# CVEs published 2008-10-14

57 CVEs were published on October 14, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4558](https://cve.now/CVE-2008-4558.md): Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF pla (no CVSS)
- [CVE-2008-4478](https://cve.now/CVE-2008-4478.md): Multiple integer overflows in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.73 before 8.7.3.10 ftf1, allow remote attackers to exec (no CVSS)
- [CVE-2008-4479](https://cve.now/CVE-2008-4479.md): Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.8 before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to ex (no CVSS)
- [CVE-2008-4480](https://cve.now/CVE-2008-4480.md): Heap-based buffer overflow in dhost.exe in Novell eDirectory 8.x before 8.8.3, and 8.7.3 before 8.7.3.10 ftf1, allows remote attackers to ex (no CVSS)
- [CVE-2008-4556](https://cve.now/CVE-2008-4556.md): Stack-based buffer overflow in the adm\_build\_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers (no CVSS)
- [CVE-2008-4557](https://cve.now/CVE-2008-4557.md): plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2008-2588](https://cve.now/CVE-2008-2588.md): Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.2 allows local users to affect confidential (no CVSS)
- [CVE-2008-2619](https://cve.now/CVE-2008-2619.md): Unspecified vulnerability in the Oracle Reports Developer component in Oracle Application Server 1.0.2.2, 9.0.4.3, and 10.1.2.2, and E-Busin (no CVSS)
- [CVE-2008-2624](https://cve.now/CVE-2008-2624.md): Unspecified vulnerability in the Oracle OLAP component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiali (no CVSS)
- [CVE-2008-2625](https://cve.now/CVE-2008-2625.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.2 allows remote attackers (no CVSS)
- [CVE-2008-3975](https://cve.now/CVE-2008-3975.md): Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect (no CVSS)
- [CVE-2008-3976](https://cve.now/CVE-2008-3976.md): Unspecified vulnerability in the Oracle Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authen (no CVSS)
- [CVE-2008-3977](https://cve.now/CVE-2008-3977.md): Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect (no CVSS)
- [CVE-2008-3980](https://cve.now/CVE-2008-3980.md): Unspecified vulnerability in the Upgrade component in Oracle Database 10.1.0.5 and 10.2.0.3 allows remote authenticated users to affect conf (no CVSS)
- [CVE-2008-3982](https://cve.now/CVE-2008-3982.md): Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows (no CVSS)
- [CVE-2008-3983](https://cve.now/CVE-2008-3983.md): Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows (no CVSS)
- [CVE-2008-3984](https://cve.now/CVE-2008-3984.md): Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows (no CVSS)
- [CVE-2008-3985](https://cve.now/CVE-2008-3985.md): Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.4 allows remote attackers to (no CVSS)
- [CVE-2008-3986](https://cve.now/CVE-2008-3986.md): Unspecified vulnerability in the Oracle Discoverer Administrator component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows local us (no CVSS)
- [CVE-2008-3987](https://cve.now/CVE-2008-3987.md): Unspecified vulnerability in the Oracle Discoverer Desktop component in Oracle Application Server 10.1.2.3 allows local users to affect conf (no CVSS)
- [CVE-2008-3988](https://cve.now/CVE-2008-3988.md): Unspecified vulnerability in the iSupplier Portal component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote attackers to affec (no CVSS)
- [CVE-2008-3989](https://cve.now/CVE-2008-3989.md): Unspecified vulnerability in the Oracle Data Mining component in Oracle Database 10.2.0.3 allows remote authenticated users to affect confid (no CVSS)
- [CVE-2008-3990](https://cve.now/CVE-2008-3990.md): Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users (no CVSS)
- [CVE-2008-3991](https://cve.now/CVE-2008-3991.md): Unspecified vulnerability in the Oracle OLAP component in Oracle Database 9.2.08, 9.2.0.8DV, and 10.1.0.5 allows remote authenticated users (no CVSS)
- [CVE-2008-3992](https://cve.now/CVE-2008-3992.md): Unspecified vulnerability in the Oracle Data Mining component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confid (no CVSS)
- [CVE-2008-3993](https://cve.now/CVE-2008-3993.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.4 allows remote authe (no CVSS)
- [CVE-2008-3994](https://cve.now/CVE-2008-3994.md): Unspecified vulnerability in the Workspace Manager component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 allows (no CVSS)
- [CVE-2008-3995](https://cve.now/CVE-2008-3995.md): Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticat (no CVSS)
- [CVE-2008-3996](https://cve.now/CVE-2008-3996.md): Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticat (no CVSS)
