Skip to content
OpenAdvisories

Archive

14 April 2008

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —

    EMV DiskXtender 6.20.060 has a hard-coded login and password, which allows remote attackers to bypass authentication vi…

  • Unscored —
    CVE-2008-0927 Public exploit EPSS 70%

    dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU co…

  • Unscored —

    Format string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated users to execute arbitrar…

  • Unscored —

    Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users t…

  • Unscored —
    CVE-2008-1776 Public exploit EPSS 27%

    PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote at…

  • Unscored —

    Sun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service (panic) via unknown vectors rela…

  • Unscored —

    The eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote attackers to cause a denia…

  • Unscored —

    Unspecified vulnerability in the labeled networking functionality in Solaris 10 Trusted Extensions allows applications …

  • Unscored —
    CVE-2008-1100 EPSS 11%

    Buffer overflow in the cli_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attac…

  • Unscored —

    Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 10 on x86 platforms …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in mindex.do in ManageEngine Firewall Analyzer 4.0.3 allows remote attackers t…

  • Unscored —

    libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attacke…

  • Unscored —
    CVE-2008-1774 Public exploit

    SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2008-1773 Public exploit EPSS 27%

    PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute ar…

  • Unscored —
    CVE-2008-1772 Public exploit

    iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sen…