# CVEs published 2008-10-13

10 CVEs were published on October 13, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3271](https://cve.now/CVE-2008-3271.md): Apache Tomcat 5.5.0 and 4.1.0 through 4.1.31 allows remote attackers to bypass an IP address restriction and obtain sensitive information vi (no CVSS)
- [CVE-2008-3544](https://cve.now/CVE-2008-3544.md): Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, and possibly 7.01, 7.50, and 7.53, al (no CVSS)
- [CVE-2008-3545](https://cve.now/CVE-2008-3545.md): Unspecified vulnerability in ovtopmd in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a de (no CVSS)
- [CVE-2008-4411](https://cve.now/CVE-2008-4411.md): Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.15.210 on Linux and Windows allows remote attacke (no CVSS)
- [CVE-2008-4540](https://cve.now/CVE-2008-4540.md): Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which (no CVSS)
- [CVE-2008-4541](https://cve.now/CVE-2008-4541.md): Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arb (no CVSS)
- [CVE-2008-4542](https://cve.now/CVE-2008-4542.md): Cross-site scripting (XSS) vulnerability in Cisco Unity 4.x before 4.2(1)ES162, 5.x before 5.0(1)ES56, and 7.x before 7.0(2)ES8 allows remot (no CVSS)
- [CVE-2008-4543](https://cve.now/CVE-2008-4543.md): Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8, when using anonymous authentication (aka native Unity a (no CVSS)
- [CVE-2008-4544](https://cve.now/CVE-2008-4544.md): Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to ca (no CVSS)
- [CVE-2008-4545](https://cve.now/CVE-2008-4545.md): Cisco Unity 4.x before 4.2(1)ES161, 5.x before 5.0(1)ES53, and 7.x before 7.0(2)ES8 uses weak permissions for the D:\\CommServer\\Reports dire (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-10-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.