2008 CVE Vulnerabilities

7,179 CVEs published in 2008.

CVE IDSeverityCVSSDescription
CVE-2008-3095——Cross-site scripting (XSS) vulnerability in the Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1...
CVE-2008-3094——The Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote attacke...
CVE-2008-3093——Unrestricted file upload vulnerability in ImperialBB 2.3.5 and earlier allows remote authenticated users to upload and e...
CVE-2008-3092——SQL injection vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote authenticated ...
CVE-2008-3091——Cross-site scripting (XSS) vulnerability in the Taxonomy Autotagger module 5.x before 5.x-1.8 for Drupal allows remote a...
CVE-2008-3090——Multiple SQL injection vulnerabilities in index.php in BlognPlus (BURO GUN +) 2.5.5 MySQL and PostgreSQL editions allow ...
CVE-2008-3089——SQL injection vulnerability in user.html in Xpoze Pro 3.06 (aka Xpoze Pro CMS 2008) allows remote attackers to execute a...
CVE-2008-3087——Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. (dot do...
CVE-2008-2931HIGH7.8The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the ...
CVE-2008-2991MEDIUM6.1Cross-site scripting (XSS) vulnerability in Adobe RoboHelp Server 6 and 7 allows remote attackers to inject arbitrary we...
CVE-2008-3080——Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to per...
CVE-2008-3079——Unspecified vulnerability in Opera before 9.51 on Windows allows attackers to execute arbitrary code via unknown vectors...
CVE-2008-3078——Opera before 9.51 does not properly manage memory within functions supporting the CANVAS element, which allows remote at...
CVE-2008-3077——arch/x86/kernel/ptrace.c in the Linux kernel before 2.6.25.10 on the x86_64 platform leaks task_struct references into t...
CVE-2008-2375——Memory leak in a certain Red Hat deployment of vsftpd before 2.0.5 on Red Hat Enterprise Linux (RHEL) 3 and 4, when PAM ...
CVE-2008-2376——Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers...
CVE-2008-2812HIGH7.8The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial o...
CVE-2008-3083——SQL injection vulnerability in Brightcode Weblinks (com_brightweblinks) component for Joomla! allows remote attackers to...
CVE-2008-3082——Cross-site scripting (XSS) vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and ...
CVE-2008-1663——Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) 2.1.10 and 2.1.11 on Linux and Windows a...
CVE-2008-3081——Multiple unspecified "input validation" vulnerabilities in the Web management interface (aka Messaging Administration in...
CVE-2008-0107——Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express E...
CVE-2008-2247——Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attacker...
CVE-2008-2248——Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) for Exchange Server 2003 SP2 allows remote attacker...
CVE-2008-2809——Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netscap...

Check if your code is affected by 2008 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now