Skip to content
OpenAdvisories

Archive

April 2008

Vulnerabilities first published in this month (UTC), newest first.

190 results · Clear filters · Feed

  • Unscored —
    CVE-2007-4620 Public exploit EPSS 52%

    Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0…

  • Unscored —
    CVE-2008-0310 Public exploit

    Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append…

  • Unscored —
    CVE-2008-1690 Public exploit

    WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of s…

  • Unscored —
    CVE-2008-0311 Public exploit EPSS 31%

    Stack-based buffer overflow in the PGMWebHandler::parse_request function in the StarTeam Multicast Service component (S…

  • Unscored —
    CVE-2008-1602 Public exploit EPSS 67%

    Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a…

  • Unscored —
    CVE-2008-1682 Public exploit EPSS 27%

    PHP remote file inclusion vulnerability in quiz/common/db_config.inc.php in the Online FlashQuiz (com_onlineflashquiz) …

  • Unscored —
    CVE-2008-1680 Public exploit

    PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain configuration information via a direct request to maintenan…

  • Unscored —
    CVE-2008-1331 Public exploit

    cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/01…

  • Unscored —
    CVE-2008-0069 Public exploit

    Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2008-1640 Public exploit

    SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Bo…

  • Unscored —
    CVE-2008-1645 Public exploit

    Directory traversal vulnerability in body.php in phpSpamManager (phpSM) 0.53 beta allows remote attackers to read arbit…

  • Unscored —
    CVE-2008-1623 Public exploit

    SQL injection vulnerability in admin_view_image.php in Smoothflash allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2008-1646 Public exploit

    SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to e…

  • Unscored —
    CVE-2008-1620 Public exploit

    Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r34…

  • Unscored —
    CVE-2008-1625 Public exploit

    aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, whic…

  • Unscored —
    CVE-2008-1650 Public exploit

    SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2008-1649 Public exploit

    Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers t…

  • Unscored —
    CVE-2008-1651 Public exploit

    Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arb…

  • Unscored —
    CVE-2008-1647 Public exploit

    The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0…

  • Unscored —
    CVE-2008-1641 Public exploit

    SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2008-1621 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2008-1624 Public exploit

    Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include…

  • Unscored —
    CVE-2008-1635 Public exploit

    Directory traversal vulnerability in view_private.php in Keep It Simple Guest Book (KISGB) 5.0.0 and earlier allows rem…

  • Unscored —
    CVE-2008-1639 Public exploit

    SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2008-1609 Public exploit EPSS 44%

    Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers t…

  • Unscored —
    CVE-2008-1610 Public exploit EPSS 54%

    Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2008-1605 Public exploit

    The (1) ltmmCaptureCtrl Class, (2) ltmmConvertCtrl Class, and (3) ltmmPlayCtrl Class ActiveX controls (ltmm15.dll 15.1.…

  • Unscored —
    CVE-2008-1611 Public exploit EPSS 68%

    Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or e…

  • Unscored —
    CVE-2008-1607 Public exploit

    SQL injection vulnerability in haberoku.php in Serbay Arslanhan Bomba Haber 2.0 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2008-1606 Public exploit

    Multiple directory traversal vulnerabilities in Elastic Path (EP) 4.1 and 4.1.1 allow remote attackers to (1) download …