Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2008
April

CVEs published in April 2008

453 vulnerabilities, 89 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

acidcat cmsCross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows...CVE-2008-1991Public exploit4.3 MediumApril 27, 2008
acidcat cmsMultiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute...CVE-2008-1990Public exploit7.5 HighApril 27, 2008
e107, 123flashchat 123 flash chat module +1 morePHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module...CVE-2008-1989Public exploit10.0 HighApril 27, 2008
encaps encapsgalleryUnrestricted file upload vulnerability in the file_upload function in core/misc.class.php in...CVE-2008-19889.0 HighApril 27, 2008
encaps encapsgalleryCross-site scripting (XSS) vulnerability in search.php in EncapsGallery 2.0.2 allows remote...CVE-2008-19874.3 MediumApril 27, 2008
pixel motion blogCross-site scripting (XSS) vulnerability in liste_article.php in Blog Pixel Motion (aka...CVE-2008-1986Public exploit4.3 MediumApril 27, 2008
digital hive digitalhiveCross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote...CVE-2008-1985Public exploit4.3 MediumApril 27, 2008
broadcom secure content managerThe eTrust Common Services (Transport) Daemon (eCSqdmn) in CA Secure Content Manager 8.0.28000...CVE-2008-19847.8 HighApril 27, 2008
anelectron advanced electron forumCross-site scripting (XSS) vulnerability in Advanced Electron Forum (AEF) 1.0.6 allows remote...CVE-2008-1983Public exploit4.3 MediumApril 27, 2008
wordpress wpssSQL injection vulnerability in ss_load.php in the Spreadsheet (wpSS) 0.6 and earlier plugin for...CVE-2008-1982Public exploit7.5 HighApril 27, 2008
e-publish project e-publishCross-site request forgery (CSRF) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6...CVE-2008-19816.8 MediumApril 27, 2008
drupal e-publishCross-site scripting (XSS) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0...CVE-2008-19804.3 MediumApril 27, 2008
broadcom brightstor arcserve backupThe Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote...CVE-2008-1979Public exploit5.0 MediumApril 27, 2008
drupal ubercart moduleCross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module for Drupal...CVE-2008-19783.5 LowApril 27, 2008
internationalization project internationalization, localizer project localizer +1 moreCross-site request forgery (CSRF) vulnerability in the Internationalization (i18n) Drupal module...CVE-2008-19774.3 MediumApril 27, 2008
internationalization project internationalization, localizer project localizer +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Drupal modules (1)...CVE-2008-19764.3 MediumApril 27, 2008
cogites e reserveSQL injection vulnerability in index.php in E-RESERV 2.1 allows remote attackers to execute...CVE-2008-1975Public exploit7.5 HighApril 27, 2008
horde groupware, groupware webmail edition +1 moreCross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware...CVE-2008-1974Public exploitFix available4.3 MediumApril 27, 2008
artur sikora subedit playerHeap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause...CVE-2008-1973Public exploit9.3 HighApril 27, 2008
oicgroup exponent cmsMultiple cross-site scripting (XSS) vulnerabilities in the user account creation feature in...CVE-2008-19724.3 MediumApril 27, 2008
phphq phshoutbox finalphShoutBox Final 1.5 and earlier only checks passwords when specified in $_POST, which allows...CVE-2008-1971Public exploit7.5 HighApril 27, 2008
mucommandermuCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local...CVE-2008-19702.1 LowApril 27, 2008
cezannesw cezanneMultiple cross-site scripting (XSS) vulnerabilities in Cezanne 6.5.1 and 7 allow remote attackers...CVE-2008-1969Public exploit3.5 LowApril 27, 2008
cezannesw cezanneMultiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to execute...CVE-2008-1968Public exploit6.0 MediumApril 27, 2008
