CVEs published in April 2008
453 vulnerabilities, 89 critical, 0 exploited.
- apache-sslThe ExpandCert function in Apache-SSL before apache_1.3.41+ssl_1.59 does not properly handle (1) ...7.5 High
- revenera installshieldThe Macrovision InstallShield InstallScript One-Click Install (OCI) ActiveX control 12.0 before...9.3 High
- alcatel-lucent omnipcx officecgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001...10.0 High
- openbsd opensshOpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config...6.5 Medium
- adobe flash playerInteraction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow...4.3 Medium
- savas place link managerDirectory traversal vulnerability in index.php in Sava's Link Manager 2.0 allows remote attackers...6.8 Medium
- perlbalDirectory traversal vulnerability in the _serve_request_multiple function in lib/Perlbal...5.0 Medium
- myiosoft easynewsDirectory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to...7.5 High
- myiosoft easynewsSQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to...7.5 High
- myiosoft easynewsCross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews 4.0...4.3 Medium
- sympaSympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e...5.0 Medium
- chilkat software chilkathttp activexThe ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in...9.3 High
- arnos toolbox wp-download, wordpress wp download +1 moreSQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows...7.5 High
- guillaume meister php spammanagerDirectory traversal vulnerability in body.php in phpSpamManager (phpSM) 0.53 beta allows remote...7.5 High
- savas place link managerSQL injection vulnerability in viewlinks.php in Sava's Link Manager 2.0 allows remote attackers...7.5 High
- landesk software management suiteDirectory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management...5.0 Medium
- savas place guestbookDirectory traversal vulnerability in index.php in Sava's GuestBook 2.0 allows remote attackers to...7.5 High
- efestech videoSQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to...7.5 High
- jgs-xa jgs treffenSQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon...7.5 High
- neat web neat-webSQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute...7.5 High
- nik software inc sharpener proNik Sharpener Pro, possibly 2.0, uses world-writable permissions for plug-in files, which allows...6.8 Medium
- powerdns recursorPowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2)...6.8 Medium
- jv2 quick galleryCross-site scripting (XSS) vulnerability in index.php in JV2 Quick Gallery 1.1 allows remote...4.3 Medium
- raven php scripts keep it simple guest bookDirectory traversal vulnerability in view_private.php in Keep It Simple Guest Book (KISGB) 5.0.0...7.5 High
- jv2 folder galleryCross-site scripting (XSS) vulnerability in index.php in JV2 Folder Gallery 3.1 allows remote...4.3 Medium
- mondo rescueUnspecified vulnerability in Mondo Rescue before 2.2.5 has unknown impact and attack vectors,...10.0 High
- emedia office gmbh cuteflowMultiple SQL injection vulnerabilities in CuteFlow 2.10.0 allow remote authenticated users to...7.5 High
- emedia office gmbh cuteflowSQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to...7.5 High
- emedia office gmbh cuteflowMultiple cross-site scripting (XSS) vulnerabilities in CuteFlow 1.5.0 and 2.10.0 allow remote...4.3 Medium
- pau rodriguez phpkrmCross-site scripting (XSS) vulnerability in PHPkrm before 1.5.0 allows remote attackers to inject...4.3 Medium
- linux auditStack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in...4.1 Medium
- cds software consortium invenioCDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification...3.5 Low
- eggblogSQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary...7.5 High
- avast antivirus home, antivirus professional +1 moreaavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to...6.8 Medium
- whorl ltd jshop serverDirectory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows...7.5 High
- lotus web studios inc smoothflashSQL injection vulnerability in admin_view_image.php in Smoothflash allows remote attackers to...7.5 High
- geertsen holdings inc geecartsMultiple PHP remote file inclusion vulnerabilities in GeeCarts allow remote attackers to execute...6.8 Medium
- geertsen holdings inc geecartsMultiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject...4.3 Medium
- 2x thinclientserverDirectory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X...7.5 High
- pierreegougelet xnviewStack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to...6.8 Medium
- xensource inc xenThe ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of...4.3 Medium
- sebastian marsching suphpsuPHP before 0.6.3 allows local users to gain privileges via (1) a race condition that involves...4.3 Medium
- squidThe arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial...4.3 Medium
- otrsThe SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to ...6.4 Medium
- tftp-server winagents tftp serverStack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a...10.0 High
- tallsoft quick tftp server proStack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to...7.5 High
- jaf cms cmsMultiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2...6.8 Medium
- clever copy copySQL injection vulnerability in postview.php in Clever Copy 3.0 allows remote attackers to execute...7.5 High
- serby arslanhan bomba haberSQL injection vulnerability in haberoku.php in Serbay Arslanhan Bomba Haber 2.0 allows remote...6.8 Medium
- elastic path pathMultiple directory traversal vulnerabilities in Elastic Path (EP) 4.1 and 4.1.1 allow remote...6.0 Medium
- Show moreLoading…