Skip to content
OpenAdvisories

Archive

18 April 2008

Vulnerabilities first published on this day (UTC), newest first.

← March 2008 2008 / April /18 May 2008 →
  1. 111
  2. 240
  3. 3 
  4. 422
  5. 5 
  6. 66
  7. 711
  8. 822
  9. 919
  10. 1011
  11. 1120
  12. 1210
  13. 13 
  14. 1415
  15. 1518
  16. 1660
  17. 1730
  18. 1816
  19. 19 
  20. 201
  21. 2118
  22. 2210
  23. 2311
  24. 2414
  25. 2514
  26. 26 
  27. 2729
  28. 2813
  29. 298
  30. 3027
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2008-1894

    Cross-site scripting (XSS) vulnerability in desktoplaunch/InfoView/logon/logon.object in BusinessObjects InfoView XI R2…

  • Unscored —
    CVE-2008-1896 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inj…

  • Unscored —
    CVE-2008-1893 Public exploit

    PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2008-1889 Public exploit

    SQL injection vulnerability in viewcat.php in XplodPHP AutoTutorials 2.1 and earlier, when magic_quotes_gpc is disabled…

  • Unscored —
    CVE-2008-1890

    SQL injection vulnerability in the Jom Comment 2.0 build 345 component for Joomla! allows remote attackers to execute a…

  • Unscored —
    CVE-2008-1895 Public exploit

    Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2008-1891

    Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p23…

  • Unscored —
    CVE-2008-1892

    Cross-site scripting (XSS) vulnerability in bs_auth.php in Blogator-script 0.95 and 1.01 allows remote attackers to inj…

  • Unscored —
    CVE-2008-1888 Public exploit

    Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject…

  • Unscored —
    CVE-2008-1887

    Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a…

    python-py Azure Linux
  • Unscored —
    CVE-2008-1883

    The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which mak…

  • Unscored —
    CVE-2008-1885 Public exploit

    Directory traversal vulnerability in the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficie…

  • Unscored —
    CVE-2008-1886 Public exploit

    The NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download uses weak cryptography fo…

  • Unscored —
    CVE-2008-1884

    Directory traversal vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote attackers to read arbitrary fil…

  • Unscored —
    CVE-2008-1734

    Interpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux might allow local users to cause a denial of servic…

  • Unscored —
    CVE-2008-1693

    The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFvi…

    poppler xpdf Debian