# Vulnerabilities published in 2008


- [CVE-2008-2400](https://insights.sbomify.com/CVE-2008-2400/): Privilege escalation in stunnel:stunnel (high 7.2)
- [CVE-2008-2399](https://insights.sbomify.com/CVE-2008-2399/): Path traversal in fireftp:fireftp (critical 9.3)
- [CVE-2008-2398](https://insights.sbomify.com/CVE-2008-2398/): Cross-site scripting in appserv open project:appserv (medium 4.3)
- [CVE-2008-2397](https://insights.sbomify.com/CVE-2008-2397/): Cross-site scripting in dotcms:dotcms (medium 4.3)
- [CVE-2008-2396](https://insights.sbomify.com/CVE-2008-2396/): Code injection in wajox software:mircrossys cms (high 7.5)
- [CVE-2008-2395](https://insights.sbomify.com/CVE-2008-2395/): SQL injection in alkalinephp:alkalinephp (high 7.5)
- [CVE-2008-2394](https://insights.sbomify.com/CVE-2008-2394/): SQL injection in tagworx:tagworx cms (high 7.5)
- [CVE-2008-2393](https://insights.sbomify.com/CVE-2008-2393/): SQL injection in entertainmentscript:entertainmentscript (high 7.5)
- [CVE-2008-2392](https://insights.sbomify.com/CVE-2008-2392/): File upload in wordpress:wordpress (critical 9.0)
- [CVE-2008-2391](https://insights.sbomify.com/CVE-2008-2391/): Denial of service in codeplex:subsonic (high 7.8)
- [CVE-2008-2390](https://insights.sbomify.com/CVE-2008-2390/): Code injection in hp:software update (medium 6.8)
- [CVE-2008-2389](https://insights.sbomify.com/CVE-2008-2389/): Path traversal in opensuse:opensuse (medium 4.9)
- [CVE-2008-2388](https://insights.sbomify.com/CVE-2008-2388/): Memory corruption in opensuse:opensuse (critical 10.0)
- [CVE-2008-2384](https://insights.sbomify.com/CVE-2008-2384/): SQL injection in joey schulze:mod auth mysql (high 7.5)
- [CVE-2008-2383](https://insights.sbomify.com/CVE-2008-2383/): Command injection in invisible-island:xterm (critical 9.3)
- [CVE-2008-2382](https://insights.sbomify.com/CVE-2008-2382/): Denial of service in kvm qumranet:kvm (medium 5.0)
- [CVE-2008-2381](https://insights.sbomify.com/CVE-2008-2381/): SQL injection in gforge:gforge (high 7.5)
- [CVE-2008-2380](https://insights.sbomify.com/CVE-2008-2380/): SQL injection in courier-mta:courtier-authlib (medium 5.1)
- [CVE-2008-2379](https://insights.sbomify.com/CVE-2008-2379/): Cross-site scripting in squirrelmail:squirrelmail (medium 4.3)
- [CVE-2008-2378](https://insights.sbomify.com/CVE-2008-2378/): Privilege escalation in hf:hf (high 7.2)
- [CVE-2008-2377](https://insights.sbomify.com/CVE-2008-2377/): Use after free in gnu:gnutls (high 7.6)
- [CVE-2008-2376](https://insights.sbomify.com/CVE-2008-2376/): Integer overflow in ruby-lang:ruby (high 7.5)
- [CVE-2008-2375](https://insights.sbomify.com/CVE-2008-2375/): Denial of service in redhat:vsftpd (high 7.1)
- [CVE-2008-2374](https://insights.sbomify.com/CVE-2008-2374/): Memory corruption in bluez:bluez-libs (critical 9.8)
- [CVE-2008-2372](https://insights.sbomify.com/CVE-2008-2372/): Denial of service in linux:linux kernel (medium 4.9)
- [CVE-2008-2371](https://insights.sbomify.com/CVE-2008-2371/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2008-2370](https://insights.sbomify.com/CVE-2008-2370/): Apache Tomcat Path Traversal Vulnerability (medium 5.0)
- [CVE-2008-2369](https://insights.sbomify.com/CVE-2008-2369/): Hardcoded credentials in redhat:satellite (critical 9.1)
- [CVE-2008-2368](https://insights.sbomify.com/CVE-2008-2368/): Information disclosure in redhat:certificate system (low 2.1)
- [CVE-2008-2367](https://insights.sbomify.com/CVE-2008-2367/): Misconfiguration in redhat:certificate system (low 2.1)
- [CVE-2008-2366](https://insights.sbomify.com/CVE-2008-2366/): Privilege escalation in openoffice:openoffice (medium 4.4)
- [CVE-2008-2365](https://insights.sbomify.com/CVE-2008-2365/): Race condition in linux:linux kernel (medium 4.7)
- [CVE-2008-2364](https://insights.sbomify.com/CVE-2008-2364/): Denial of service in apache:http server (medium 5.0)
