# CVEs published 2008-12-05

41 CVEs were published on December 5, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5339](https://cve.now/CVE-2008-5339.md): Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 a (no CVSS)
- [CVE-2008-5340](https://cve.now/CVE-2008-5340.md): Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 a (no CVSS)
- [CVE-2008-5341](https://cve.now/CVE-2008-5341.md): Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update (no CVSS)
- [CVE-2008-5342](https://cve.now/CVE-2008-5342.md): Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK an (no CVSS)
- [CVE-2008-5343](https://cve.now/CVE-2008-5343.md): Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1 (no CVSS)
- [CVE-2008-5344](https://cve.now/CVE-2008-5344.md): Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 a (no CVSS)
- [CVE-2008-5345](https://cve.now/CVE-2008-5345.md): Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earl (no CVSS)
- [CVE-2008-5346](https://cve.now/CVE-2008-5346.md): Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2\_18 and earlier; (no CVSS)
- [CVE-2008-5347](https://cve.now/CVE-2008-5347.md): Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets a (no CVSS)
- [CVE-2008-5348](https://cve.now/CVE-2008-5348.md): Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earli (no CVSS)
- [CVE-2008-5349](https://cve.now/CVE-2008-5349.md): Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and e (no CVSS)
- [CVE-2008-5350](https://cve.now/CVE-2008-5350.md): Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earli (no CVSS)
- [CVE-2008-5351](https://cve.now/CVE-2008-5351.md): Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2\_18 (no CVSS)
- [CVE-2008-5352](https://cve.now/CVE-2008-5352.md): Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK a (no CVSS)
- [CVE-2008-5353](https://cve.now/CVE-2008-5353.md): The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2 (no CVSS)
- [CVE-2008-5354](https://cve.now/CVE-2008-5354.md): Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and ear (no CVSS)
- [CVE-2008-5355](https://cve.now/CVE-2008-5355.md): The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earl (no CVSS)
- [CVE-2008-5356](https://cve.now/CVE-2008-5356.md): Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earl (no CVSS)
- [CVE-2008-5357](https://cve.now/CVE-2008-5357.md): Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK a (no CVSS)
- [CVE-2008-5358](https://cve.now/CVE-2008-5358.md): Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a craf (no CVSS)
- [CVE-2008-5359](https://cve.now/CVE-2008-5359.md): Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK an (no CVSS)
- [CVE-2008-5360](https://cve.now/CVE-2008-5360.md): Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2\_18 and (no CVSS)
- [CVE-2008-2086](https://cve.now/CVE-2008-2086.md): Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2\_18 (no CVSS)
- [CVE-2007-6719](https://cve.now/CVE-2007-6719.md): SQL injection vulnerability in Wiz-Ad 1.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors. (no CVSS)
- [CVE-2008-5332](https://cve.now/CVE-2008-5332.md): Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) li (no CVSS)
- [CVE-2008-5333](https://cve.now/CVE-2008-5333.md): SQL injection vulnerability in members.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary SQL commands via the id paramete (no CVSS)
- [CVE-2008-5334](https://cve.now/CVE-2008-5334.md): PHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2008-5335](https://cve.now/CVE-2008-5335.md): SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magic\_quotes\_gpc is disabled, allows remote attackers to (no CVSS)
- [CVE-2008-5336](https://cve.now/CVE-2008-5336.md): SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via the pageid parameter (no CVSS)
- [CVE-2008-5337](https://cve.now/CVE-2008-5337.md): SQL injection vulnerability in lyrics.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2008-5338](https://cve.now/CVE-2008-5338.md): Cross-site scripting (XSS) vulnerability in info.php in Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to inject arbit (no CVSS)
- [CVE-2008-2379](https://cve.now/CVE-2008-2379.md): Cross-site scripting (XSS) vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web script or HTML via a (no CVSS)
- [CVE-2008-4416](https://cve.now/CVE-2008-4416.md): Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown vectors. (no CVSS)
- [CVE-2008-5324](https://cve.now/CVE-2008-5324.md): Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 2007 before 2007D and 2008 before 2008B allow remot (no CVSS)
- [CVE-2008-5325](https://cve.now/CVE-2008-5325.md): Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 allow (no CVSS)
- [CVE-2008-5326](https://cve.now/CVE-2008-5326.md): The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to ob (no CVSS)
- [CVE-2008-5327](https://cve.now/CVE-2008-5327.md): The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQue (no CVSS)
- [CVE-2008-5328](https://cve.now/CVE-2008-5328.md): The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest c (no CVSS)
- [CVE-2008-5329](https://cve.now/CVE-2008-5329.md): ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbi (no CVSS)
- [CVE-2008-5330](https://cve.now/CVE-2008-5330.md): Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before 7.0. (no CVSS)
- [CVE-2008-5331](https://cve.now/CVE-2008-5331.md): Adobe Acrobat 9 uses more efficient encryption than previous versions, which makes it easier for attackers to guess a document's password vi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-12-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.