# CVEs published 2008-04-24

14 CVEs were published on April 24, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1938](https://cve.now/CVE-2008-1938.md): Sony Mylo COM-2 Japanese model firmware before 1.002 does not properly verify web server SSL certificates, which allows remote attackers… (no CVSS)
- [CVE-2008-1939](https://cve.now/CVE-2008-1939.md): Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id and… (no CVSS)
- [CVE-2008-1940](https://cve.now/CVE-2008-1940.md): The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user\_transition\_deny and… (no CVSS)
- [CVE-2008-1941](https://cve.now/CVE-2008-1941.md): Cross-site scripting (XSS) vulnerability in the profile update feature in Akiva WebBoard 8.0 allows remote authenticated users to inject… (no CVSS)
- [CVE-2008-1942](https://cve.now/CVE-2008-1942.md): Foxit Reader 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with (1)… (no CVSS)
- [CVE-2008-1768](https://cve.now/CVE-2008-1768.md): Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2)… (no CVSS)
- [CVE-2008-1769](https://cve.now/CVE-2008-1769.md): VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds… (no CVSS)
- [CVE-2008-1931](https://cve.now/CVE-2008-1931.md): Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allow local users to create, write, and… (no CVSS)
- [CVE-2008-1932](https://cve.now/CVE-2008-1932.md): Integer overflow in Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allows local users to… (no CVSS)
- [CVE-2008-1933](https://cve.now/CVE-2008-1933.md): Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary… (no CVSS)
- [CVE-2008-1934](https://cve.now/CVE-2008-1934.md): SQL injection vulnerability in commentaires.php in Crazy Goomba 1.2.1 allows remote attackers to execute arbitrary SQL commands via the id… (no CVSS)
- [CVE-2008-1935](https://cve.now/CVE-2008-1935.md): SQL injection vulnerability in the Filiale 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-1936](https://cve.now/CVE-2008-1936.md): SQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute arbitrary SQL commands via the cat\_id… (no CVSS)
- [CVE-2008-1937](https://cve.now/CVE-2008-1937.md): The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage… (no CVSS, moin)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-04-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.