2008 CVE Vulnerabilities
7,179 CVEs published in 2008.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2008-6694 | — | — | 1.1% | Apr 10, 2009 | SQL injection vulnerability in Random Prayer (ste_prayer) 0.0.1 for TYPO3 allows remote attackers to execute arbitrary S... |
| CVE-2008-6693 | — | — | 1.1% | Apr 10, 2009 | SQL injection vulnerability in Download system (sb_downloader) extension 0.1.4 and earlier for TYPO3 allows remote attac... |
| CVE-2008-6692 | — | — | 1.1% | Apr 10, 2009 | SQL injection vulnerability in Diocese of Portsmouth Training Courses (pd_trainingcourses) extension 0.1.1 for TYPO3 all... |
| CVE-2008-6691 | — | — | 1.1% | Apr 10, 2009 | SQL injection vulnerability in Diocese of Portsmouth Calendar Today (pd_calendar_today) extension 0.0.3 for TYPO3 allows... |
| CVE-2008-6690 | — | — | 1.4% | Apr 10, 2009 | Unspecified vulnerability in nepa-design.de Spam Protection (nd_antispam) extension 1.0.3 for TYPO3 allows remote attack... |
| CVE-2008-6689 | — | — | 1.1% | Apr 10, 2009 | SQL injection vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows remote attackers... |
| CVE-2008-6688 | — | — | 1.0% | Apr 10, 2009 | Cross-site scripting (XSS) vulnerability in JobControl (dmmjobcontrol) 1.15.0 and earlier extension for TYPO3 allows rem... |
| CVE-2008-6687 | — | — | 1.3% | Apr 10, 2009 | Cross-site scripting (XSS) vulnerability in DCD GoogleMap (dcdgooglemap) 1.1.0 and earlier extension for TYPO3 allows re... |
| CVE-2008-6686 | — | — | 1.1% | Apr 10, 2009 | SQL injection vulnerability in CoolURI (cooluri) 1.0.11 and earlier extension for TYPO3 allows remote attackers to execu... |
| CVE-2008-6685 | — | — | 1.8% | Apr 10, 2009 | Unspecified vulnerability in Frontend Filemanager (air_filemanager) 0.6.1 and earlier extension for TYPO3 allows remote ... |
| CVE-2008-6684 | — | — | 2.6% | Apr 10, 2009 | Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote attackers to execute ar... |
| CVE-2008-6683 | — | — | 1.4% | Apr 10, 2009 | Cross-site scripting (XSS) vulnerability in listtest.php in Apartment Search Script allows remote attackers to inject ar... |
| CVE-2008-6682 | — | — | 5.6% | Apr 9, 2009 | Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow ... |
| CVE-2008-6681 | — | — | 1.1% | Apr 9, 2009 | Cross-site scripting (XSS) vulnerability in dijit.Editor in Dojo before 1.1 allows remote attackers to inject arbitrary ... |
| CVE-2008-5519 | — | — | 7.3% | Apr 9, 2009 | The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive informat... |
| CVE-2008-2025 | — | — | 7.9% | Apr 9, 2009 | Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, befor... |
| CVE-2008-6680 | — | — | 3.7% | Apr 8, 2009 | libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (crash) via a crafted EXE file... |
| CVE-2008-6679 | — | — | 4.5% | Apr 8, 2009 | Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers ... |
| CVE-2008-6678 | — | — | 1.1% | Apr 8, 2009 | SQL injection vulnerability in asp/includes/contact.asp in QuickerSite 1.8.5 allows remote attackers to execute arbitrar... |
| CVE-2008-6677 | — | — | 4.0% | Apr 8, 2009 | Unrestricted file upload vulnerability in fckeditor251/editor/filemanager/connectors/asp/upload.asp in QuickerSite 1.8.5... |
| CVE-2008-6676 | — | — | 3.0% | Apr 8, 2009 | QuickerSite 1.8.5 allows remote attackers to obtain sensitive information via a request to showThumb.aspx without any pa... |
| CVE-2008-6675 | — | — | 1.7% | Apr 8, 2009 | Multiple cross-site scripting (XSS) vulnerabilities in QuickerSite 1.8.5 allow remote attackers to inject arbitrary web ... |
| CVE-2008-6674 | — | — | 2.7% | Apr 8, 2009 | mailPage.asp in QuickerSite 1.8.5 allows remote attackers to flood e-mail accounts with messages via a large number of r... |
| CVE-2008-6673 | — | — | 2.3% | Apr 8, 2009 | asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows re... |
| CVE-2008-6672 | — | — | 1.7% | Apr 8, 2009 | Vertex4 SunAge 1.08.1 and earlier allows remote attackers to cause a denial of service ("runtime error") via a crafted j... |
Check if your code is affected by 2008 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now