CVEs published in April 2008
453 vulnerabilities, 89 critical, 0 exploited.
- pragmaticutopia com puarcadeSQL injection vulnerability in puarcade.class.php 2.2 and earlier in the Pragmatic Utopia PU...7.5 High
- predictionfootballSQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows...7.5 High
- 3281d simple accessThe Simple Access module for Drupal 5.x through 5.x-1.2-2 does not properly handle the privacy...7.5 High
- arwscripts gallery script liteDirectory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery...5.0 Medium
- drupalThe menu system in Drupal 6 before 6.2 has incorrect menu settings, which allows remote attackers...5.8 Medium
- ignite realtime openfireIgnite Realtime Openfire allows remote authenticated users to cause a denial of service4.0 Medium
- myknowledgequest knowledgequestKnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which...7.5 High
- myknowledgequest knowledgequestMultiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled,...6.8 Medium
- nsoftware ibiz e-banking integratorThe IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator ...9.0 High
- tumbleweed securetransport server appStack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport...9.3 High
- tibco enterprise message service, iprocess engine +1 moreMultiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and...10.0 High
- tibco rendezvous, adapter files z os, hawk +5 more +7 moreMultiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO...9.3 High
- freedesktop policykitFormat string vulnerability in the grant helper (polkit-grant-helper.c) in PolicyKit 0.7 and...4.6 Medium
- cupsMultiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3...4.3 Medium
- python, canonical ubuntu linux, debian linux +2 moreInteger signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote...7.5 High
- truzone nuke etMultiple cross-site request forgery (CSRF) vulnerabilities in Nuke ET 3.2 and 3.4 allow remote...6.8 Medium
- autonomy keyview, ibm lotus notes +1 moreBuffer overflow in mimesr.dll in Autonomy (formerly Verity) KeyView, as used in IBM Lotus Notes...9.3 High
- autonomy keyview, ibm lotus notes +1 moreBuffer overflow in kvdocve.dll in the KeyView document viewing engine in Autonomy (formerly...9.3 High
- autonomy keyview, ibm lotus notes +1 moreMultiple buffer overflows in htmsr.dll in the HTML speed reader in Autonomy (formerly Verity)...9.3 High
- activepdf docconverter, autonomy keyview, ibm lotus notes +2 more +4 moreMultiple stack-based buffer overflows in foliosr.dll in the Folio Flat File speed reader in...9.3 High
- autonomy keyview, ibm lotus notes, symantec mail security +2 morekpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in Autonomy (formerly Verity)...9.3 High
- activepdf docconverter, autonomy keyview, ibm lotus notes +2 more +4 moreMultiple buffer overflows in kpagrdr.dll 2.0.0.2 and 10.3.0.0 in the Applix Presents reader in...9.3 High
- autonomy keyview, ibm lotus notes +1 moreMultiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy (formerly Verity)...9.3 High
- samba rsyncBuffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might...7.5 High
- woltlab burning boardWoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to...5.0 Medium
- woltlab burning boardCross-site scripting (XSS) vulnerability in WoltLab Community Framework (WCF) 1.0.6 in WoltLab...4.3 Medium
- auracmsSQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when...6.8 Medium
- fascript faphotoSQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is...6.8 Medium
- noticeware email serverMailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of...5.0 Medium
- mx-system mxbbPHP remote file inclusion vulnerability in includes/functions_weblog.php in mxBB mx_blogs 2.0.0...7.5 High
- adobe flash player, air, flex +2 moreUnspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier,...4.3 Medium
- adobe flash, flash player, air +1 more +3 moreAdobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to...9.3 High
- adobe flash playerInteger overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows...9.3 High
- terong advanced web photo galleryTerong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 stores passwords in cleartext in a...5.0 Medium
- ibm aixUntrusted search path vulnerability in chnfsmnt in IBM AIX 6.1 allows local users to gain...7.2 High
- microsoft visual interdevBuffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute...9.3 High
- ibm soliddbIBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of...4.3 Medium
- ibm soliddbIBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (NULL...4.3 Medium
- ibm soliddbUncontrolled array index in IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a...4.3 Medium
- ibm soliddbFormat string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows...6.8 Medium
- gnu m4Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to...7.5 High
- gnu m4The (1) maketemp and (2) mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their...7.5 High
- adobe coldfusionAdobe ColdFusion 8 and 8.0.1 does not properly implement the public access level for CFC methods,...7.5 High
- microsoft visio, office +1 moreUnspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1...9.3 High
- microsoft visio, office +1 moreUnspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1...9.3 High
- microsoft projectMicrosoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote...9.3 High
- microsoft windows 2000, windows-nt, windows 2003 server +2 more +4 moreStack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2...9.3 High
- microsoft internet explorer, windows xp, windows-nt +2 more +4 moreThe HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6...9.3 High
- microsoft internet explorer, ie +1 moreUse-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows...9.3 High
- microsoft windows 2000, windows 2003 server, windows server 2008 +2 more +4 moreUnspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1...7.2 High
- Show moreLoading…