# Vulnerabilities published in 2008


- [CVE-2008-1464](https://insights.sbomify.com/CVE-2008-1464/): SQL injection in gallarific:gallarific (high 7.5)
- [CVE-2008-1463](https://insights.sbomify.com/CVE-2008-1463/): Cross-site scripting in imperva:securesphere (medium 4.3)
- [CVE-2008-1462](https://insights.sbomify.com/CVE-2008-1462/): SQL injection in runcms:runcms (medium 6.8)
- [CVE-2008-1461](https://insights.sbomify.com/CVE-2008-1461/): Memory corruption in xnview:xnview (high 7.6)
- [CVE-2008-1460](https://insights.sbomify.com/CVE-2008-1460/): SQL injection in joomlapixel:com joovideo (high 7.5)
- [CVE-2008-1459](https://insights.sbomify.com/CVE-2008-1459/): SQL injection in joomlaitalia:com alberghi (high 7.5)
- [CVE-2008-1458](https://insights.sbomify.com/CVE-2008-1458/): Cross-site scripting in cs-cart:cs-cart (medium 4.3)
- [CVE-2008-1457](https://insights.sbomify.com/CVE-2008-1457/): Code injection in microsoft:windows-nt (critical 9.0)
- [CVE-2008-1456](https://insights.sbomify.com/CVE-2008-1456/): Memory corruption in microsoft:windows-nt (critical 9.0)
- [CVE-2008-1455](https://insights.sbomify.com/CVE-2008-1455/): Memory corruption in microsoft:compatibility pack word excel powerpoint (medium 6.8)
- [CVE-2008-1454](https://insights.sbomify.com/CVE-2008-1454/): Other in microsoft:windows 2000 (critical 9.4)
- [CVE-2008-1453](https://insights.sbomify.com/CVE-2008-1453/): Memory corruption in microsoft:windows-nt (high 8.3)
- [CVE-2008-1451](https://insights.sbomify.com/CVE-2008-1451/): Memory corruption in microsoft:windows 2000 (high 7.2)
- [CVE-2008-1448](https://insights.sbomify.com/CVE-2008-1448/): Security feature bypass in microsoft:outlook express (high 7.1)
- [CVE-2008-1447](https://insights.sbomify.com/CVE-2008-1447/): Weak cryptography in isc:bind (medium 6.8)
- [CVE-2008-1446](https://insights.sbomify.com/CVE-2008-1446/): Integer overflow in microsoft:internet information services (critical 9.0)
- [CVE-2008-1445](https://insights.sbomify.com/CVE-2008-1445/): Denial of service in microsoft:windows-nt (high 7.1)
- [CVE-2008-1444](https://insights.sbomify.com/CVE-2008-1444/): Memory corruption in microsoft:directx (critical 9.3)
- [CVE-2008-1442](https://insights.sbomify.com/CVE-2008-1442/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2008-1441](https://insights.sbomify.com/CVE-2008-1441/): Denial of service in microsoft:windows server 2003 (medium 5.4)
- [CVE-2008-1440](https://insights.sbomify.com/CVE-2008-1440/): Denial of service in microsoft:windows server 2003 (high 7.1)
- [CVE-2008-1438](https://insights.sbomify.com/CVE-2008-1438/): Denial of service in microsoft:antigen for exchange (medium 5.0)
- [CVE-2008-1437](https://insights.sbomify.com/CVE-2008-1437/): Denial of service in microsoft:antigen for exchange (medium 5.0)
- [CVE-2008-1436](https://insights.sbomify.com/CVE-2008-1436/): Privilege escalation in microsoft:windows-nt (critical 9.0)
- [CVE-2008-1435](https://insights.sbomify.com/CVE-2008-1435/): Code injection in microsoft:windows-nt (critical 9.3)
- [CVE-2008-1434](https://insights.sbomify.com/CVE-2008-1434/): Use after free in microsoft:office (critical 9.3)
- [CVE-2008-1432](https://insights.sbomify.com/CVE-2008-1432/): Cross-site scripting in manageengine:supportcenter plus (medium 4.3)
- [CVE-2008-1431](https://insights.sbomify.com/CVE-2008-1431/): Information disclosure in raidsonic technology:firmware (low 2.1)
- [CVE-2008-1430](https://insights.sbomify.com/CVE-2008-1430/): SQL injection in iatek:aspapp (high 7.5)
- [CVE-2008-1429](https://insights.sbomify.com/CVE-2008-1429/): Denial of service in silc:silc-server (high 7.8)
- [CVE-2008-1428](https://insights.sbomify.com/CVE-2008-1428/): Cross-site scripting in drupal:ubercart module (medium 4.3)
- [CVE-2008-1427](https://insights.sbomify.com/CVE-2008-1427/): SQL injection in joobi:acajoom (high 7.5)
- [CVE-2008-1426](https://insights.sbomify.com/CVE-2008-1426/): SQL injection in kaphotoservice:kaphotoservice (high 7.5)
