2008 CVE Vulnerabilities

7,179 CVEs published in 2008.

CVE IDSeverityCVSSDescription
CVE-2008-5334PHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote attackers to execute ar...
CVE-2008-5333SQL injection vulnerability in members.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary SQL commands...
CVE-2008-5332Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via...
CVE-2008-5331Adobe Acrobat 9 uses more efficient encryption than previous versions, which makes it easier for attackers to guess a do...
CVE-2008-5330Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCa...
CVE-2008-5329ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions an...
CVE-2008-5328The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an obje...
CVE-2008-5327The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an ...
CVE-2008-5326The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allo...
CVE-2008-5325Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 ...
CVE-2008-5324Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 2007 before 2007D and 2008 befo...
CVE-2008-4416Unspecified vulnerability in the kernel in HP HP-UX B.11.31 allows local users to cause a denial of service via unknown ...
CVE-2008-2379Cross-site scripting (XSS) vulnerability in SquirrelMail before 1.4.17 allows remote attackers to inject arbitrary web s...
CVE-2008-5323Cross-site scripting (XSS) vulnerability in index.php in Wysi Wiki Wyg 1.0 allows remote attackers to inject arbitrary w...
CVE-2008-5322Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, wh...
CVE-2008-5321SQL injection vulnerability in index.php in GesGaleri, a module for XOOPS, allows remote attackers to execute arbitrary ...
CVE-2008-5320SQL injection vulnerability in usersettings.php in e107 0.7.13 and earlier allows remote authenticated users to execute ...
CVE-2008-5319Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to tiki-error.php, a diff...
CVE-2008-5318Unspecified vulnerability in Tikiwiki before 2.2 has unknown impact and attack vectors related to "size of user-provided...
CVE-2008-5080awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduc...
CVE-2008-5317Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine (aka lcms) before 1....
CVE-2008-5316Buffer overflow in the ReadEmbeddedTextTag function in src/cmsio1.c in Little cms color engine (aka lcms) before 1.16 al...
CVE-2008-5315Directory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility 1.0 on Windows allows r...
CVE-2008-5314Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial...
CVE-2008-5313mailscanner 4.68.8 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlin...

Check if your code is affected by 2008 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now