CVEs published in April 2008
453 vulnerabilities, 89 critical, 0 exploited.
- realtek hd audio codec driversInteger overflow in Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1...6.8 Medium
- realtek hd audio codec driversRealtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista...6.8 Medium
- videolan vlcVLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted...6.8 Medium
- videolan vlcMultiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of...6.8 Medium
- imagerBuffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash)...5.0 Medium
- perlDouble free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of...5.0 Medium
- linux util-linuxArgument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier...7.5 High
- inspircdBuffer overflow in InspIRCd before 1.1.18, when using the namesx and uhnames modules, allows...5.0 Medium
- phpmyadminUnspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows...3.5 Low
- asterisk appliance developer kit, business edition, asterisknow +2 more +4 moreThe IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision...7.1 High
- adobe photoshopBuffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3,...9.3 High
- s9y serendipityMultiple cross-site scripting (XSS) vulnerabilities in the installer in Serendipity (S9Y) 1.3...4.3 Medium
- s9y serendipityCross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in...4.3 Medium
- microsoft windows 2000, windows server 2003, windows vista +1 more +3 moreBuffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote...9.3 High
- asterisk appliance developer kit, business edition, asterisknow +2 more +4 moreThe IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x...4.3 Medium
- 5th avenue software avenue shopping cartSQL injection vulnerability in store_pages/category_list.php in 5th Avenue Shopping Cart 1.2...7.5 High
- icq mirabilis icqHeap-based buffer overflow in the boxelyRenderer module in the Personal Status Manager feature in...7.5 High
- yourfreeworld apartment search scriptSQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows...7.5 High
- php-fusionSQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when...6.0 Medium
- amfphpMultiple cross-site scripting (XSS) vulnerabilities in AMFPHP 1.2 allow remote attackers to...4.3 Medium
- drupal ubercart moduleMultiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-rc1 module...4.3 Medium
- devworx blogworxSQL injection vulnerability in view.asp in DevWorx BlogWorx 1.0 allows remote attackers to...7.5 High
- bigantsoft bigant messengerStack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt...10.0 High
- lasernet cms cmsSQL injection vulnerability in index.php in Lasernet CMS 1.5 and 1.11, when magic_quotes_gpc is...7.5 High
- divx playerStack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted...9.3 High
- 1024 cms cmsSQL injection vulnerability in includes/system.php in 1024 CMS 1.4.2 beta and earlier, when...6.8 Medium
- borland interbaseStack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 SP2...10.0 High
- chadha software technologies phpkb knowledge baseSQL injection vulnerability in comment.php in PHP Knowledge Base (PHPKB) 1.5 and 2.0 allows...7.5 High
- cpcommerceMultiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to...7.5 High
- cpcommerceMultiple SQL injection vulnerabilities in functions/display_page.func.php in cpCommerce 1.1.0...7.5 High
- cpcommerceCross-site scripting (XSS) vulnerability in calendar.php in cpCommerce 1.1.0 allows remote...4.3 Medium
- nero mediahome, nero +1 moreNMMediaServer.exe in Nero MediaHome 3.3.3.0 and earlier, as used in Nero 8.3.2.1 and earlier,...5.0 Medium
- cicoandcico ccmailCicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to...7.5 High
- newanz newsofficePHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when...7.5 High
- debian aptlinexThe GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous...5.0 Medium
- debian aptlinexaptlinex before 0.91 allows local users to overwrite arbitrary files via a symlink attack on the...7.2 High
- carbon communities communitiesoption_Update.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary...7.5 High
- gnu emacs, sccs +1 morevcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary...4.6 Medium
- reddot cmsSQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other...7.5 High
- blenderStack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted...6.8 Medium
- microsoft office, works +1 moreA certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and...9.3 High
- microsoft windows xp, windows-nt, windows server 2003 +2 more +4 moreMicrosoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign...9.0 High
- ikiwikiCross-site request forgery (CSRF) vulnerability in Ikiwiki before 2.42 allows remote attackers to...4.3 Medium
- pythonMultiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers...6.8 Medium
- carboncommunities carbon communitiesMultiple cross-site scripting (XSS) vulnerabilities in Carbon Communities 2.4 and earlier allow...4.3 Medium
- carboncommunities carbon communitiesMultiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote...7.5 High
- businessobjects infoviewCross-site scripting (XSS) vulnerability in desktoplaunch/InfoView/logon/logon.object in...4.3 Medium
- w2b online bankingPHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote...7.5 High
- blogator script scriptCross-site scripting (XSS) vulnerability in bs_auth.php in Blogator-script 0.95 and 1.01 allows...4.3 Medium
- ruby-lang rubyDirectory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231,...5.0 Medium
- Show moreLoading…