CVEs published in April 2008
453 vulnerabilities, 89 critical, 0 exploited.
- egroupware Multiple unspecified vulnerabilities in eGroupWare before 1.4.004 have unspecified attack vectors... 10.0 High
- peercast Stack-based buffer overflow in the HTTP::getAuthUserPass function (core/common/http.cpp) in... 7.5 High
- turnkey solutions sunshop shopping cart Multiple SQL injection vulnerabilities in admin/adminindex.php in Turnkey Web Tools SunShop... 6.5 Medium
- editeurscripts escontacts Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0 allow remote... 3.5 Low
- dream4 koobi SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to... 7.5 High
- bluemoon backpack, bmsurvey, popnupblog +4 more +6 more Cross-site scripting (XSS) vulnerability in the Bluemoon, Inc. (1) BackPack 0.91 and earlier, (2)... 4.3 Medium
- wordpress download monitor plugin SQL injection vulnerability in wp-download_monitor/download.php in the Download Monitor 2.0.6... 7.5 High
- acritum femitter server The FTP service in Acritum Femitter Server 1.03 allows remote attackers to cause a denial of... 5.0 Medium
- vicftps VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a crafted LIST... 5.0 Medium
- f5 firepass 4100, firepass ssl vpn +1 more Cross-site scripting (XSS) vulnerability in installControl.php3 in F5 FirePass 4100 SSL VPN 5.4.2... 4.3 Medium
- minibb Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB... 6.8 Medium
- minibb miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to... 4.3 Medium
- rsa authentication agent Open redirect vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258 for... 5.8 Medium
- rsa authentication agent Cross-site scripting (XSS) vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5... 4.3 Medium
- minibb Cross-site scripting (XSS) vulnerability in index.php in miniBB 2.2, and possibly earlier, when... 4.3 Medium
- pd9 software megabbs Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to... 7.5 High
- pd9 software megabbs Mulatiple cross-site scripting (XSS) vulnerabilities in PD9 Software MegaBBS 2.2 allow remote... 4.3 Medium
- lhaplus Heap-based buffer overflow in Lhaplus before 1.57 allows remote attackers to execute arbitrary... 7.5 High
- e107, labgab, my123tkshop e-commerce-suite +5 more +7 more The CAPTCHA implementation as used in (1) Francisco Burzi PHP-Nuke 7.0 and 8.1, (2) my123tkShop e... 7.5 High
- simple machines smf Simple Machines Forum (SMF), probably 1.1.4, relies on "randomly generated static" to hinder... 7.5 High
- phpizabi The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro... 4.0 Medium
- chilkat software chicomas Directory traversal vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows... 7.5 High
- chilkat software chicomas PHP remote file inclusion vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4... 7.5 High
- watchfire appscan Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan... 9.3 High
- mozilla firefox Mozilla Firefox 3.0 beta 5 allows remote attackers to cause a denial of service (application... 5.0 Medium
- pnflashgames SQL injection vulnerability in index.php in the pnFlashGames 1.5 through 2.5 module for PostNuke,... 6.8 Medium
- postnuke software foundation postschedule SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows... 7.5 High
- national rail enquiries live departure boards Cross-site scripting (XSS) vulnerability in the National Rail Enquiries Live Departure Boards... 4.3 Medium
- apple quicktime Unspecified vulnerability in Apple QuickTime Player on Windows XP SP2 and Vista SP1 allows remote... 9.3 High
- rising-global rising antivirus Rising Antivirus 2008 before 20.38.20 allows local users to cause a denial of service (system... 2.1 Low
- sophos anti-virus Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled,... 6.9 Medium
- comodo personal firewall Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System... 7.2 High
- bitdefender antivirus BitDefender Antivirus 2008 20080118 and earlier allows local users to cause a denial of service ... 4.9 Medium
- cerulean studios trillian Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3... 9.3 High
- badblue BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient... 7.5 High
- motorola surfboard Multiple cross-site request forgery (CSRF) vulnerabilities on Motorola Surfboard with software... 7.8 High
- apple safari Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via a... 4.3 Medium
- apple safari Unspecified vulnerability in Apple Safari 3.1.1 allows remote attackers to cause a denial of... 4.3 Medium
- apple safari Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible"... 5.0 Medium
- ibm db2 The NNSTAT (aka SYSPROC.NNSTAT) procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5... 8.5 High
- ibm db2 Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a,... 9.0 High
- licq licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor... 5.0 Medium
- wordpress The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string... 7.5 High
- blender Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related... 6.9 Medium
- sun java system directory server Sun Java System Directory Proxy Server 6.0, 6.1, and 6.2 classifies a connection using the "bind... 7.5 High
- kde start_kdeinit in KDE 3.5.5 through 3.5.9, when installed setuid root, allows local users to cause... 4.6 Medium
- kde Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML... 9.3 High
- ahmed abdel-hamid mohamed acon Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5... 7.2 High
- acidcat cms Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote... 7.5 High
- acidcat cms Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2)... 7.5 High
- Show olderLoading…