Skip to content
OpenAdvisories

Archive

25 April 2008

Vulnerabilities first published on this day (UTC), newest first.

14 results · Feed

  • Unscored —

    Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Upd…

  • Unscored —
    CVE-2008-1965 Public exploit EPSS 11%

    Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1…

  • Unscored —

    Stack-based buffer overflow in the demux_nsf_send_headers function in src/demuxers/demux_nsf.c in xine-lib allows remot…

  • Unscored —
    CVE-2008-1961 Public exploit

    SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Sitedesigner before 1.1.5 search template in Magnolia Enterprise Editio…

  • Unscored —
    CVE-2008-1954 Public exploit

    SQL injection vulnerability in one_day.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2008-1963 Public exploit EPSS 39%

    PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote atta…

  • Unscored —
    CVE-2008-1962 Public exploit

    Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary loc…

  • Unscored —
    CVE-2008-1956 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote attackers to inject arbi…

  • Unscored —

    Stack-based buffer overflow in the get_remote_video_port_media function in call.cpp in SIPp 3.0 allows remote attackers…

  • Unscored —
    CVE-2008-1958 Public exploit

    Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr Script News 2.1 allows remote auth…

  • Unscored —
    CVE-2008-1957 Public exploit

    SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2008-1955 Public exploit

    Cross-site scripting (XSS) vulnerability in rep.php in Martin BOUCHER MyBoard 1.0.12 allows remote attackers to inject …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in cgi-bin/contray/search.cgi in ContRay 3.x allows remote attackers to inject…