Skip to content
OpenAdvisories

Archive

9 April 2008

Vulnerabilities first published on this day (UTC), newest first.

← March 2008 2008 / April /9 May 2008 →
  1. 111
  2. 240
  3. 3 
  4. 422
  5. 5 
  6. 66
  7. 711
  8. 822
  9. 919
  10. 1011
  11. 1120
  12. 1210
  13. 13 
  14. 1415
  15. 1518
  16. 1660
  17. 1730
  18. 1816
  19. 19 
  20. 201
  21. 2118
  22. 2210
  23. 2311
  24. 2414
  25. 2514
  26. 26 
  27. 2729
  28. 2813
  29. 298
  30. 3027
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2008-1716

    Cross-site scripting (XSS) vulnerability in WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allo…

  • Unscored —
    CVE-2008-1714 Public exploit

    SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attac…

  • Unscored —
    CVE-2008-1717

    WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path …

  • Unscored —
    CVE-2008-1715 Public exploit

    SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magic_quotes_gpc is disabled, allows…

  • Unscored —
    CVE-2008-1655

    Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for re…

  • Unscored —
    CVE-2008-1713 Public exploit

    MailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of service (application cra…

  • Unscored —
    CVE-2008-1712 Public exploit

    PHP remote file inclusion vulnerability in includes/functions_weblog.php in mxBB mx_blogs 2.0.0 beta allows remote atta…

  • Unscored —
    CVE-2007-0071 EPSS 93%

    Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to exec…

  • Unscored —
    CVE-2007-6019 Public exploit EPSS 60%

    Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2008-1709 Public exploit EPSS 13%

    Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a S…

  • Unscored —
    CVE-2008-1687

    The (1) maketemp and (2) mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their output when a file is cre…

    m4 Debian
  • Unscored —
    CVE-2008-1708

    IBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of memory to allocate, wh…

  • Unscored —
    CVE-2008-1706

    Uncontrolled array index in IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (da…

  • Unscored —
    CVE-2008-1711 Public exploit

    Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 stores passwords in cleartext in a MySQL database, which …

  • Unscored —
    CVE-2008-1707

    IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and d…

  • Unscored —
    CVE-2008-1656

    Adobe ColdFusion 8 and 8.0.1 does not properly implement the public access level for CFC methods, which allows remote a…

  • Unscored —
    CVE-2008-1688

    Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary code, re…

    m4 Debian
  • Unscored —
    CVE-2008-1710

    Untrusted search path vulnerability in chnfsmnt in IBM AIX 6.1 allows local users to gain privileges via a modified PAT…

  • Unscored —
    CVE-2008-1705

    Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to ex…