# CVEs published 2008-12-24 10 CVEs were published on December 24, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-2382](https://cve.now/CVE-2008-2382.md): The protocol\_client\_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attac (no CVSS) - [CVE-2008-5708](https://cve.now/CVE-2008-5708.md): redirect.php in SlimCMS 1.0.0 does not require authentication, which allows remote attackers to create administrative users by using the new (no CVSS) - [CVE-2008-5709](https://cve.now/CVE-2008-5709.md): Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1 before 3.1.4 SP2, 4.0 before 4. (no CVSS) - [CVE-2008-5710](https://cve.now/CVE-2008-5710.md): Multiple unspecified vulnerabilities in the web management interface in Avaya Communication Manager (CM) 3.1.x, 4.0.3, and 5.x allow remote (no CVSS) - [CVE-2008-5711](https://cve.now/CVE-2008-5711.md): Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary c (no CVSS) - [CVE-2008-5712](https://cve.now/CVE-2008-5712.md): The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1) a long COLOR attribu (no CVSS) - [CVE-2008-5713](https://cve.now/CVE-2008-5713.md): The \_\_qdisc\_run function in net/sched/sch\_generic.c in the Linux kernel before 2.6.25 on SMP machines allows local users to cause a denial o (no CVSS) - [CVE-2008-5714](https://cve.now/CVE-2008-5714.md): Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven c (no CVSS) - [CVE-2008-5715](https://cve.now/CVE-2008-5715.md): Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via JavaScript code with a l (no CVSS) - [CVE-2008-5716](https://cve.now/CVE-2008-5716.md): xend in Xen 3.3.0 does not properly restrict a guest VM's write access within the /local/domain xenstore directory tree, which allows guest (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-12-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.