# CVEs published 2008-04-24

14 CVEs were published on April 24, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1938](https://cve.now/CVE-2008-1938.md): Sony Mylo COM-2 Japanese model firmware before 1.002 does not properly verify web server SSL certificates, which allows remote attackers to (no CVSS)
- [CVE-2008-1939](https://cve.now/CVE-2008-1939.md): Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id and ( (no CVSS)
- [CVE-2008-1940](https://cve.now/CVE-2008-1940.md): The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user\_transition\_deny and user\_transition\_al (no CVSS)
- [CVE-2008-1941](https://cve.now/CVE-2008-1941.md): Cross-site scripting (XSS) vulnerability in the profile update feature in Akiva WebBoard 8.0 allows remote authenticated users to inject arb (no CVSS)
- [CVE-2008-1942](https://cve.now/CVE-2008-1942.md): Foxit Reader 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with (1) a (no CVSS)
- [CVE-2008-1768](https://cve.now/CVE-2008-1768.md): Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Rea (no CVSS)
- [CVE-2008-1769](https://cve.now/CVE-2008-1769.md): VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds arra (no CVSS)
- [CVE-2008-1931](https://cve.now/CVE-2008-1931.md): Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allow local users to create, write, and read (no CVSS)
- [CVE-2008-1932](https://cve.now/CVE-2008-1932.md): Integer overflow in Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allows local users to ex (no CVSS)
- [CVE-2008-1933](https://cve.now/CVE-2008-1933.md): Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary file (no CVSS)
- [CVE-2008-1934](https://cve.now/CVE-2008-1934.md): SQL injection vulnerability in commentaires.php in Crazy Goomba 1.2.1 allows remote attackers to execute arbitrary SQL commands via the id p (no CVSS)
- [CVE-2008-1935](https://cve.now/CVE-2008-1935.md): SQL injection vulnerability in the Filiale 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the idF (no CVSS)
- [CVE-2008-1936](https://cve.now/CVE-2008-1936.md): SQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute arbitrary SQL commands via the cat\_id param (no CVSS)
- [CVE-2008-1937](https://cve.now/CVE-2008-1937.md): The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage us (no CVSS, moin)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-04-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.