- [CVE-2008-3998](https://cve.now/CVE-2008-3998.md): Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 allows remote authenticated users to affect confi (no CVSS)
- [CVE-2008-4000](https://cve.now/CVE-2008-4000.md): Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allo (no CVSS)
- [CVE-2008-4001](https://cve.now/CVE-2008-4001.md): Unspecified vulnerability in the PeopleSoft Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne EP 8.9 (no CVSS)
- [CVE-2008-4002](https://cve.now/CVE-2008-4002.md): Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allo (no CVSS)
- [CVE-2008-4003](https://cve.now/CVE-2008-4003.md): Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.18 and 8.49.14 allo (no CVSS)
- [CVE-2008-4004](https://cve.now/CVE-2008-4004.md): Unspecified vulnerability in the JDE EnterpriseOne Business Service Server component in Oracle PeopleSoft Enterprise and JD Edwards Enterpri (no CVSS)
- [CVE-2008-4005](https://cve.now/CVE-2008-4005.md): Unspecified vulnerability in the Oracle Application Express component in Oracle Database 11.1.0.6 allows remote authenticated users to affec (no CVSS)
- [CVE-2008-4008](https://cve.now/CVE-2008-4008.md): Unspecified vulnerability in the WebLogic Server Plugins for Apache component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP (no CVSS)
- [CVE-2008-4009](https://cve.now/CVE-2008-4009.md): Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.1, when configuring multiple authorizers, allows remote at (no CVSS)
- [CVE-2008-4010](https://cve.now/CVE-2008-4010.md): Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite 10.3, 10.2, 10.0 MP1, 9.2 MP3, and 8.1 SP6 allows remote a (no CVSS)
- [CVE-2008-4011](https://cve.now/CVE-2008-4011.md): Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote authenticated (no CVSS)
- [CVE-2008-4012](https://cve.now/CVE-2008-4012.md): Unspecified vulnerability in the WebLogic Workshop component in BEA Product Suite WLW 8.1SP5 allows remote attackers to affect confidentiali (no CVSS)
- [CVE-2008-4013](https://cve.now/CVE-2008-4013.md): Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6 allows remote attac (no CVSS)
- [CVE-2008-3639](https://cve.now/CVE-2008-3639.md): Heap-based buffer overflow in the read\_rle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2008-3640](https://cve.now/CVE-2008-3640.md): Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafte (no CVSS)
- [CVE-2008-4385](https://cve.now/CVE-2008-4385.md): Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of (no CVSS)
- [CVE-2008-4397](https://cve.now/CVE-2008-4397.md): Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 throu (no CVSS)
- [CVE-2008-4398](https://cve.now/CVE-2008-4398.md): Unspecified vulnerability in the tape engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 throug (no CVSS)
- [CVE-2008-4399](https://cve.now/CVE-2008-4399.md): Unspecified vulnerability in the database engine service in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 th (no CVSS)
- [CVE-2008-4400](https://cve.now/CVE-2008-4400.md): Unspecified vulnerability in asdbapi.dll in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 through r12.0 allows remote attac (no CVSS)
- [CVE-2008-4555](https://cve.now/CVE-2008-4555.md): Stack-based buffer overflow in the push\_subg function in parser.y (lib/graph/parser.c) in Graphviz 2.20.2, and possibly earlier versions, al (no CVSS)
- [CVE-2008-4551](https://cve.now/CVE-2008-4551.md): strongSwan 4.2.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via an IKE\_SA\_INIT message with a large num (no CVSS)
- [CVE-2008-4552](https://cve.now/CVE-2008-4552.md): The good\_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts\_ctl function with the wrong order o (no CVSS)
- [CVE-2008-4547](https://cve.now/CVE-2008-4547.md): Heap-based buffer overflow in the PdvrAtl.PdvrOcx.1 ActiveX control (pdvratl.dll) in DVRHOST Web CMS OCX 1.0.1.25 allows remote attackers to (no CVSS)
- [CVE-2008-4548](https://cve.now/CVE-2008-4548.md): Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control (CamPanel.dll) in RTS Sentry 2.1.0.2 allows remote attackers to execute a (no CVSS)
- [CVE-2008-4549](https://cve.now/CVE-2008-4549.md): The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attac (no CVSS)
- [CVE-2008-4441](https://cve.now/CVE-2008-4441.md): The Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the Marvell 88W8361P-BEM1 chipset, when WEP mode is e (no CVSS)
- [CVE-2008-4546](https://cve.now/CVE-2008-4546.md): Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denia (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-10-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.