2008 CVE Vulnerabilities
7,179 CVEs published in 2008.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2008-2322 | — | — | 5.7% | Aug 4, 2008 | Integer overflow in CoreGraphics in Apple Mac OS X 10.4.11, 10.5.2, and 10.5.4 allows remote attackers to execute arbitr... |
| CVE-2008-1232 | — | — | 75.9% | Aug 4, 2008 | Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through ... |
| CVE-2008-3423 | — | — | 1.8% | Aug 4, 2008 | IBM WebSphere Portal 5.1 through 6.1.0.0 allows remote attackers to bypass authentication and obtain administrative acce... |
| CVE-2008-3435 | — | — | 1.8% | Aug 1, 2008 | LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-i... |
| CVE-2008-3436 | — | — | 1.8% | Aug 1, 2008 | The GUP generic update process in Notepad++ before 4.8.1 does not properly verify the authenticity of updates, which all... |
| CVE-2008-3437 | — | — | 1.9% | Aug 1, 2008 | OpenOffice.org (OOo) before 2.1.0 does not properly verify the authenticity of updates, which allows man-in-the-middle a... |
| CVE-2008-3439 | — | — | 1.8% | Aug 1, 2008 | SpeedBit Video Acceleration before 2.2.1.8 does not properly verify the authenticity of updates, which allows man-in-the... |
| CVE-2008-3440 | — | — | 2.4% | Aug 1, 2008 | Sun Java 1.6.0_03 and earlier versions, and possibly later versions, does not properly verify the authenticity of update... |
| CVE-2008-3441 | — | — | 2.5% | Aug 1, 2008 | Nullsoft Winamp before 5.24 does not properly verify the authenticity of updates, which allows man-in-the-middle attacke... |
| CVE-2008-3442 | — | — | 3.8% | Aug 1, 2008 | WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to exe... |
| CVE-2008-3144 | — | — | 4.1% | Aug 1, 2008 | Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow conte... |
| CVE-2008-3143 | — | — | 3.7% | Aug 1, 2008 | Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via ... |
| CVE-2008-3142 | — | — | 4.5% | Aug 1, 2008 | Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a de... |
| CVE-2008-3175 | — | — | 14.4% | Aug 1, 2008 | Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0... |
| CVE-2008-1810 | — | — | 0.3% | Aug 1, 2008 | Untrusted search path vulnerability in dbmsrv in SAP MaxDB 7.6.03.15 on Linux allows local users to gain privileges via ... |
| CVE-2008-1376 | — | — | 2.6% | Aug 1, 2008 | A certain Red Hat build script for nfs-utils before 1.0.9-35z.el5_2 on Red Hat Enterprise Linux (RHEL) 5 omits TCP wrapp... |
| CVE-2008-2935 | — | — | 12.8% | Aug 1, 2008 | Multiple heap-based buffer overflows in the rc4 (1) encryption (aka exsltCryptoRc4EncryptFunction) and (2) decryption (a... |
| CVE-2008-2316 | — | — | 3.5% | Aug 1, 2008 | Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attac... |
| CVE-2008-2315 | — | — | 4.2% | Aug 1, 2008 | Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via v... |
| CVE-2008-1662 | — | — | 4.4% | Aug 1, 2008 | Unspecified vulnerability in the HP System Administration Manager (SAM) on HP-UX B.11.11 and B.11.23, when used to confi... |
| CVE-2008-2235 | — | — | 0.4% | Aug 1, 2008 | OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards ... |
| CVE-2008-3433 | — | — | 1.8% | Aug 1, 2008 | SpeedBit Download Accelerator Plus (DAP) before 8.6.3.9 does not properly verify the authenticity of updates, which allo... |
| CVE-2008-3434 | — | — | 2.6% | Aug 1, 2008 | Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attacker... |
| CVE-2008-3429 | — | — | 3.7% | Jul 31, 2008 | Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers to cause a denial of s... |
| CVE-2008-3425 | — | — | 2.0% | Jul 31, 2008 | Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 a... |
Check if your code is affected by 2008 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now