- [CVE-2008-1425](https://insights.sbomify.com/CVE-2008-1425/): SQL injection in easy-clanpage:easy-clanpage (high 7.5)
- [CVE-2008-1423](https://insights.sbomify.com/CVE-2008-1423/): Integer overflow in xiph.org:libvorbis (critical 9.3)
- [CVE-2008-1420](https://insights.sbomify.com/CVE-2008-1420/): Integer overflow in xiph.org:libvorbis (medium 6.8)
- [CVE-2008-1419](https://insights.sbomify.com/CVE-2008-1419/): Integer overflow in xiph.org:libvorbis (medium 4.3)
- [CVE-2008-1417](https://insights.sbomify.com/CVE-2008-1417/): Race condition in axyl:axyl (medium 6.9)
- [CVE-2008-1416](https://insights.sbomify.com/CVE-2008-1416/): Code injection in phpauction:phpauction gpl (medium 6.8)
- [CVE-2008-1415](https://insights.sbomify.com/CVE-2008-1415/): Path traversal in riceball:multiple time sheets (medium 5.0)
- [CVE-2008-1414](https://insights.sbomify.com/CVE-2008-1414/): Cross-site scripting in riceball:multiple time sheets (medium 4.3)
- [CVE-2008-1413](https://insights.sbomify.com/CVE-2008-1413/): Cross-site scripting in snews:snews cms rus (medium 4.3)
- [CVE-2008-1412](https://insights.sbomify.com/CVE-2008-1412/): Denial of service in f-secure:f-secure anti-virus (medium 6.8)
- [CVE-2008-1411](https://insights.sbomify.com/CVE-2008-1411/): Null dereference in acronis:snap deploy (medium 5.0)
- [CVE-2008-1410](https://insights.sbomify.com/CVE-2008-1410/): Path traversal in acronis:snap deploy (medium 4.3)
- [CVE-2008-1409](https://insights.sbomify.com/CVE-2008-1409/): Path traversal in exero:exero cms (high 7.5)
- [CVE-2008-1408](https://insights.sbomify.com/CVE-2008-1408/): SQL injection in phpbp:phpbp (high 7.5)
- [CVE-2008-1407](https://insights.sbomify.com/CVE-2008-1407/): SQL injection in exv2:exv2 (medium 6.8)
- [CVE-2008-1406](https://insights.sbomify.com/CVE-2008-1406/): SQL injection in exv2:exv2 (medium 6.8)
- [CVE-2008-1405](https://insights.sbomify.com/CVE-2008-1405/): Code injection in fuzzylime:fuzzylime (medium 6.8)
- [CVE-2008-1404](https://insights.sbomify.com/CVE-2008-1404/): SQL injection in exv2:exv2 (medium 6.8)
- [CVE-2008-1403](https://insights.sbomify.com/CVE-2008-1403/): Memory corruption in bootmanage:administrator (medium 6.8)
- [CVE-2008-1402](https://insights.sbomify.com/CVE-2008-1402/): Denial of service in mg-soft:net inspector (high 7.1)
- [CVE-2008-1401](https://insights.sbomify.com/CVE-2008-1401/): Memory corruption in mg-soft:net inspector (medium 4.3)
- [CVE-2008-1400](https://insights.sbomify.com/CVE-2008-1400/): Path traversal in mg-soft:net inspector (medium 5.0)
- [CVE-2008-1399](https://insights.sbomify.com/CVE-2008-1399/): Cross-site scripting in clansphere:clansphere (medium 4.3)
- [CVE-2008-1398](https://insights.sbomify.com/CVE-2008-1398/): SQL injection in auracms:auracms (medium 6.8)
- [CVE-2008-1397](https://insights.sbomify.com/CVE-2008-1397/): Denial of service in checkpoint:check point vpn-1 pro (medium 6.5)
- [CVE-2008-1396](https://insights.sbomify.com/CVE-2008-1396/): Plone credentials stored in session cookie (medium 4.3)
- [CVE-2008-1395](https://insights.sbomify.com/CVE-2008-1395/): Auth bypass in plone:plone cms (high 7.5)
- [CVE-2008-1394](https://insights.sbomify.com/CVE-2008-1394/): Plone CMS Improper Session Management (high 7.5)
- [CVE-2008-1393](https://insights.sbomify.com/CVE-2008-1393/): Plone Improper Session Management (critical 10.0)
- [CVE-2008-1392](https://insights.sbomify.com/CVE-2008-1392/): Misconfiguration in vmware:ace (critical 10.0)
- [CVE-2008-1391](https://insights.sbomify.com/CVE-2008-1391/): Integer overflow in freebsd:freebsd (high 7.5)
- [CVE-2008-1390](https://insights.sbomify.com/CVE-2008-1390/): Weak cryptography in asterisk:asterisk (critical 9.3)
- [CVE-2008-1389](https://insights.sbomify.com/CVE-2008-1389/): Memory corruption in clam anti-virus:clamav (medium 5.0)
- [CVE-2008-1387](https://insights.sbomify.com/CVE-2008-1387/): Denial of service in clam anti-virus:clamav (medium 4.3)
