Skip to content
OpenAdvisories

Archive

21 April 2008

Vulnerabilities first published on this day (UTC), newest first.

← March 2008 2008 / April /21 May 2008 →
  1. 111
  2. 240
  3. 3 
  4. 422
  5. 5 
  6. 66
  7. 711
  8. 822
  9. 919
  10. 1011
  11. 1120
  12. 1210
  13. 13 
  14. 1415
  15. 1518
  16. 1660
  17. 1730
  18. 1816
  19. 19 
  20. 201
  21. 2118
  22. 2210
  23. 2311
  24. 2414
  25. 2514
  26. 26 
  27. 2729
  28. 2813
  29. 298
  30. 3027
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2008-1906 Public exploit

    Cross-site scripting (XSS) vulnerability in calendar.php in cpCommerce 1.1.0 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2008-1903 Public exploit EPSS 39%

    PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is ena…

  • Unscored —
    CVE-2008-1905

    NMMediaServer.exe in Nero MediaHome 3.3.3.0 and earlier, as used in Nero 8.3.2.1 and earlier, allows remote attackers t…

  • Unscored —
    CVE-2008-1904 Public exploit

    Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenticated sessio…

  • Unscored —
    CVE-2008-1909 Public exploit

    SQL injection vulnerability in comment.php in PHP Knowledge Base (PHPKB) 1.5 and 2.0 allows remote attackers to execute…

  • Unscored —
    CVE-2008-1911 Public exploit

    SQL injection vulnerability in includes/system.php in 1024 CMS 1.4.2 beta and earlier, when magic_quotes_gpc is disable…

  • Unscored —
    CVE-2008-1907 Public exploit

    Multiple SQL injection vulnerabilities in functions/display_page.func.php in cpCommerce 1.1.0 allow remote attackers to…

  • Unscored —
    CVE-2008-1910 Public exploit

    Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 SP2 allows remote attacker…

  • Unscored —
    CVE-2008-1908 Public exploit

    Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrar…

  • Unscored —
    CVE-2008-1902

    The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows rem…

  • Unscored —
    CVE-2008-1900

    option_Update.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information vi…

  • Unscored —
    CVE-2008-1901

    aptlinex before 0.91 allows local users to overwrite arbitrary files via a symlink attack on the gambas-apt.lock tempor…

  • Unscored —
    CVE-2008-1694

    vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink att…

    xemacs21 Debian
  • Unscored —
    CVE-2008-1102

    Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execut…

    blender Debian
  • Unscored —
    CVE-2008-1679

    Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of s…

    python-py Azure Linux
  • Unscored —
    CVE-2008-1613 Public exploit

    SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and…

  • Unscored —
    CVE-2008-1436 Public exploit EPSS 37%

    Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) N…

  • Unscored —
    CVE-2008-1898 Public exploit EPSS 52%

    A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 an…