# Vulnerabilities published in 2008


- [CVE-2008-0430](https://insights.sbomify.com/CVE-2008-0430/): SQL injection in 360 web manager:360 web manager (high 7.5)
- [CVE-2008-0429](https://insights.sbomify.com/CVE-2008-0429/): SQL injection in alstrasoft:forum pay per post exchange (high 7.5)
- [CVE-2008-0428](https://insights.sbomify.com/CVE-2008-0428/): SQL injection in bloofoxcms:bloofoxcms (high 7.5)
- [CVE-2008-0427](https://insights.sbomify.com/CVE-2008-0427/): Path traversal in bloo:bloofoxcms (high 7.8)
- [CVE-2008-0426](https://insights.sbomify.com/CVE-2008-0426/): Cross-site scripting in pacercms:pacercms (medium 4.3)
- [CVE-2008-0425](https://insights.sbomify.com/CVE-2008-0425/): Path traversal in frimousse:frimousse (medium 5.0)
- [CVE-2008-0424](https://insights.sbomify.com/CVE-2008-0424/): SQL injection in mooseguy blog system:mgbs (high 7.5)
- [CVE-2008-0423](https://insights.sbomify.com/CVE-2008-0423/): Code injection in lama:lama software (medium 6.8)
- [CVE-2008-0422](https://insights.sbomify.com/CVE-2008-0422/): SQL injection in boastmachine:boastmachine (high 7.5)
- [CVE-2008-0421](https://insights.sbomify.com/CVE-2008-0421/): SQL injection in invision power services:invision gallery (high 7.5)
- [CVE-2008-0420](https://insights.sbomify.com/CVE-2008-0420/): Memory corruption in mozilla:firefox (critical 9.3)
- [CVE-2008-0419](https://insights.sbomify.com/CVE-2008-0419/): Memory corruption in mozilla:firefox (critical 9.3)
- [CVE-2008-0418](https://insights.sbomify.com/CVE-2008-0418/): Path traversal in mozilla:firefox (medium 4.3)
- [CVE-2008-0417](https://insights.sbomify.com/CVE-2008-0417/): Other in mozilla:firefox (medium 4.3)
- [CVE-2008-0416](https://insights.sbomify.com/CVE-2008-0416/): Cross-site scripting in mozilla:firefox (medium 4.3)
- [CVE-2008-0415](https://insights.sbomify.com/CVE-2008-0415/): Cross-site scripting in mozilla:firefox (medium 4.3)
- [CVE-2008-0414](https://insights.sbomify.com/CVE-2008-0414/): Security feature bypass in mozilla:firefox (medium 4.3)
- [CVE-2008-0413](https://insights.sbomify.com/CVE-2008-0413/): Memory corruption in mozilla:firefox (critical 9.3)
- [CVE-2008-0412](https://insights.sbomify.com/CVE-2008-0412/): Memory corruption in mozilla:firefox (critical 9.3)
- [CVE-2008-0411](https://insights.sbomify.com/CVE-2008-0411/): Memory corruption in ghostscript:ghostscript (medium 6.8)
- [CVE-2008-0410](https://insights.sbomify.com/CVE-2008-0410/): Information disclosure in hfs:http file server (medium 5.0)
- [CVE-2008-0409](https://insights.sbomify.com/CVE-2008-0409/): Cross-site scripting in hfs:http file server (medium 4.3)
- [CVE-2008-0408](https://insights.sbomify.com/CVE-2008-0408/): Other in hfs:http file server (medium 6.4)
- [CVE-2008-0407](https://insights.sbomify.com/CVE-2008-0407/): Other in hfs:http file server (medium 5.0)
- [CVE-2008-0406](https://insights.sbomify.com/CVE-2008-0406/): Denial of service in hfs:http file server (medium 5.0)
- [CVE-2008-0405](https://insights.sbomify.com/CVE-2008-0405/): Path traversal in hfs:http file server (critical 10.0)
- [CVE-2008-0404](https://insights.sbomify.com/CVE-2008-0404/): Cross-site scripting in mantis:mantis (medium 4.3)
- [CVE-2008-0403](https://insights.sbomify.com/CVE-2008-0403/): Missing authorization in belkin:f5d9230-4 (medium 5.5)
- [CVE-2008-0402](https://insights.sbomify.com/CVE-2008-0402/): Missing authorization in ibm:websphere business modeler (medium 6.0)
- [CVE-2008-0401](https://insights.sbomify.com/CVE-2008-0401/): Memory corruption in ibm:tivoli provisioning manager os deployment (critical 10.0)
- [CVE-2008-0400](https://insights.sbomify.com/CVE-2008-0400/): Cross-site scripting in modern:modern (medium 4.3)
- [CVE-2008-0399](https://insights.sbomify.com/CVE-2008-0399/): Memory corruption in toshiba:surveillix (medium 6.8)
- [CVE-2008-0398](https://insights.sbomify.com/CVE-2008-0398/): Cross-site scripting in aflog:aflog (medium 4.3)