- [CVE-2008-1386](https://insights.sbomify.com/CVE-2008-1386/): Cross-site scripting in s9y:serendipity (medium 4.3)
- [CVE-2008-1385](https://insights.sbomify.com/CVE-2008-1385/): Cross-site scripting in s9y:serendipity (medium 4.3)
- [CVE-2008-1384](https://insights.sbomify.com/CVE-2008-1384/): Integer overflow in php:php (medium 5.0)
- [CVE-2008-1383](https://insights.sbomify.com/CVE-2008-1383/): Information disclosure in gentoo:linux (low 1.9)
- [CVE-2008-1382](https://insights.sbomify.com/CVE-2008-1382/): Memory corruption in libpng:libpng (high 7.5)
- [CVE-2008-1381](https://insights.sbomify.com/CVE-2008-1381/): Command injection in zoneminder:zoneminder (high 7.5)
- [CVE-2008-1380](https://insights.sbomify.com/CVE-2008-1380/): Denial of service in mozilla:firefox (critical 9.3)
- [CVE-2008-1379](https://insights.sbomify.com/CVE-2008-1379/): Integer overflow in x:x11 (medium 6.8)
- [CVE-2008-1377](https://insights.sbomify.com/CVE-2008-1377/): Memory corruption in x:x11 (critical 9.0)
- [CVE-2008-1376](https://insights.sbomify.com/CVE-2008-1376/): Security feature bypass in redhat:nfs utils (high 7.5)
- [CVE-2008-1375](https://insights.sbomify.com/CVE-2008-1375/): Race condition in canonical:ubuntu linux (medium 6.9)
- [CVE-2008-1374](https://insights.sbomify.com/CVE-2008-1374/): Integer overflow in apple:cups (medium 6.8)
- [CVE-2008-1373](https://insights.sbomify.com/CVE-2008-1373/): Memory corruption in easy software products:cups (medium 5.8)
- [CVE-2008-1372](https://insights.sbomify.com/CVE-2008-1372/): Memory corruption in bzip:bzip2 (medium 4.3)
- [CVE-2008-1371](https://insights.sbomify.com/CVE-2008-1371/): Path traversal in drake team:drake cms (low 3.6)
- [CVE-2008-1370](https://insights.sbomify.com/CVE-2008-1370/): Code injection in wildmary:yap blog (medium 6.8)
- [CVE-2008-1369](https://insights.sbomify.com/CVE-2008-1369/): Misconfiguration in sun:sunos (critical 10.0)
- [CVE-2008-1368](https://insights.sbomify.com/CVE-2008-1368/): Command injection in microsoft:internet explorer (medium 4.3)
- [CVE-2008-1367](https://insights.sbomify.com/CVE-2008-1367/): Memory corruption in gnu:gcc (high 7.5)
- [CVE-2008-1366](https://insights.sbomify.com/CVE-2008-1366/): Null dereference in trend micro:officescan corporate edition (medium 5.0)
- [CVE-2008-1365](https://insights.sbomify.com/CVE-2008-1365/): Memory corruption in trend micro:officescan corporate edition (medium 6.4)
- [CVE-2008-1364](https://insights.sbomify.com/CVE-2008-1364/): Denial of service in vmware:ace (high 7.8)
- [CVE-2008-1363](https://insights.sbomify.com/CVE-2008-1363/): Privilege escalation in vmware:ace (high 7.2)
- [CVE-2008-1362](https://insights.sbomify.com/CVE-2008-1362/): Privilege escalation in vmware:ace (high 7.2)
- [CVE-2008-1361](https://insights.sbomify.com/CVE-2008-1361/): Privilege escalation in vmware:ace (medium 6.8)
- [CVE-2008-1360](https://insights.sbomify.com/CVE-2008-1360/): Cross-site scripting in nagios:nagios (medium 4.3)
- [CVE-2008-1359](https://insights.sbomify.com/CVE-2008-1359/): Cross-site scripting in invision power services:invision power board (medium 4.3)
- [CVE-2008-1358](https://insights.sbomify.com/CVE-2008-1358/): Memory corruption in altn:mdaemon (medium 6.5)
- [CVE-2008-1357](https://insights.sbomify.com/CVE-2008-1357/): Memory corruption in mcafee:agent (medium 5.4)
- [CVE-2008-1356](https://insights.sbomify.com/CVE-2008-1356/): Auth bypass in sun:solaris (medium 6.3)
- [CVE-2008-1355](https://insights.sbomify.com/CVE-2008-1355/): Cross-site scripting in jeeblestechnology:jeebles directory (medium 4.3)
- [CVE-2008-1354](https://insights.sbomify.com/CVE-2008-1354/): SQL injection in advanced data solutions:virtual support office xp (high 7.5)
- [CVE-2008-1353](https://insights.sbomify.com/CVE-2008-1353/): Denial of service in zabbix:zabbix (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/57/