# CVEs published 2008-04-14

15 CVEs were published on April 14, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0927](https://cve.now/CVE-2008-0927.md): dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an… (no CVSS)
- [CVE-2008-0961](https://cve.now/CVE-2008-0961.md): EMV DiskXtender 6.20.060 has a hard-coded login and password, which allows remote attackers to bypass authentication via the RPC interface. (no CVSS)
- [CVE-2008-0962](https://cve.now/CVE-2008-0962.md): Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users to execute arbitrary… (no CVSS)
- [CVE-2008-0963](https://cve.now/CVE-2008-0963.md): Format string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated users to execute arbitrary code via a… (no CVSS)
- [CVE-2008-1100](https://cve.now/CVE-2008-1100.md): Buffer overflow in the cli\_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute… (no CVSS)
- [CVE-2008-1382](https://cve.now/CVE-2008-1382.md): libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a… (no CVSS)
- [CVE-2008-1775](https://cve.now/CVE-2008-1775.md): Cross-site scripting (XSS) vulnerability in mindex.do in ManageEngine Firewall Analyzer 4.0.3 allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2008-1776](https://cve.now/CVE-2008-1776.md): PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote attackers to execute… (no CVSS)
- [CVE-2008-1777](https://cve.now/CVE-2008-1777.md): The eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote attackers to cause a denial of service (CPU… (no CVSS)
- [CVE-2008-1778](https://cve.now/CVE-2008-1778.md): Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 10 on x86 platforms might allow local… (no CVSS)
- [CVE-2008-1779](https://cve.now/CVE-2008-1779.md): Sun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service (panic) via unknown vectors related to self… (no CVSS)
- [CVE-2008-1780](https://cve.now/CVE-2008-1780.md): Unspecified vulnerability in the labeled networking functionality in Solaris 10 Trusted Extensions allows applications in separate… (no CVSS)
- [CVE-2008-1772](https://cve.now/CVE-2008-1772.md): iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information. (no CVSS)
- [CVE-2008-1773](https://cve.now/CVE-2008-1773.md): PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2008-1774](https://cve.now/CVE-2008-1774.md): SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-04-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.