- [CVE-2008-2363](https://insights.sbomify.com/CVE-2008-2363/): Memory corruption in pan:pan (critical 9.3)
- [CVE-2008-2362](https://insights.sbomify.com/CVE-2008-2362/): Integer overflow in x:x11 (critical 10.0)
- [CVE-2008-2361](https://insights.sbomify.com/CVE-2008-2361/): Integer overflow in xorg:x11 (medium 6.8)
- [CVE-2008-2360](https://insights.sbomify.com/CVE-2008-2360/): Integer overflow in x:x11 (critical 9.0)
- [CVE-2008-2359](https://insights.sbomify.com/CVE-2008-2359/): Misconfiguration in fedora 8:consolehelper (high 7.2)
- [CVE-2008-2358](https://insights.sbomify.com/CVE-2008-2358/): Integer overflow in linux:linux kernel (high 7.2)
- [CVE-2008-2357](https://insights.sbomify.com/CVE-2008-2357/): Memory corruption in matt kimball and roger wolff:mtr (medium 6.8)
- [CVE-2008-2356](https://insights.sbomify.com/CVE-2008-2356/): SQL injection in archangelmgt:archangel weblog (high 7.5)
- [CVE-2008-2355](https://insights.sbomify.com/CVE-2008-2355/): Path traversal in wr-script:wr-meeting (medium 6.8)
- [CVE-2008-2354](https://insights.sbomify.com/CVE-2008-2354/): Missing authorization in testmaker:testmaker (medium 5.0)
- [CVE-2008-2353](https://insights.sbomify.com/CVE-2008-2353/): Path traversal in gnugallery:gnugallery (high 7.5)
- [CVE-2008-2352](https://insights.sbomify.com/CVE-2008-2352/): Path traversal in smeego:smeego (medium 6.8)
- [CVE-2008-2351](https://insights.sbomify.com/CVE-2008-2351/): SQL injection in webmanager-pro:cms webmanager-pro (high 7.5)
- [CVE-2008-2350](https://insights.sbomify.com/CVE-2008-2350/): Path traversal in bcoos:bcoos (medium 5.0)
- [CVE-2008-2349](https://insights.sbomify.com/CVE-2008-2349/): Missing authorization in zomp:zomplog (high 7.5)
- [CVE-2008-2348](https://insights.sbomify.com/CVE-2008-2348/): Auth bypass in meltingicefs:meltingice file system (high 7.5)
- [CVE-2008-2347](https://insights.sbomify.com/CVE-2008-2347/): Auth bypass in mypicgallery:mypicgallery (high 7.5)
- [CVE-2008-2346](https://insights.sbomify.com/CVE-2008-2346/): Auth bypass in alkalinephp:alkalinephp (high 7.5)
- [CVE-2008-2345](https://insights.sbomify.com/CVE-2008-2345/): Code injection in typo3:air filemanager (critical 10.0)
- [CVE-2008-2344](https://insights.sbomify.com/CVE-2008-2344/): Cross-site scripting in typo3:air filemanager (medium 4.3)
- [CVE-2008-2343](https://insights.sbomify.com/CVE-2008-2343/): Missing authorization in news manager:news manager (high 7.5)
- [CVE-2008-2342](https://insights.sbomify.com/CVE-2008-2342/): Path traversal in news manager:news manager (medium 5.0)
- [CVE-2008-2341](https://insights.sbomify.com/CVE-2008-2341/): Code injection in avalonnet:news manager (high 7.5)
- [CVE-2008-2340](https://insights.sbomify.com/CVE-2008-2340/): SQL injection in news manager:news manager (high 7.5)
- [CVE-2008-2339](https://insights.sbomify.com/CVE-2008-2339/): SQL injection in turnkeywebtools:sunshop shopping cart (high 7.5)
- [CVE-2008-2338](https://insights.sbomify.com/CVE-2008-2338/): Auth bypass in interspire:activekb (high 7.5)
- [CVE-2008-2337](https://insights.sbomify.com/CVE-2008-2337/): SQL injection in imgallery:imgallery (high 7.5)
- [CVE-2008-2336](https://insights.sbomify.com/CVE-2008-2336/): SQL injection in 68 classifieds:68 classifieds (high 7.5)
- [CVE-2008-2335](https://insights.sbomify.com/CVE-2008-2335/): Cross-site scripting in vastal:phpvid (medium 4.3)
- [CVE-2008-2334](https://insights.sbomify.com/CVE-2008-2334/): SQL injection in aspindir:philboard (high 7.5)
- [CVE-2008-2333](https://insights.sbomify.com/CVE-2008-2333/): Cross-site scripting in barracuda networks:barracuda spam firewall (medium 4.3)
- [CVE-2008-2332](https://insights.sbomify.com/CVE-2008-2332/): Memory corruption in apple:mac os x (critical 9.3)
- [CVE-2008-2331](https://insights.sbomify.com/CVE-2008-2331/): Security feature bypass in apple:mac os x (medium 5.0)
- [CVE-2008-2330](https://insights.sbomify.com/CVE-2008-2330/): Information disclosure in apple:mac os x server (medium 4.9)
