Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
April

CVEs published in April 2008

453 vulnerabilities, 89 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

azrul jom commentSQL injection vulnerability in the Jom Comment 2.0 build 345 component for Joomla! allows remote...CVE-2008-18907.5 HighApril 18, 2008
xplodphp autotutorialsSQL injection vulnerability in viewcat.php in XplodPHP AutoTutorials 2.1 and earlier, when...CVE-2008-1889Public exploit7.5 HighApril 18, 2008
microsoft sharepoint serverCross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows...CVE-2008-1888Public exploit4.3 MediumApril 18, 2008
python, canonical ubuntu linux, debian linux +2 morePython 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via...CVE-2008-18879.3 HighApril 18, 2008
cdnetworks download clientThe NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download...CVE-2008-1886Public exploit7.5 HighApril 18, 2008
cdnetworks download clientDirectory traversal vulnerability in the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll)...CVE-2008-1885Public exploit6.8 MediumApril 18, 2008
wikepage opusDirectory traversal vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote attackers...CVE-2008-18845.0 MediumApril 18, 2008
blackboard academic suiteThe server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly...CVE-2008-18836.8 MediumApril 18, 2008
gentoo php toolkitInterpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux might allow local users to...CVE-2008-17343.6 LowApril 18, 2008
videolan vlcStack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e...CVE-2008-1881Public exploitFix availableEPSS 11.8%6.8 MediumApril 17, 2008
xine xine-libStack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in...CVE-2008-1878Public exploitEPSS 15.0%7.5 HighApril 17, 2008
mozilla firefoxMozilla Firefox allows remote attackers to cause a denial of service (crash) via crafted image,...CVE-2007-67154.3 MediumApril 17, 2008
dbmailDBMail before 2.2.9, when using authldap with an LDAP server that supports anonymous login such...CVE-2007-67146.8 MediumApril 17, 2008
debian tsstss 0.8.1 allows local users to read arbitrary files via the -a parameter, which is processed...CVE-2008-18772.1 LowApril 17, 2008
snarky visualpicPHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers...CVE-2008-1876Public exploitEPSS 27.6%6.8 MediumApril 17, 2008
terong advanced web photo gallerySQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo...CVE-2008-1875Public exploit7.5 HighApril 17, 2008
xpoze proSQL injection vulnerability in account/user/mail.html in Xpoze Pro 3.05 and earlier allows remote...CVE-2008-1874Public exploit6.5 MediumApril 17, 2008
tru-zone nukeetCross-site scripting (XSS) vulnerability in the private message feature in Nuke ET 3.2 and 3.4,...CVE-2008-1873Public exploit4.3 MediumApril 17, 2008
comdev news publisherSQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote...CVE-2008-1872Public exploit7.5 HighApril 17, 2008
scriptsagent links directorySQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote...CVE-2008-1871Public exploit6.5 MediumApril 17, 2008
geek247 pigmy-sqlSQL injection vulnerability in getdata.php in PIGMy-SQL 1.4.1 and earlier allows remote attackers...CVE-2008-1870Public exploit7.5 HighApril 17, 2008
site sift media sift listingsSQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary...CVE-2008-1869Public exploit7.5 HighApril 17, 2008
pixel motion blogadmin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication,...CVE-2008-1868Public exploit7.5 HighApril 17, 2008
pixel motion blogSQL injection vulnerability in Blog Pixel Motion (aka Blog PixelMotion) allows remote attackers...CVE-2008-1867Public exploit7.5 HighApril 17, 2008
pixel motion blogadmin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin...CVE-2008-1866Public exploit9.0 HighApril 17, 2008
openmosix project openmosixStack-based buffer overflow in the msx_readnode function in libmosix.c in openmosix-tools (aka...CVE-2008-18651.9 LowApril 17, 2008
prozilla freelancersSQL injection vulnerability in project.php in Prozilla Freelancers allows remote attackers to...CVE-2008-1864Public exploit7.5 HighApril 17, 2008
prozilla cheatsSQL injection vulnerability in view_reviews.php in Prozilla Cheat Script (aka Cheats) 2.0 allows...CVE-2008-1863Public exploit7.5 HighApril 17, 2008
mozilla firefox, seamonkey, thunderbird +2 moreThe JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and...CVE-2008-1380Fix available9.3 HighApril 17, 2008
apple safariInteger overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp)...CVE-2008-10266.8 MediumApril 17, 2008
apple safari, webkit +1 moreCross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows...CVE-2008-10254.3 MediumApril 17, 2008
apple safariApple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause...CVE-2008-10246.8 MediumApril 17, 2008
exbb italiaExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path...CVE-2008-1862Public exploit6.8 MediumApril 17, 2008
exbb italiaDirectory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and...CVE-2008-1861Public exploit5.1 MediumApril 17, 2008
lokicmsStatic code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote...CVE-2008-1860Public exploit9.3 HighApril 17, 2008
popplerThe CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used...CVE-2008-1693Fix available6.8 MediumApril 17, 2008
openoffice openoffice.orgHeap-based buffer overflow in the OLE importer in OpenOffice.org before 2.4 allows remote...CVE-2008-0320Public exploitEPSS 56.9%9.3 HighApril 17, 2008
sun openoffice.orgInteger underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of...CVE-2007-57476.8 MediumApril 17, 2008
openoffice openoffice.orgInteger overflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of...CVE-2007-57466.8 MediumApril 17, 2008
openofficeMultiple heap-based buffer overflows in OpenOffice.org before 2.4 allow remote attackers to cause...CVE-2007-57456.8 MediumApril 17, 2008
flip4mac wmvUnspecified vulnerability in Flip4Mac WMV before 2.2.0.49 has unknown impact and attack vectors...CVE-2007-67139.3 HighApril 16, 2008
iscripts socialwareSQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to...CVE-2008-1859Public exploit7.5 HighApril 16, 2008
724cmsSQL injection vulnerability in index.php in 724Networks 724CMS 4.01 and earlier allows remote...CVE-2008-1858Public exploit7.5 HighApril 16, 2008
mole make our life easyMultiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0...CVE-2008-1857Public exploit6.8 MediumApril 16, 2008
linphaplugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a...CVE-2008-1856Public exploit5.1 MediumApril 16, 2008
mcafee cmaFrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier, as...CVE-2008-1855Public exploit5.0 MediumApril 16, 2008
smartertools smartermailUnspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows...CVE-2008-1854Public exploit5.0 MediumApril 16, 2008
hp openview network node managerThe ovtopmd service in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other...CVE-2008-18534.3 MediumApril 16, 2008
hp openview network node managerovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions...CVE-2008-18527.8 HighApril 16, 2008
hp openview network node managerovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions...CVE-2008-18515.0 MediumApril 16, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open