Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7,…Check if you run itEPSS 2.29%Jan 27, 2013
- Medium5.5calendar/managesubscriptions.php in the Manage Subscriptions implementation in Moodle 2.4.x before 2.4.1 omits a capability check, which allows remote authenticated us…Check if you run itEPSS 1.27%Jan 27, 2013
- Medium5.0blog/rsslib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 continues to provide a blog RSS feed after blogging is di…Check if you run itEPSS 1.40%Jan 27, 2013
- Medium5.0blog/rsslib.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allows remote attackers to obtain sensitive information from site-level blogs…Check if you run itEPSS 1.40%Jan 27, 2013
- Medium6.8Multiple cross-site request forgery (CSRF) vulnerabilities in user/messageselect.php in the messaging system in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.…Check if you run itEPSS 0.66%Jan 27, 2013
- Medium6.4lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the su…Check if you run itEPSS 1.36%Jan 27, 2013
- Medium5.8Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to redirect users to arbitrary w…Check if you run itEPSS 1.21%Jan 27, 2013
- Medium4.0report/outline/index.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly enforce the moodle/user:viewhiddendetails capabilit…Check if you run itEPSS 1.12%Jan 27, 2013
- Medium4.0The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not…Check if you run itEPSS 1.12%Jan 27, 2013
- Medium4.0grade/edit/outcome/edit_form.php in Moodle 1.9.x through 1.9.19, 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly…Check if you run itEPSS 1.11%Jan 27, 2013
- Medium6.5Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x th…Check if you run itEPSS 3.12%Jan 22, 2013
- Medium6.8CVE-2013-0418 is listed by inventory_critical.Check if you run itEPSS 8.35%Jan 17, 2013
- Medium6.8Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability…Check if you run itEPSS 2.70%Jan 17, 2013
- Medium6.8Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors relat…Check if you run itEPSS 2.98%Jan 17, 2013
- Medium6.6Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users to affect confidentiality and integrit…Check if you run itEPSS 0.42%Jan 17, 2013
- Medium6.8Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability…Check if you run itEPSS 2.86%Jan 17, 2013
- Medium4.3Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote attackers to affect availability via unknow…Check if you run itEPSS 2.67%Jan 17, 2013
- Medium5.4Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiali…Check if you run itEPSS 1.92%Jan 17, 2013
- Medium4.0Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability, related to MyISAM.Check if you run itEPSS 2.57%Jan 17, 2013
- Medium4.0Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.Check if you run itEPSS 2.57%Jan 17, 2013
- Medium4.0Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors relat…Check if you run itEPSS 2.55%Jan 17, 2013
- Low3.5Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users with Server Privileges to affect availability vi…Check if you run itEPSS 2.12%Jan 17, 2013
- Medium6.8Unspecified vulnerability in the Server component in Oracle MySQL 5.1.65 and earlier and 5.5.27 and earlier allows remote authenticated users to affect availability, r…Check if you run itEPSS 2.55%Jan 17, 2013
- Medium4.0Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability vi…Check if you run itEPSS 2.63%Jan 17, 2013
- Medium5.0Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote attackers to affect availability via unknown vectors.Check if you run itEPSS 3.20%Jan 17, 2013
Sort