Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9mod/forum/classes/post_form.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce the mood…Check if you run itEPSS 1.02%Jul 29, 2014
- Medium6.0The Shibboleth authentication plugin in auth/shibboleth/index.php in Moodle through 2.3.11, 2.4.x before 2.4.11, and 2.5.x before 2.5.7 does not check whether a sessio…Check if you run itEPSS 1.17%Jul 29, 2014
- Low3.5Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x bef…Check if you run itEPSS 1.75%Jul 29, 2014
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in Moodle 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web s…Check if you run itEPSS 1.19%Jul 29, 2014
- Medium4.3Cross-site scripting (XSS) vulnerability in the get_description function in lib/classes/event/user_login_failed.php in Moodle 2.7.x before 2.7.1 allows remote attacker…Check if you run itEPSS 1.19%Jul 29, 2014
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow…Check if you run itEPSS 1.83%Jul 29, 2014
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in badges/renderer.php in Moodle 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attack…Check if you run itEPSS 1.19%Jul 29, 2014
- Medium5.0Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capability requirements in (1) note…Check if you run itEPSS 1.40%Jul 29, 2014
- Medium6.0Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to execute arbitrary code…Check if you run itEPSS 1.72%Jul 29, 2014
- Low3.5Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.…Check if you run itEPSS 4.67%Jul 29, 2014
- Medium4.3mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read ar…Check if you run itEPSS 1.35%Jul 29, 2014
- Medium4.3mod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbit…Check if you run itEPSS 1.35%Jul 29, 2014
- High7.5The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to con…Check if you run itEPSS 3.71%Jul 29, 2014
- High8.1Elasticsearch Remote Code Execution VulnerabilityPatch nowKEVEPSS 88.56%Jul 28, 2014
- Unknownwp-ecommerce easy_wp_smtp Missing AuthorizationPatch nowKEVEPSS 4.46%Jul 23, 2014
- Medium5.0Memory leak in the winnt_accept function in server/mpm/winnt/child.c in the WinNT MPM in the Apache HTTP Server 2.4.x before 2.4.10 on Windows, when the default Accept…Check this weekEPSS 16.80%Jul 20, 2014
- Medium5.0The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service (process hang…Check this weekEPSS 44.72%Jul 20, 2014
- Medium6.8Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or p…Check this weekEPSS 85.81%Jul 20, 2014
- Medium4.3The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows r…Check this weekEPSS 37.30%Jul 20, 2014
- Medium4.3The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a denial of service (child-proces…Check this weekEPSS 35.68%Jul 20, 2014
- Medium4.3The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows…Check this weekEPSS 11.53%Jul 20, 2014
- Medium5.5Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integri…Check if you run itEPSS 3.51%Jul 17, 2014
- Medium6.5Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confident…Check if you run itEPSS 3.51%Jul 17, 2014
- Low2.8Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availabil…Check if you run itEPSS 3.40%Jul 17, 2014
- Medium4.3Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect integrity via vec…Check if you run itEPSS 3.84%Jul 17, 2014
Sort