- [CVE-2008-0397](https://insights.sbomify.com/CVE-2008-0397/): SQL injection in aflog.org:aflog (medium 6.8)
- [CVE-2008-0396](https://insights.sbomify.com/CVE-2008-0396/): Path traversal in bitdefender:update server (high 7.8)
- [CVE-2008-0395](https://insights.sbomify.com/CVE-2008-0395/): Information disclosure in kayako:supportsuite (medium 5.0)
- [CVE-2008-0394](https://insights.sbomify.com/CVE-2008-0394/): Memory corruption in citadel:smtp (high 7.5)
- [CVE-2008-0393](https://insights.sbomify.com/CVE-2008-0393/): Path traversal in gradman:gradman (medium 5.8)
- [CVE-2008-0392](https://insights.sbomify.com/CVE-2008-0392/): Memory corruption in microsoft:visual basic (critical 9.3)
- [CVE-2008-0391](https://insights.sbomify.com/CVE-2008-0391/): Auth bypass in alilg:alitalk (high 7.5)
- [CVE-2008-0390](https://insights.sbomify.com/CVE-2008-0390/): Code injection in auracms:auracms (high 7.5)
- [CVE-2008-0389](https://insights.sbomify.com/CVE-2008-0389/): Other in ibm:websphere application server (critical 10.0)
- [CVE-2008-0388](https://insights.sbomify.com/CVE-2008-0388/): SQL injection in wordpress:wp forum (medium 6.8)
- [CVE-2008-0387](https://insights.sbomify.com/CVE-2008-0387/): Integer overflow in firebirdsql:firebird (high 7.8)
- [CVE-2008-0386](https://insights.sbomify.com/CVE-2008-0386/): Command injection in gentoo:xdg-utils (medium 6.8)
- [CVE-2008-0385](https://insights.sbomify.com/CVE-2008-0385/): SQL injection in urulu:urulu (high 7.5)
- [CVE-2008-0384](https://insights.sbomify.com/CVE-2008-0384/): Null dereference in openbsd:openbsd (medium 4.9)
- [CVE-2008-0383](https://insights.sbomify.com/CVE-2008-0383/): SQL injection in mybb:mybb (high 7.5)
- [CVE-2008-0382](https://insights.sbomify.com/CVE-2008-0382/): Code injection in mybulletinboard:mybulletinboard (high 7.5)
- [CVE-2008-0381](https://insights.sbomify.com/CVE-2008-0381/): Cross-site scripting in mahara:mahara (medium 4.3)
- [CVE-2008-0380](https://insights.sbomify.com/CVE-2008-0380/): Memory corruption in digital data communications:rtspvapgdecoder.dll (critical 10.0)
- [CVE-2008-0379](https://insights.sbomify.com/CVE-2008-0379/): Race condition in businessobjects:crystal reports xi (critical 9.3)
- [CVE-2008-0378](https://insights.sbomify.com/CVE-2008-0378/): Memory corruption in nec:sockscap (medium 6.8)
- [CVE-2008-0377](https://insights.sbomify.com/CVE-2008-0377/): Auth bypass in news:micronews (critical 10.0)
- [CVE-2008-0376](https://insights.sbomify.com/CVE-2008-0376/): Code injection in softpedia:small axe weblog (medium 6.8)
- [CVE-2008-0375](https://insights.sbomify.com/CVE-2008-0375/): Auth bypass in oki printing solutions:c5510 mfp printer (critical 10.0)
- [CVE-2008-0374](https://insights.sbomify.com/CVE-2008-0374/): Information disclosure in oki:c5510mfp firmware (high 7.5)
- [CVE-2008-0373](https://insights.sbomify.com/CVE-2008-0373/): File upload in php:f1 maxs file uploader (high 7.5)
- [CVE-2008-0372](https://insights.sbomify.com/CVE-2008-0372/): Security feature bypass in 8e6:r3000 internet filter (medium 5.0)
- [CVE-2008-0371](https://insights.sbomify.com/CVE-2008-0371/): SQL injection in alilg:alitalk (medium 6.8)
- [CVE-2008-0370](https://insights.sbomify.com/CVE-2008-0370/): Cross-site scripting in cpanel:cpanel (medium 4.3)
- [CVE-2008-0369](https://insights.sbomify.com/CVE-2008-0369/): Privilege escalation in ibm:informix dynamic server (medium 6.9)
- [CVE-2008-0368](https://insights.sbomify.com/CVE-2008-0368/): Other in ibm:informix dynamic server (high 7.2)
- [CVE-2008-0367](https://insights.sbomify.com/CVE-2008-0367/): Information disclosure in mozilla:firefox (medium 5.0)
- [CVE-2008-0366](https://insights.sbomify.com/CVE-2008-0366/): Memory corruption in core security technologies:core force (high 7.2)
- [CVE-2008-0365](https://insights.sbomify.com/CVE-2008-0365/): Memory corruption in core security technologies:core force (high 7.2)
- [CVE-2008-0364](https://insights.sbomify.com/CVE-2008-0364/): Memory corruption in bittorrent:bittorrent (medium 5.0)
