# CVEs published 2008-12-18

17 CVEs were published on December 18, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-5675](https://cve.now/CVE-2008-5675.md): Unspecified vulnerability in IBM WebSphere Portal 6.0 before 6.0.1.5 has unknown impact and attack vectors related to "Access problems with (no CVSS)
- [CVE-2008-5676](https://cve.now/CVE-2008-5676.md): Multiple unspecified vulnerabilities in the ModSecurity (aka mod\_security) module 2.5.0 through 2.5.5 for the Apache HTTP Server, when SecCa (no CVSS)
- [CVE-2008-5677](https://cve.now/CVE-2008-5677.md): Unrestricted file upload vulnerability in Kwalbum 2.0.4, 2.0.2, and earlier, when PICS\_PATH is located in the web root, allows remote authen (no CVSS)
- [CVE-2008-5678](https://cve.now/CVE-2008-5678.md): Fretwell-Downing Informatics (FDI) OLIB7 WebView 2.5.1.1 allows remote authenticated users to obtain sensitive information from files via th (no CVSS)
- [CVE-2008-5663](https://cve.now/CVE-2008-5663.md): Multiple unrestricted file upload vulnerabilities in Kusaba 1.0.4 and earlier allow remote authenticated users to execute arbitrary code by (no CVSS)
- [CVE-2008-5664](https://cve.now/CVE-2008-5664.md): Stack-based buffer overflow in Realtek Media Player (aka Realtek Sound Manager, RtlRack, or rtlrack.exe) 1.15.0.0 allows remote attackers to (no CVSS)
- [CVE-2008-5665](https://cve.now/CVE-2008-5665.md): SQL injection vulnerability in index.php in the xhresim module in XOOPS allows remote attackers to execute arbitrary SQL commands via the no (no CVSS)
- [CVE-2008-5666](https://cve.now/CVE-2008-5666.md): WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of service via a sequence (no CVSS)
- [CVE-2008-5667](https://cve.now/CVE-2008-5667.md): The scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to cause a denial of service (memory corruptio (no CVSS)
- [CVE-2008-5668](https://cve.now/CVE-2008-5668.md): Multiple cross-site scripting (XSS) vulnerabilities in Textpattern (aka Txp CMS) 4.0.5 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-5669](https://cve.now/CVE-2008-5669.md): index.php in the comments preview section in Textpattern (aka Txp CMS) 4.0.5 allows remote attackers to cause a denial of service via a long (no CVSS)
- [CVE-2008-5670](https://cve.now/CVE-2008-5670.md): Textpattern (aka Txp CMS) 4.0.5 does not ask for the old password during a password reset, which makes it easier for remote attackers to cha (no CVSS)
- [CVE-2008-5671](https://cve.now/CVE-2008-5671.md): PHP remote file inclusion vulnerability in index.php in Joomla! 1.0.11 through 1.0.14, when RG\_EMULATION is enabled in configuration.php, al (no CVSS)
- [CVE-2008-5672](https://cve.now/CVE-2008-5672.md): Multiple cross-site request forgery (CSRF) vulnerabilities in PHParanoid before 0.4 allow remote attackers to hijack the authentication of a (no CVSS)
- [CVE-2008-5673](https://cve.now/CVE-2008-5673.md): PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote at (no CVSS)
- [CVE-2008-5674](https://cve.now/CVE-2008-5674.md): Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote (no CVSS)
- [CVE-2008-5499](https://cve.now/CVE-2008-5499.md): Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrar (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-12-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.