Skip to content
OpenAdvisories

Archive

8 April 2008

Vulnerabilities first published on this day (UTC), newest first.

22 results · Feed

  • Unscored —
    CVE-2008-0087 EPSS 32%

    The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transacti…

  • Unscored —
    CVE-2008-0083 EPSS 30%

    The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windo…

  • Unscored —
    CVE-2008-1086 EPSS 31%

    The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2,…

  • Unscored —
    CVE-2008-1089 EPSS 32%

    Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote…

  • Unscored —
    CVE-2008-1088 EPSS 32%

    Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbit…

  • Unscored —
    CVE-2008-1085 EPSS 32%

    Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to e…

  • Unscored —
    CVE-2008-1087 Public exploit EPSS 57%

    Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 20…

  • Unscored —
    CVE-2008-1090 EPSS 32%

    Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote…

  • Unscored —
    CVE-2008-1084 Public exploit

    Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista S…

  • High 8.1
    CVE-2008-1083 Public exploit EPSS 57%

    Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server…

  • Unscored —

    Unspecified vulnerability in the embedded management console in HP iLO-2 Management Processors (iLO-2 MP), as used in I…

  • Unscored —
    CVE-2008-1702 Public exploit

    Absolute path traversal vulnerability in dload.php in the my_gallery 2.3 plugin for e107 allows remote attackers to obt…

  • Unscored —

    Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable…

  • Unscored —

    Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, …

  • Unscored —

    The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers t…

  • Unscored —

    Novell NetWare 6.5 allows attackers to cause a denial of service (ABEND) via a crafted Macintosh iPrint client request.

  • Unscored —

    Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec No…

  • Unscored —

    The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in mul…

  • Unscored —
    CVE-2008-1697 Public exploit EPSS 74%

    Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allow…

  • Unscored —
    CVE-2008-1696 Public exploit

    Directory traversal vulnerability in makepost.php in DaZPHPNews 0.1-1, when register_globals is enabled and magic_quote…

  • Unscored —

    SQL injection vulnerability in permalink.php in Desi Quintans Writer's Block CMS 3.8a allows remote attackers to execut…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in gallery.php in Simple Gallery 2.2 allows remote attackers to inject arbitra…