cve.nowby Sazabi

CVEs published April 2, 2008

40 CVEs were published on April 2, 2008: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 40
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 40
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 40

CVE-2008-1331cgi-data/FastJSData.cgi in OmniPCX Office with Internet Access services OXO210 before 210/091.001, OXO600 before 610/014.001, and other…UnratedApr 2, 2008
CVE-2008-1654Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to perform Cross-Site…UnratedApr 2, 2008
CVE-2008-1657OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the…UnratedApr 2, 2008
CVE-2008-0069Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long FontName…UnratedApr 2, 2008
CVE-2008-1620Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r3497 and earlier…UnratedApr 2, 2008
CVE-2008-1621Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or HTML via the id…UnratedApr 2, 2008
CVE-2008-1622Multiple PHP remote file inclusion vulnerabilities in GeeCarts allow remote attackers to execute arbitrary PHP code via a URL in the id…UnratedApr 2, 2008
CVE-2008-1623SQL injection vulnerability in admin_view_image.php in Smoothflash allows remote attackers to execute arbitrary SQL commands via the cid…UnratedApr 2, 2008
CVE-2008-1624Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute…UnratedApr 2, 2008
CVE-2008-1625aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local…UnratedApr 2, 2008
CVE-2008-1626SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an unspecified cookie.UnratedApr 2, 2008
CVE-2008-1627CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified…UnratedApr 2, 2008
CVE-2008-1628Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 might allow remote…UnratedApr 2, 2008
CVE-2008-1629Cross-site scripting (XSS) vulnerability in PHPkrm before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via…UnratedApr 2, 2008
CVE-2008-1630Multiple cross-site scripting (XSS) vulnerabilities in CuteFlow 1.5.0 and 2.10.0 allow remote attackers to inject arbitrary web script or…UnratedApr 2, 2008
CVE-2008-1631SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the…UnratedApr 2, 2008
CVE-2008-1632Multiple SQL injection vulnerabilities in CuteFlow 2.10.0 allow remote authenticated users to execute arbitrary SQL commands via the (1)…UnratedApr 2, 2008
CVE-2008-1633Unspecified vulnerability in Mondo Rescue before 2.2.5 has unknown impact and attack vectors, related to the use of (1) /tmp and (2)…UnratedApr 2, 2008
CVE-2008-1634Cross-site scripting (XSS) vulnerability in index.php in JV2 Folder Gallery 3.1 allows remote attackers to inject arbitrary web script or…UnratedApr 2, 2008
CVE-2008-1635Directory traversal vulnerability in view_private.php in Keep It Simple Guest Book (KISGB) 5.0.0 and earlier allows remote attackers to…UnratedApr 2, 2008
CVE-2008-1636Cross-site scripting (XSS) vulnerability in index.php in JV2 Quick Gallery 1.1 allows remote attackers to inject arbitrary web script or…UnratedApr 2, 2008
CVE-2008-1637PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbers, which makes it…UnratedApr 2, 2008
CVE-2008-1638Nik Sharpener Pro, possibly 2.0, uses world-writable permissions for plug-in files, which allows local users to gain privileges by…UnratedApr 2, 2008
CVE-2008-1639SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId…UnratedApr 2, 2008
CVE-2008-1640SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board (wBB) allows…UnratedApr 2, 2008

Show all 40 entriesShow fewer entries