Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.0mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 allows remote authenticated users to discover the username of a wiki creator by visiting the h…Check if you run itEPSS 1.11%Jul 20, 2012
- Medium4.0Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.Check if you run itEPSS 3.28%Jul 17, 2012
- Medium4.0Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors.Check if you run itEPSS 3.28%Jul 17, 2012
- Medium6.8Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.Check if you run itEPSS 3.40%Jul 17, 2012
- Medium4.0Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vecto…Check if you run itEPSS 3.92%Jul 17, 2012
- Medium4.0Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier, allows remote authenticated users to affect availability via unknown vecto…Check if you run itEPSS 3.70%Jul 17, 2012
- Medium4.0Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows remote authenticated users to affect availability, related to GIS Extension.Check if you run itEPSS 3.70%Jul 17, 2012
- High7.5lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle multiple instances of a form element, which has unspecified impact and re…Check if you run itEPSS 1.31%Jul 17, 2012
- Low2.1The form-autocompletion functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 makes it easier for physically proximate attackers to di…Check if you run itEPSS 0.40%Jul 17, 2012
- Medium4.3Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attackers to obtain session keys for their sessions by v…Check if you run itEPSS 1.23%Jul 17, 2012
- Medium5.5The self-enrolment functionality in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 allows remote authenticated users to obtain the manager role by leveraging the teacher role.Check if you run itEPSS 1.11%Jul 17, 2012
- Medium5.5The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote authenticated users to bypass the deleted status a…Check if you run itEPSS 1.09%Jul 17, 2012
- Medium4.0class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products,…Check if you run itEPSS 1.68%Jul 17, 2012
- Medium6.5Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does not validate e-mail address settings, which allows remote authenticated…Check if you run itEPSS 1.91%Jul 17, 2012
- Medium5.0The rc4encrypt function in lib/moodlelib.php in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 uses a hardcoded password of…Check if you run itEPSS 1.40%Jul 17, 2012
- Medium5.0Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote attackers to view the profile images of arbitrary user account…Check if you run itEPSS 2.12%Jul 17, 2012
- Medium4.0mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts.Check if you run itEPSS 1.12%Jul 17, 2012
- Medium6.4comment/lib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not properly restrict comment capabilities, which allows remote attackers to post a comment by…Check if you run itEPSS 1.56%Jul 16, 2012
- Medium5.5lib/db/access.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 assigns incorrect capabilities to the course-creator role, which allows remote authenticated user…Check if you run itEPSS 1.27%Jul 16, 2012
- Medium6.5The moodle_enrol_external:role_assign function in enrol/externallib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not have an authorization check, which…Check if you run itEPSS 1.27%Jul 16, 2012
- Medium5.8The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before 2.1.1 does not ensure that a continuation link refers to an http or…Check if you run itEPSS 1.54%Jul 16, 2012
- Medium6.4The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets (CSS) and JavaScript content, which a…Check if you run itEPSS 2.41%Jul 16, 2012
- Medium4.0Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted comments operations.Check if you run itEPSS 1.99%Jul 16, 2012
- Medium4.0Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted ratings operations.Check if you run itEPSS 1.92%Jul 16, 2012
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9.12 allow remote attackers to inject arbitrary web script or HTML via v…Check if you run itEPSS 1.19%Jul 16, 2012
Sort