve.now/CVE-2008-4376.md): SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via the mid parameter. (no CVSS)
- [CVE-2008-4377](https://cve.now/CVE-2008-4377.md): SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-4378](https://cve.now/CVE-2008-4378.md): SQL injection vulnerability in report.php in Mr. (no CVSS)
- [CVE-2008-4379](https://cve.now/CVE-2008-4379.md): Cross-site scripting (XSS) vulnerability in report.php in Mr. (no CVSS)
- [CVE-2008-4380](https://cve.now/CVE-2008-4380.md): The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, related (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-10-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.