Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
April

CVEs published in April 2008

453 vulnerabilities, 89 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

redhat directory serverRed Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not...CVE-2008-08937.5 HighApril 16, 2008
redhat directory server, fedora directory server +1 moreThe replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as...CVE-2008-0892Fix availableEPSS 14.0%9.0 HighApril 16, 2008
hp openview network node managerDirectory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7...CVE-2008-0068Public exploit5.0 MediumApril 16, 2008
ibm db2 universal databaseStack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2...CVE-2007-57586.9 MediumApril 16, 2008
ibm db2 universal databasedb2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix...CVE-2007-56646.9 MediumApril 16, 2008
osiaffiliateMultiple cross-site scripting (XSS) vulnerabilities in login.php in Omnistar Interactive OSI...CVE-2008-18504.3 MediumApril 16, 2008
joomlacode joomlaexplorerDirectory traversal vulnerability in index.php in the joomlaXplorer (com_joomlaxplorer) Mambo...CVE-2008-1849Public exploit5.0 MediumApril 16, 2008
joomlacode joomlaexplorerCross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla!...CVE-2008-1848Public exploit4.3 MediumApril 16, 2008
coronamatrix phpaddressbookSQL injection vulnerability in view.php in CoronaMatrix phpAddressBook 2.11 allows remote...CVE-2008-1847Public exploit7.5 HighApril 16, 2008
sap netweaverThe default configuration of SAP NetWeaver before 7.0 SP15 does not enable the "Always Use Secure...CVE-2008-18464.3 MediumApril 16, 2008
mirbsd mirosThe Korn shell (aka mksh) before R33d on MirOS (aka MirBSD) does not flush the tty's I/O when...CVE-2008-1845Fix available7.2 HighApril 16, 2008
w2b phphotresourcesSQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute...CVE-2008-1844Public exploit7.5 HighApril 16, 2008
w2b dating clubSQL injection vulnerability in browse.php in W2B DatingClub (aka Dating Club) allows remote...CVE-2008-1843Public exploit7.5 HighApril 16, 2008
hp openview network node managerInteger signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7...CVE-2008-1842Public exploitEPSS 12.2%10.0 HighApril 16, 2008
coppermine photo gallerySQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in...CVE-2008-18416.8 MediumApril 16, 2008
coppermine photo gallerySQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier...CVE-2008-18406.5 MediumApril 16, 2008
work system e-commerce system e-commerceMultgiple cross-site scripting (XSS) vulnerabilities in module/main.php in WORK system e-commerce...CVE-2008-18394.3 MediumApril 16, 2008
bosdev bosclassifieds ads systemsSQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers...CVE-2008-1838Public exploit7.5 HighApril 16, 2008
computer associates desktop and server management, desktop management suite, arcserve backup laptops and desktops +4 more +6 moreThe DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products...CVE-2008-17869.3 HighApril 16, 2008
cisco network admission controlCisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6,...CVE-2008-115510.0 HighApril 16, 2008
clam anti-virus clamavlibclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash)...CVE-2008-18375.0 MediumApril 16, 2008
clam anti-virus clamavThe rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to...CVE-2008-18364.3 MediumApril 16, 2008
clam anti-virus clamavClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an...CVE-2008-18355.0 MediumApril 16, 2008
swfdecswfdec_load_object.c in Swfdec before 0.6.4 does not properly restrict local file access from...CVE-2008-18344.3 MediumApril 16, 2008
clam anti-virus clamavClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a...CVE-2008-1387Fix available4.3 MediumApril 16, 2008
clam anti-virus clamavHeap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to...CVE-2008-1833Fix available7.5 HighApril 16, 2008
cecilialib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink...CVE-2008-1832Fix available3.3 LowApril 16, 2008
fireflymediaserverInteger overflow in the ws_getpostvars function in Firefly Media Server (formerly mt-daapd) 0.2.4...CVE-2008-17717.5 HighApril 16, 2008
clam anti-virus clamavHeap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to...CVE-2008-0314Fix available7.5 HighApril 16, 2008
oracle siebel enterpriseMultiple unspecified vulnerabilities in the Siebel SimBuilder component in Oracle Siebel...CVE-2008-183110.0 HighApril 16, 2008
jdedwards enterpriseone, oracle peoplesoft hcm eperformance +1 moreUnspecified vulnerability in the PeopleSoft HCM ePerformance component in Oracle PeopleSoft...CVE-2008-18309.0 HighApril 16, 2008
oracle enterpriseone, peoplesoft enterprise +1 moreUnspecified vulnerability in the PeopleSoft HCM Recruiting component in Oracle PeopleSoft...CVE-2008-18299.0 HighApril 16, 2008
jdedwards enterpriseone, oracle peoplesoft enterprise +1 moreUnspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise...CVE-2008-18289.0 HighApril 16, 2008
oracle e-business suite 11i, e-business suite 12 +1 moreMultiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 and 12.0.4 have unknown...CVE-2008-182710.0 HighApril 16, 2008
oracle e-business suiteMultiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 have unknown impact and...CVE-2008-182610.0 HighApril 16, 2008
oracle application server 9iUnspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 has...CVE-2008-182510.0 HighApril 16, 2008
oracle application serverUnspecified vulnerability in the Oracle Dynamic Monitoring Service component in Oracle...CVE-2008-182410.0 HighApril 16, 2008
oracle jinitiatorUnspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1...CVE-2008-182310.0 HighApril 16, 2008
oracle application expressUnspecified vulnerability in the Oracle Application Express component in Oracle Application...CVE-2008-182210.0 HighApril 16, 2008
oracle database serverUnspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+, and...CVE-2008-18219.0 HighApril 16, 2008
oracle database 10g, database 11g, database 9i +2 moreUnspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0...CVE-2008-18204.0 MediumApril 16, 2008
oracle database 9i, database server +1 moreUnspecified vulnerability in the Oracle Net Services component in Oracle Database 9.2.0.8, 10.1.0...CVE-2008-18197.2 HighApril 16, 2008
oracle database serverUnspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown...CVE-2008-181810.0 HighApril 16, 2008
oracle database 9i, database server +1 moreMultiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0...CVE-2008-18179.0 HighApril 16, 2008
oracle database serverMultiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 have unknown impact...CVE-2008-18165.5 MediumApril 16, 2008
oracle database 10g, database 11g +1 moreUnspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2...CVE-2008-18155.5 MediumApril 16, 2008
oracle application server, collaboration suite, database +2 moreUnspecified vulnerability in the Oracle Secure Enterprise Search or Ultrasearch component in...CVE-2008-18149.0 HighApril 16, 2008
oracle database 9i, database server +1 moreMultiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0...CVE-2008-18136.5 MediumApril 16, 2008
oracle application server, database 9i +1 moreUnspecified vulnerability in the Oracle Enterprise Manager component in Oracle Database 9.0.1.5...CVE-2008-181210.0 HighApril 16, 2008
oracle application expressUnspecified vulnerability in Oracle Application Express 3.0.1 has unspecified impact and remote...CVE-2008-18115.5 MediumApril 16, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open