Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 and Cumulative Update 6 does not properly validate tokens in requests, which allows…Check if you run itEPSS 9.70%Dec 11, 2014
- UnknownGE CIMPLICITY Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.08%Dec 10, 2014
- High7.8Adobe Flash Player Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 44.88%Dec 9, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in the tree view (pl_tree.php) feature in Application Security Manager (ASM) in F5 BIG-IP 11.3.0 allows remote attackers to in…Check if you run itEPSS 2.12%Dec 8, 2014
- Unknownthemepunch showbiz_pro Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 16.25%Nov 25, 2014
- Medium5.0The LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not properly restrict the parameters used in a return URL,…Check if you run itEPSS 2.12%Nov 24, 2014
- Medium4.3lib/setup.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not provide charset information in HTTP headers, which migh…Check if you run itEPSS 1.83%Nov 24, 2014
- Medium5.0lib/phpunit/bootstrap.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 allows remote attackers to obtain sensitive information via a direct request, which revea…Check if you run itEPSS 2.12%Nov 24, 2014
- Medium5.0iplookup/index.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote attackers to cause a denial of service (resou…Check if you run itEPSS 2.43%Nov 24, 2014
- Medium4.0tag/tag_autocomplete.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not consider the moodle/tag:edit capability befo…Check if you run itEPSS 1.71%Nov 24, 2014
- High7.5The generate_password function in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not provide a sufficient number of possibl…Check if you run itEPSS 2.41%Nov 24, 2014
- Medium6.8Multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3…Check if you run itEPSS 1.01%Nov 24, 2014
- Medium5.5mod/wiki/admin.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to remove wiki pages by l…Check if you run itEPSS 1.91%Nov 24, 2014
- Medium6.8Multiple cross-site request forgery (CSRF) vulnerabilities in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 a…Check if you run itEPSS 1.01%Nov 24, 2014
- Low2.1webservice/upload.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 does not ensure that a file upload is for a private or draft area, which allows remote authen…Check if you run itEPSS 1.43%Nov 24, 2014
- Medium4.0mod/forum/externallib.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 does not verify group permissions, which allows remote authenticated users to access a fo…Check if you run itEPSS 1.67%Nov 24, 2014
- Medium4.0mod/data/edit.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 sets a certain group ID to zero upon a database-entry change…Check if you run itEPSS 1.67%Nov 24, 2014
- Medium4.0mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 performs access control at the course lev…Check if you run itEPSS 1.71%Nov 24, 2014
- Medium4.0lib/classes/grades_external.php in Moodle 2.7.x before 2.7.3 does not consider the moodle/grade:viewhidden capability before displaying hidden grades, which allows rem…Check if you run itEPSS 1.67%Nov 24, 2014
- Low3.5Cross-site scripting (XSS) vulnerability in mod/feedback/mapcourse.php in the Feedback module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7…Check if you run itEPSS 1.46%Nov 24, 2014
- Medium6.5Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM before 3.6.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) contactid parame…Check if you run itEPSS 1.70%Nov 21, 2014
- Medium5.0Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to…Check if you run itEPSS 9.93%Nov 20, 2014
- High8.8Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation VulnerabilityPatch nowKEVEPSS 87.33%Nov 18, 2014
- Critical10.0belkin n750_wireless_router_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 67.49%Nov 12, 2014
- High8.8Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution VulnerabilityPatch nowKEVEPSS 94.92%Nov 11, 2014
Sort