- [CVE-2008-0363](https://insights.sbomify.com/CVE-2008-0363/): SQL injection in clever copy:clever copy (high 7.5)
- [CVE-2008-0362](https://insights.sbomify.com/CVE-2008-0362/): Cross-site scripting in clever copy:clever copy (medium 4.3)
- [CVE-2008-0361](https://insights.sbomify.com/CVE-2008-0361/): Path traversal in instituto politicnico nacional:gradman (medium 4.3)
- [CVE-2008-0360](https://insights.sbomify.com/CVE-2008-0360/): SQL injection in blog cms:blog cms (high 7.5)
- [CVE-2008-0359](https://insights.sbomify.com/CVE-2008-0359/): Cross-site scripting in blog cms:blog cms (medium 4.3)
- [CVE-2008-0358](https://insights.sbomify.com/CVE-2008-0358/): SQL injection in pixelpost:pixelpost (medium 6.8)
- [CVE-2008-0357](https://insights.sbomify.com/CVE-2008-0357/): Path traversal in galaxyscripts:mini file host (medium 4.3)
- [CVE-2008-0356](https://insights.sbomify.com/CVE-2008-0356/): Memory corruption in citrix:access essentials (critical 10.0)
- [CVE-2008-0355](https://insights.sbomify.com/CVE-2008-0355/): SQL injection in phpecho cms:phpecho cms (high 7.5)
- [CVE-2008-0354](https://insights.sbomify.com/CVE-2008-0354/): Cross-site scripting in ibm:lotus sametime (medium 4.3)
- [CVE-2008-0353](https://insights.sbomify.com/CVE-2008-0353/): SQL injection in php-residence:php-residence (high 7.5)
- [CVE-2008-0352](https://insights.sbomify.com/CVE-2008-0352/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2008-0351](https://insights.sbomify.com/CVE-2008-0351/): Security feature bypass in evilsentinel:evilsentinel (medium 5.0)
- [CVE-2008-0350](https://insights.sbomify.com/CVE-2008-0350/): Auth bypass in evilsentinel:evilsentinel (high 7.5)
- [CVE-2008-0349](https://insights.sbomify.com/CVE-2008-0349/): Other in oracle:application server (critical 10.0)
- [CVE-2008-0348](https://insights.sbomify.com/CVE-2008-0348/): Other in oracle:application server (critical 10.0)
- [CVE-2008-0347](https://insights.sbomify.com/CVE-2008-0347/): Other in oracle:application server (critical 10.0)
- [CVE-2008-0346](https://insights.sbomify.com/CVE-2008-0346/): Other in oracle:application server (critical 10.0)
- [CVE-2008-0345](https://insights.sbomify.com/CVE-2008-0345/): Other in oracle:application server (critical 10.0)
- [CVE-2008-0344](https://insights.sbomify.com/CVE-2008-0344/): Other in oracle:application server (critical 10.0)
- [CVE-2008-0343](https://insights.sbomify.com/CVE-2008-0343/): Other in oracle:application server (critical 10.0)
- [CVE-2008-0342](https://insights.sbomify.com/CVE-2008-0342/): Other in oracle:database server (critical 10.0)
- [CVE-2008-0341](https://insights.sbomify.com/CVE-2008-0341/): Other in oracle:database server (critical 10.0)
- [CVE-2008-0340](https://insights.sbomify.com/CVE-2008-0340/): Other in oracle:application server (critical 10.0)
- [CVE-2008-0339](https://insights.sbomify.com/CVE-2008-0339/): Other in oracle:database server (critical 10.0)
- [CVE-2008-0338](https://insights.sbomify.com/CVE-2008-0338/): Path traversal in miniweb http server:miniweb http server (medium 5.0)
- [CVE-2008-0337](https://insights.sbomify.com/CVE-2008-0337/): Memory corruption in miniweb http server:miniweb http server (high 7.5)
- [CVE-2008-0336](https://insights.sbomify.com/CVE-2008-0336/): Cross-site request forgery in bugtracker.net:bugtracker.net (medium 4.3)
- [CVE-2008-0335](https://insights.sbomify.com/CVE-2008-0335/): Cross-site scripting in bugtracker.net:bugtracker.net (medium 4.3)
- [CVE-2008-0334](https://insights.sbomify.com/CVE-2008-0334/): Cross-site scripting in pmachine:pmachine pro (low 2.6)
- [CVE-2008-0333](https://insights.sbomify.com/CVE-2008-0333/): Path traversal in afterlogic:mailbee webmail pro (medium 5.0)
- [CVE-2008-0332](https://insights.sbomify.com/CVE-2008-0332/): Path traversal in aria:aria (medium 5.0)
- [CVE-2008-0331](https://insights.sbomify.com/CVE-2008-0331/): Denial of service in funkwerk:system software (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2008/page/67/