Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
April

CVEs published in April 2008

453 vulnerabilities, 89 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

divx divxdbMultiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow...CVE-2008-1800Public exploit4.3 MediumApril 15, 2008
sabros.usDirectory traversal vulnerability in thumbnails.php in sabros.us 1.75 allows remote attackers to...CVE-2008-1799Public exploit5.0 MediumApril 15, 2008
dragoonDirectory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote...CVE-2008-1798Public exploit7.5 HighApril 15, 2008
secure computing webwasherUnspecified vulnerability in Secure Computing Webwasher 5.30 before build 3159 and 6.3.0 before...CVE-2008-17977.1 HighApril 15, 2008
comixComix 3.6.4 creates temporary directories with predictable names, which allows local users to...CVE-2008-17964.9 MediumApril 15, 2008
blackboard academic suiteMultiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier,...CVE-2008-1795Public exploit4.3 MediumApril 15, 2008
drupal webform moduleMultiple cross-site scripting (XSS) vulnerabilities in the Webform Drupal module 5.x before 5.x-1...CVE-2008-17944.3 MediumApril 15, 2008
hoffice smart classified ads, smart photo ads, smart photo ads gold +2 moreMultiple cross-site scripting (XSS) vulnerabilities in view.cgi in Smart Classified ADS...CVE-2008-17934.3 MediumApril 15, 2008
drupalr flickrCross-site scripting (XSS) vulnerability in the insertion filter in the Flickr Drupal module 5.x...CVE-2008-17924.3 MediumApril 15, 2008
mygamingladderSQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote...CVE-2008-1791Public exploit7.5 HighApril 15, 2008
iscripts socialwareUnrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated...CVE-2008-1790Public exploit6.5 MediumApril 15, 2008
prozilla forumSQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute...CVE-2008-1789Public exploit6.8 MediumApril 15, 2008
prozilla entertainersSQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows...CVE-2008-1788Public exploit7.5 HighApril 15, 2008
poplar gedcom viewer gedcom viewerMultiple cross-site scripting (XSS) vulnerabilities in index.php in Poplar Gedcom Viewer 2.0...CVE-2008-1787Public exploit4.3 MediumApril 15, 2008
prozilla top 100delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and...CVE-2008-1785Public exploit5.5 MediumApril 15, 2008
prozilla topsitesProzilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct...CVE-2008-1784Public exploit7.5 HighApril 15, 2008
prozilla reviewsProzilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID...CVE-2008-1783Public exploit6.4 MediumApril 15, 2008
advanced software engineering chartdirectorphpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers...CVE-2008-1782Public exploit5.0 MediumApril 15, 2008
sun solarisUnspecified vulnerability in the labeled networking functionality in Solaris 10 Trusted...CVE-2008-17804.6 MediumApril 14, 2008
sun solarisSun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service (panic)...CVE-2008-17796.8 MediumApril 14, 2008
sun sunosUnspecified vulnerability in the floating point context switch implementation in Sun Solaris 9...CVE-2008-17786.6 MediumApril 14, 2008
novell edirectoryThe eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote...CVE-2008-17775.0 MediumApril 14, 2008
phpblockPHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock...CVE-2008-1776Public exploitEPSS 26.6%6.8 MediumApril 14, 2008
manageengine firewall analyzerCross-site scripting (XSS) vulnerability in mindex.do in ManageEngine Firewall Analyzer 4.0.3...CVE-2008-17753.5 LowApril 14, 2008
libpnglibpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows...CVE-2008-13827.5 HighApril 14, 2008
clam anti-virus clamavBuffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92...CVE-2008-1100Fix availableEPSS 10.9%10.0 HighApril 14, 2008
emc diskxtenderFormat string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated...CVE-2008-09639.0 HighApril 14, 2008
emc diskxtenderStack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote...CVE-2008-09629.0 HighApril 14, 2008
emc diskxtenderEMV DiskXtender 6.20.060 has a hard-coded login and password, which allows remote attackers to...CVE-2008-09619.8 CriticalApril 14, 2008
microsoft windows-ntdhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a...CVE-2008-0927Public exploitEPSS 70.0%5.0 MediumApril 14, 2008
pligg cmsSQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute...CVE-2008-1774Public exploit7.5 HighApril 14, 2008
dragoonPHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote...CVE-2008-1773Public exploitEPSS 26.6%6.8 MediumApril 14, 2008
iscripts socialwareiScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent...CVE-2008-1772Public exploit5.0 MediumApril 14, 2008
phpbbMultiple unspecified vulnerabilities in phpBB before 3.0.1 have unknown impact and attack vectors...CVE-2008-176610.0 HighApril 12, 2008
operaUnspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to ...CVE-2008-17649.3 HighApril 12, 2008
blogator script scriptSQL injection vulnerability in _blogadata/include/sond_result.php in Blogator-script 0.95 allows...CVE-2008-1763Public exploit7.5 HighApril 12, 2008
opera browserOpera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly...CVE-2008-1762Public exploit9.3 HighApril 12, 2008
operaOpera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly...CVE-2008-17619.3 HighApril 12, 2008
blogator-scriptMultiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote...CVE-2008-1760Public exploit6.8 MediumApril 12, 2008
jeuxflash module, kwsphp +1 moreSQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute...CVE-2008-1759Public exploit7.5 HighApril 12, 2008
kwsphpSQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to...CVE-2008-1758Public exploit7.5 HighApril 12, 2008
kwsphpCross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0...CVE-2008-1757Public exploit4.3 MediumApril 12, 2008
kernel linux kernelInteger overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel 2.6.21-rc4, when...CVE-2007-67124.9 MediumApril 12, 2008
sun n1 grid engineUnspecified vulnerability in the Qmaster daemon in Sun N1 Grid Engine 6.1 allows local users to...CVE-2008-17564.9 MediumApril 11, 2008
zekewalker world of phaosDirectory traversal vulnerability in the showSource function in showSource.php in World of Phaos...CVE-2008-1755Public exploit5.0 MediumApril 11, 2008
symantec altiris deployment solutionSymantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka...CVE-2008-17541.7 LowApril 11, 2008
alkacon opencmsAlkacon OpenCMS XSS via searchfilter parameter in system/workplace/admin/workplace/sessions.jspCVE-2008-1753Fix available4.3 MediumApril 11, 2008
achmad zaenuri ezradiusezRADIUS 0.1 stores sensitive information under the web root with insufficient access control,...CVE-2008-17527.5 HighApril 11, 2008
ksemailMultiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to...CVE-2008-1751Public exploit6.8 MediumApril 11, 2008
livecartSQL injection vulnerability in Integry Systems LiveCart 1.1.1 and earlier allows remote attackers...CVE-2008-1750Public exploit7.5 HighApril 11, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open