# CVEs published 2008-04-14

15 CVEs were published on April 14, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0927](https://cve.now/CVE-2008-0927.md): dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTT (no CVSS)
- [CVE-2008-0961](https://cve.now/CVE-2008-0961.md): EMV DiskXtender 6.20.060 has a hard-coded login and password, which allows remote attackers to bypass authentication via the RPC interface. (no CVSS)
- [CVE-2008-0962](https://cve.now/CVE-2008-0962.md): Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users to execute arbitrary c (no CVSS)
- [CVE-2008-0963](https://cve.now/CVE-2008-0963.md): Format string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted (no CVSS)
- [CVE-2008-1100](https://cve.now/CVE-2008-1100.md): Buffer overflow in the cli\_scanpe function in libclamav (libclamav/pe.c) for ClamAV 0.92 and 0.92.1 allows remote attackers to execute arbit (no CVSS)
- [CVE-2008-1382](https://cve.now/CVE-2008-1382.md): libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial (no CVSS)
- [CVE-2008-1775](https://cve.now/CVE-2008-1775.md): Cross-site scripting (XSS) vulnerability in mindex.do in ManageEngine Firewall Analyzer 4.0.3 allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2008-1776](https://cve.now/CVE-2008-1776.md): PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote attackers to execute ar (no CVSS)
- [CVE-2008-1777](https://cve.now/CVE-2008-1777.md): The eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote attackers to cause a denial of service (CPU con (no CVSS)
- [CVE-2008-1778](https://cve.now/CVE-2008-1778.md): Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 10 on x86 platforms might allow local use (no CVSS)
- [CVE-2008-1779](https://cve.now/CVE-2008-1779.md): Sun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service (panic) via unknown vectors related to self encapsula (no CVSS)
- [CVE-2008-1780](https://cve.now/CVE-2008-1780.md): Unspecified vulnerability in the labeled networking functionality in Solaris 10 Trusted Extensions allows applications in separate labeling (no CVSS)
- [CVE-2008-1772](https://cve.now/CVE-2008-1772.md): iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information. (no CVSS)
- [CVE-2008-1773](https://cve.now/CVE-2008-1773.md): PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2008-1774](https://cve.now/CVE-2008-1774.md): SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-04-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.