2008 CVE Vulnerabilities

7,179 CVEs published in 2008.

CVE IDSeverityCVSSDescription
CVE-2008-3201——Multiple cross-site scripting (XSS) vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbi...
CVE-2008-2232——The expand_template function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a...
CVE-2008-1665——Multiple unspecified vulnerabilities in HP Select Identity (HPSI) Active Directory Bidirectional LDAP Connector 2.20, 2....
CVE-2008-3200——SQL injection vulnerability in vlc_forum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary S...
CVE-2008-1666——Unspecified vulnerability in HP Oracle for OpenView (OfO) 8.1.7, 9.1.01, 9.2, 9.2.0, 10g, and 10gR2 has unknown impact a...
CVE-2008-3198——Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspe...
CVE-2008-3199——Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service (st...
CVE-2008-2933——Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' (pipe) characters in a command-line URI as request...
CVE-2008-3145——The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a...
CVE-2008-3193——SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page param...
CVE-2008-3196——skeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side, which allows context-depe...
CVE-2008-3194——Multiple directory traversal vulnerabilities in data/inc/themes/predefined_variables.php in pluck 4.5.1 allow remote att...
CVE-2008-3191——Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magic_quotes_gpc is disabled, allow remote att...
CVE-2008-3190——Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute ar...
CVE-2008-3189——SQL injection vulnerability in dreamnews-rss.php in DreamNews Manager allows remote attackers to execute arbitrary SQL c...
CVE-2008-3192——Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary ...
CVE-2008-3197——Cross-site request forgery (CSRF) vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unautho...
CVE-2008-2601——Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.0.4 has unknown impact and remote...
CVE-2008-2578——Unspecified vulnerability in the WebLogic Server component in Oracle BEA Product Suite 10.0 and 9.2 MP1 has unknown impa...
CVE-2008-2611——Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10...
CVE-2008-2610——Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.4 has un...
CVE-2008-2621——Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards Enterpr...
CVE-2008-2591——Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.3, and 11.1.0.6 ha...
CVE-2008-2605——Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote auth...
CVE-2008-2604——Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote auth...

Check if your code is affected by 2008 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now