Archive
April 2008
Vulnerabilities first published in this month (UTC), newest first.
456 results · Feed
-
Unscored —CVE-2008-2032 Public exploit
The FTP service in Acritum Femitter Server 1.03 allows remote attackers to cause a denial of service (crash) by sending…
-
Unscored —CVE-2008-2036 Public exploit
SQL injection vulnerability in index.php in dream4 Koobi Pro 6.25 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a crafted LIST command, which triggers a N…
-
Unscored —CVE-2008-2037 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in EditeurScripts EsContacts 1.0 allow remote authenticated users t…
-
Unscored —CVE-2008-2028 Public exploit
miniBB 2.2, and possibly earlier, when register_globals is enabled, allows remote attackers to obtain the full path via…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Bluemoon, Inc. (1) BackPack 0.91 and earlier, (2) BmSurvey 0.84 and ear…
-
Unscored —
Stack-based buffer overflow in the HTTP::getAuthUserPass function (core/common/http.cpp) in Peercast 0.1218 and gnome-p…
-
Unscored —CVE-2008-2029 Public exploit
Multiple SQL injection vulnerabilities in (1) setup_mysql.php and (2) setup_options.php in miniBB 2.2 and possibly earl…
-
Unscored —
SQL injection vulnerability in wp-download_monitor/download.php in the Download Monitor 2.0.6 plugin for WordPress allo…
-
Unscored —CVE-2008-2030 Public exploit
Cross-site scripting (XSS) vulnerability in installControl.php3 in F5 FirePass 4100 SSL VPN 5.4.2-5.5.2 and 6.0-6.2 all…
-
Unscored —
Multiple unspecified vulnerabilities in eGroupWare before 1.4.004 have unspecified attack vectors and "grave" impact wh…
-
Unscored —
Multiple SQL injection vulnerabilities in admin/adminindex.php in Turnkey Web Tools SunShop Shopping Cart 4.1.0 allow r…
-
Unscored —
Cross-site scripting (XSS) vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258, and other ve…
-
Unscored —
Open redirect vulnerability in WebID/IISWebAgentIF.dll in RSA Authentication Agent 5.3.0.258 for Web for IIS, when acce…
-
Unscored —CVE-2008-2023 Public exploit
Multiple SQL injection vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —
Heap-based buffer overflow in Lhaplus before 1.57 allows remote attackers to execute arbitrary code via a long comment …
-
Unscored —CVE-2008-2022 Public exploit
Mulatiple cross-site scripting (XSS) vulnerabilities in PD9 Software MegaBBS 2.2 allow remote attackers to inject arbit…
-
Unscored —CVE-2008-2024 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in miniBB 2.2, and possibly earlier, when register_globals is ena…
-
Unscored —CVE-2008-2018 Public exploit
The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings de…
-
Unscored —
The CAPTCHA implementation as used in (1) Francisco Burzi PHP-Nuke 7.0 and 8.1, (2) my123tkShop e-Commerce-Suite (aka 1…
-
Unscored —
PHP remote file inclusion vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attacker…
-
Unscored —
Mozilla Firefox 3.0 beta 5 allows remote attackers to cause a denial of service (application crash) via JavaScript code…
-
Unscored —
Directory traversal vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to i…
-
Unscored —CVE-2008-2015 Public exploit
Multiple absolute path traversal vulnerabilities in certain ActiveX controls in WatchFire AppScan 7.0 allow remote atta…
-
Unscored —CVE-2008-2019 Public exploit
Simple Machines Forum (SMF), probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the…
-
Unscored —CVE-2008-2012 Public exploit
SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute…
-
Unscored —CVE-2008-2013 Public exploit
SQL injection vulnerability in index.php in the pnFlashGames 1.5 through 2.5 module for PostNuke, when magic_quotes_gpc…
-
Unscored —
Rising Antivirus 2008 before 20.38.20 allows local users to cause a denial of service (system crash) via an invalid poi…
-
Unscored —
BitDefender Antivirus 2008 20080118 and earlier allows local users to cause a denial of service (system crash) via an i…
-
Unscored —
Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table …
-
Unscored —
Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to ca…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the National Rail Enquiries Live Departure Boards gadget before 1.1 allows …
-
Unscored —
Unspecified vulnerability in Apple QuickTime Player on Windows XP SP2 and Vista SP1 allows remote attackers to execute …
-
Unscored —
Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote a…
-
Unscored —
ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which…
-
Unscored —CVE-2008-1930 Public exploit
The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXP…
-
Unscored —
Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible" characters in the useri…
-
Unscored —
Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issu…
-
Unscored —
licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application cras…
-
Unscored —
Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 al…