# CVEs published 2008-10-06

15 CVEs were published on October 6, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4450](https://cve.now/CVE-2008-4450.md): Cross-site scripting (XSS) vulnerability in adodb.php in XAMPP for Windows 1.6.8 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2008-4451](https://cve.now/CVE-2008-4451.md): The SysInspector AntiStealth driver (esiasdrv.sys) 3.0.65535.0 in ESET System Analyzer Tool 1.1.1.0 allows local users to execute arbitrary (no CVSS)
- [CVE-2008-4452](https://cve.now/CVE-2008-4452.md): Buffer overflow in Cambridge Computer Corporation vxFtpSrv 2.0.3 allows remote attackers to cause a denial of service (crash and hang) and p (no CVSS)
- [CVE-2008-4453](https://cve.now/CVE-2008-4453.md): The GdPicture (1) Light Imaging Toolkit 4.7.1 GdPicture4S.Imaging ActiveX control (gdpicture4s.ocx) 4.7.0.1 and (2) Pro Imaging SDK 5.7.1 Gd (no CVSS)
- [CVE-2008-4454](https://cve.now/CVE-2008-4454.md): Directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 allows remote attackers to read and execute arbitrary files via a . (no CVSS)
- [CVE-2008-4455](https://cve.now/CVE-2008-4455.md): Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magic\_quotes\_gpc is disabled, allows (no CVSS)
- [CVE-2008-4456](https://cve.now/CVE-2008-4456.md): Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions including versions la (no CVSS)
- [CVE-2008-4447](https://cve.now/CVE-2008-4447.md): Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbi (no CVSS)
- [CVE-2008-4448](https://cve.now/CVE-2008-4448.md): Cross-site request forgery (CSRF) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perf (no CVSS)
- [CVE-2008-4449](https://cve.now/CVE-2008-4449.md): Stack-based buffer overflow in mIRC 6.34 allows remote attackers to execute arbitrary code via a long hostname in a PRIVMSG message. (no CVSS)
- [CVE-2008-4278](https://cve.now/CVE-2008-4278.md): VMware VirtualCenter 2.5 before Update 3 build 119838 on Windows displays a user's password in cleartext when the password contains unspecif (no CVSS)
- [CVE-2008-4279](https://cve.now/CVE-2008-4279.md): The CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before 5.5.8 bui (no CVSS)
- [CVE-2008-4445](https://cve.now/CVE-2008-4445.md): The sctp\_auth\_ep\_set\_hmacs function in net/sctp/auth.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel (no CVSS)
- [CVE-2008-4446](https://cve.now/CVE-2008-4446.md): Cross-site scripting (XSS) vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2008-3872](https://cve.now/CVE-2008-3872.md): Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-10-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.