cezannesw cezanneCross-site scripting (XSS) vulnerability in CFLogon/CFLogon.asp in Cezanne 6.5.1 and 7 allows...CVE-2008-1967Public exploit4.3 MediumApril 27, 2008
ibm db2Multiple buffer overflows in the JAR file administration routines in the BSU JAVA subcomponent in...CVE-2008-19664.0 MediumApril 27, 2008
ibm lotus expeditor client, lotus symphany +1 moreArgument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor...CVE-2008-1965Public exploitEPSS 10.7%9.3 HighApril 25, 2008
xinehq xine lib** DISPUTED ** Stack-based buffer overflow in the demux_nsf_send_headers function in src...CVE-2008-1964Disputed7.5 HighApril 25, 2008
hp software updateUnspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag...CVE-2008-07126.8 MediumApril 25, 2008
quate grape web statisticsPHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0...CVE-2008-1963Public exploitEPSS 39.0%7.5 HighApril 25, 2008
chimaera aterrMultiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and...CVE-2008-1962Public exploit6.8 MediumApril 25, 2008
php resource voice of web allmyguestsSQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote...CVE-2008-1961Public exploit7.5 HighApril 25, 2008
contrayCross-site scripting (XSS) vulnerability in cgi-bin/contray/search.cgi in ContRay 3.x allows...CVE-2008-19604.3 MediumApril 25, 2008
sippStack-based buffer overflow in the get_remote_video_port_media function in call.cpp in SIPp 3.0...CVE-2008-1959Fix available7.5 HighApril 25, 2008
easyscripts tr script newsUnrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr Script News...CVE-2008-1958Public exploit6.5 MediumApril 25, 2008
easyscripts tr script newsSQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute...CVE-2008-1957Public exploit7.5 HighApril 25, 2008
wikepage opusCross-site scripting (XSS) vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote...CVE-2008-1956Public exploit4.3 MediumApril 25, 2008
toocharger myboardCross-site scripting (XSS) vulnerability in rep.php in Martin BOUCHER MyBoard 1.0.12 allows...CVE-2008-1955Public exploit4.3 MediumApril 25, 2008
webcalendar web calendar proSQL injection vulnerability in one_day.php in Web Calendar Pro 4.1 and earlier allows remote...CVE-2008-1954Public exploit7.5 HighApril 25, 2008
magnolia site designerCross-site scripting (XSS) vulnerability in the Sitedesigner before 1.1.5 search template in...CVE-2008-19534.3 MediumApril 25, 2008
foxit software readerFoxit Reader 2.2 allows remote attackers to cause a denial of service (crash) and possibly...CVE-2008-19426.8 MediumApril 24, 2008
akiva webboardCross-site scripting (XSS) vulnerability in the profile update feature in Akiva WebBoard 8.0...CVE-2008-19413.5 LowApril 24, 2008
grsecurity kernel patchThe RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce...CVE-2008-19404.6 MediumApril 24, 2008
aspindir philboardMultiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute...CVE-2008-1939Public exploit7.5 HighApril 24, 2008
sony mylo com 2Sony Mylo COM-2 Japanese model firmware before 1.002 does not properly verify web server SSL...CVE-2008-19386.4 MediumApril 24, 2008
moinmoinMoinMoin vulnerable to privilege escalationCVE-2008-1937Fix available6.8 MediumApril 24, 2008
classifieds caffe caffeSQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute...CVE-2008-1936Public exploit7.5 HighApril 24, 2008
joomlaSQL injection vulnerability in the Filiale 1.0.4 component for Joomla! allows remote attackers to...CVE-2008-1935Public exploit7.5 HighApril 24, 2008
crazy goomba goombaSQL injection vulnerability in commentaires.php in Crazy Goomba 1.2.1 allows remote attackers to...CVE-2008-1934Public exploit7.5 HighApril 24, 2008
microsoft zune softwareAbsolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted...CVE-2008-1933Public exploitEPSS 13.9%4.3 MediumApril 24, 2008
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open