Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to o…Check if you run itEPSS 1.05%Sep 23, 2006
- Medium4.0help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the pa…Check if you run itEPSS 1.00%Sep 23, 2006
- Medium4.0lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING messages to users even if debugging is disabled, which might allow remote…Check if you run itEPSS 1.00%Sep 23, 2006
- Critical10.0Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.Check if you run itEPSS 1.51%Sep 23, 2006
- Critical10.0The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors.Check if you run itEPSS 1.49%Sep 23, 2006
- High7.5codeworx_technologies dcp-portal Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.86%Sep 15, 2006
- Medium5.0Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups.Check if you run itEPSS 1.42%Sep 14, 2006
- High7.5SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored i…Check if you run itEPSS 3.05%Sep 14, 2006
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified par…Check if you run itEPSS 1.21%Sep 14, 2006
- Critical9.1OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attaCheck if you run itEPSS 3.95%Sep 5, 2006
- Unknownsendmail sendmail Use After FreePatch nowKEVEPSS 4.55%Aug 29, 2006
- Unknownjustsystem formliner Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 4.56%Aug 22, 2006
- Medium6.5MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which…Check this weekEPSS 13.57%Aug 18, 2006
- Low3.6MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database…Check if you run itEPSS 3.07%Aug 18, 2006
- Medium4.3Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or alternate case) characters…Check this weekEPSS 39.97%Aug 14, 2006
- Low2.1MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revo…Check if you run itEPSS 1.74%Aug 9, 2006
- UnknownMicrosoft visual_basic Out-of-bounds WritePatch nowKEVEPSS 10.17%Aug 8, 2006
- UnknownMicrosoft PowerPoint Mso.dll VulnerabilityPatch nowKEVEPSS 14.26%Aug 8, 2006
- High7.5WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted H…Check if you run itEPSS 5.30%Jul 31, 2006
- High7.6Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when Rewr…Check this weekEPSS 97.13%Jul 28, 2006
- Medium4.3http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.…Check this weekEPSS 95.14%Jul 28, 2006
- Medium5.0Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs end…Check this weekEPSS 48.05%Jul 25, 2006
- Critical10.0Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.8 with Enforcer Portal Pack Bundle #10 and 8.9 Bundle #3 has unknow…Check if you run itEPSS 4.07%Jul 21, 2006
- Critical10.0Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle #16, 8.8 Bundle #10, and 8.9 Bundle #3 has unknown impact…Check if you run itEPSS 4.07%Jul 21, 2006
- Medium4.0Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (cr…Check this weekEPSS 31.06%Jul 21, 2006
Sort