Skip to content
OpenAdvisories

Archive

2 April 2008

Vulnerabilities first published on this day (UTC), newest first.

← March 2008 2008 / April /2 May 2008 →
  1. 111
  2. 240
  3. 3 
  4. 422
  5. 5 
  6. 66
  7. 711
  8. 822
  9. 919
  10. 1011
  11. 1120
  12. 1210
  13. 13 
  14. 1415
  15. 1518
  16. 1660
  17. 1730
  18. 1816
  19. 19 
  20. 201
  21. 2118
  22. 2210
  23. 2311
  24. 2414
  25. 2514
  26. 26 
  27. 2729
  28. 2813
  29. 298
  30. 3027
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Unscored —
    CVE-2008-1331 Public exploit

    cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/01…

  • Unscored —
    CVE-2008-0069 Public exploit

    Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2008-1640 Public exploit

    SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Bo…

  • Unscored —
    CVE-2008-1645 Public exploit

    Directory traversal vulnerability in body.php in phpSpamManager (phpSM) 0.53 beta allows remote attackers to read arbit…

  • Unscored —
    CVE-2008-1623 Public exploit

    SQL injection vulnerability in admin_view_image.php in Smoothflash allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-1646 Public exploit

    SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to e…

    Web / CMS
  • Unscored —
    CVE-2008-1620 Public exploit

    Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r34…

  • Unscored —
    CVE-2008-1625 Public exploit

    aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, whic…

  • Unscored —
    CVE-2008-1650 Public exploit

    SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-1649 Public exploit

    Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers t…

  • Unscored —
    CVE-2008-1651 Public exploit

    Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arb…

  • Unscored —
    CVE-2008-1647 Public exploit

    The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0…

  • Unscored —
    CVE-2008-1641 Public exploit

    SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-1621 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2008-1624 Public exploit

    Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include…

  • Unscored —
    CVE-2008-1635 Public exploit

    Directory traversal vulnerability in view_private.php in Keep It Simple Guest Book (KISGB) 5.0.0 and earlier allows rem…

  • Unscored —
    CVE-2008-1639 Public exploit

    SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands v…