- [CVE-2008-2329](https://insights.sbomify.com/CVE-2008-2329/): Information disclosure in apple:mac os x (low 1.9)
- [CVE-2008-2327](https://insights.sbomify.com/CVE-2008-2327/): Memory corruption in libtiff:libtiff (medium 6.8)
- [CVE-2008-2326](https://insights.sbomify.com/CVE-2008-2326/): Null dereference in apple:bonjour (medium 5.0)
- [CVE-2008-2325](https://insights.sbomify.com/CVE-2008-2325/): Memory corruption in apple:quicklook (critical 9.3)
- [CVE-2008-2324](https://insights.sbomify.com/CVE-2008-2324/): Privilege escalation in apple:mac os x (medium 4.6)
- [CVE-2008-2323](https://insights.sbomify.com/CVE-2008-2323/): Denial of service in apple:data detectors engine (high 7.1)
- [CVE-2008-2322](https://insights.sbomify.com/CVE-2008-2322/): Integer overflow in apple:coregraphics (critical 9.3)
- [CVE-2008-2321](https://insights.sbomify.com/CVE-2008-2321/): Memory corruption in apple:coregraphics (critical 9.3)
- [CVE-2008-2320](https://insights.sbomify.com/CVE-2008-2320/): Memory corruption in apple:carboncore (critical 9.3)
- [CVE-2008-2318](https://insights.sbomify.com/CVE-2008-2318/): Information disclosure in apple:xcode (medium 5.0)
- [CVE-2008-2317](https://insights.sbomify.com/CVE-2008-2317/): Use after free in apple:safari (critical 9.3)
- [CVE-2008-2316](https://insights.sbomify.com/CVE-2008-2316/): Integer overflow in python:python (high 7.5)
- [CVE-2008-2315](https://insights.sbomify.com/CVE-2008-2315/): Integer overflow in python:python (high 7.5)
- [CVE-2008-2314](https://insights.sbomify.com/CVE-2008-2314/): Auth bypass in apple:mac os x (medium 4.4)
- [CVE-2008-2313](https://insights.sbomify.com/CVE-2008-2313/): Misconfiguration in apple:mac os x (medium 4.6)
- [CVE-2008-2312](https://insights.sbomify.com/CVE-2008-2312/): Information disclosure in apple:mac os x (medium 4.9)
- [CVE-2008-2311](https://insights.sbomify.com/CVE-2008-2311/): Race condition in apple:mac os x (high 7.6)
- [CVE-2008-2310](https://insights.sbomify.com/CVE-2008-2310/): Memory corruption in apple:mac os x (medium 6.8)
- [CVE-2008-2309](https://insights.sbomify.com/CVE-2008-2309/): Security feature bypass in apple:mac os x (medium 6.8)
- [CVE-2008-2308](https://insights.sbomify.com/CVE-2008-2308/): Memory corruption in apple:mac os x (medium 4.6)
- [CVE-2008-2307](https://insights.sbomify.com/CVE-2008-2307/): Memory corruption in apple:safari (critical 9.3)
- [CVE-2008-2306](https://insights.sbomify.com/CVE-2008-2306/): Security feature bypass in apple:safari (critical 9.3)
- [CVE-2008-2305](https://insights.sbomify.com/CVE-2008-2305/): Memory corruption in apple:mac os x (critical 9.3)
- [CVE-2008-2304](https://insights.sbomify.com/CVE-2008-2304/): Memory corruption in apple:core image fun house (medium 6.8)
- [CVE-2008-2303](https://insights.sbomify.com/CVE-2008-2303/): Integer overflow in apple:safari (critical 10.0)
- [CVE-2008-2302](https://insights.sbomify.com/CVE-2008-2302/): Django Cross-site scripting (XSS) vulnerability (medium 4.3)
- [CVE-2008-2301](https://insights.sbomify.com/CVE-2008-2301/): SQL injection in phpway:kostenloses linkmanagementscript (high 7.5)
- [CVE-2008-2300](https://insights.sbomify.com/CVE-2008-2300/): Missing authorization in citrix:access essentials (medium 6.5)
- [CVE-2008-2299](https://insights.sbomify.com/CVE-2008-2299/): Weak cryptography in citrix:access essentials (medium 5.0)
- [CVE-2008-2298](https://insights.sbomify.com/CVE-2008-2298/): Auth bypass in sourceforge:web slider (high 7.5)
- [CVE-2008-2297](https://insights.sbomify.com/CVE-2008-2297/): Auth bypass in roticv:rantx (high 7.5)
- [CVE-2008-2296](https://insights.sbomify.com/CVE-2008-2296/): Code injection in rgboard:rgboard (high 7.5)
- [CVE-2008-2295](https://insights.sbomify.com/CVE-2008-2295/): Cross-site scripting in rgboard:rgboard (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/48/