Skip to content
OpenAdvisories

Archive

11 April 2008

Vulnerabilities first published on this day (UTC), newest first.

← March 2008 2008 / April /11 May 2008 →
  1. 111
  2. 240
  3. 3 
  4. 422
  5. 5 
  6. 66
  7. 711
  8. 822
  9. 919
  10. 1011
  11. 1120
  12. 1210
  13. 13 
  14. 1415
  15. 1518
  16. 1660
  17. 1730
  18. 1816
  19. 19 
  20. 201
  21. 2118
  22. 2210
  23. 2311
  24. 2414
  25. 2514
  26. 26 
  27. 2729
  28. 2813
  29. 298
  30. 3027
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Unscored —
    CVE-2008-1754

    Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in clea…

  • Unscored —
    CVE-2008-1752

    ezRADIUS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote atta…

  • Unscored —
    CVE-2008-1756

    Unspecified vulnerability in the Qmaster daemon in Sun N1 Grid Engine 6.1 allows local users to cause a denial of servi…

  • Unscored —
    CVE-2008-1751 Public exploit

    Multiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to read arbitrary local fil…

  • Unscored —
    CVE-2008-1755 Public exploit

    Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote at…

  • Unscored —
    CVE-2008-1750 Public exploit

    SQL injection vulnerability in Integry Systems LiveCart 1.1.1 and earlier allows remote attackers to execute arbitrary …

  • Low —
    CVE-2008-1753

    Alkacon OpenCMS XSS via searchfilter parameter in system/workplace/admin/workplace/sessions.jsp

    Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510.

    org.opencms:opencms-core Maven
  • Unscored —
    CVE-2008-1726 Public exploit

    Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers…

  • Unscored —
    CVE-2008-1730 Public exploit

    Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free P…

  • Unscored —
    CVE-2008-1733 Public exploit

    SQL injection vulnerability in puarcade.class.php 2.2 and earlier in the Pragmatic Utopia PU Arcade (com_puarcade) comp…

  • Unscored —
    CVE-2008-1732 Public exploit

    SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execut…

  • Unscored —
    CVE-2008-1731

    The Simple Access module for Drupal 5.x through 5.x-1.2-2 does not properly handle the privacy information for nodes, w…

    Web / CMS
  • Unscored —
    CVE-2008-1729

    The menu system in Drupal 6 before 6.2 has incorrect menu settings, which allows remote attackers to (1) edit the profi…

  • Unscored —
    CVE-2008-1727 Public exploit

    KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers …

  • Unscored —
    CVE-2008-1725 Public exploit

    The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator…

  • Medium —
    CVE-2008-1728

    Ignite Realtime Openfire allows remote authenticated users to cause a denial of service

    ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authenticated users to cause a denial of service (daemon outage) by triggering large outgoing queues without reading messages.

    org.igniterealtime.openfire:parent org.igniterealtime.openfire:openfire Maven
  • Unscored —
    CVE-2008-1724 Public exploit EPSS 35%

    Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX con…

  • Unscored —
    CVE-2008-1658

    Format string vulnerability in the grant helper (polkit-grant-helper.c) in PolicyKit 0.7 and earlier allows attackers t…

    policykit-1 Debian
  • Unscored —
    CVE-2008-1704

    Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 t…

  • Unscored —
    CVE-2008-1703

    Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote a…