Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended…Check if you run itEPSS 1.28%Feb 22, 2016
- Medium4.3The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post…Check if you run itEPSS 1.50%Feb 22, 2016
- Medium5.4Cross-site scripting (XSS) vulnerability in group/overview.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote…Check if you run itEPSS 1.17%Feb 22, 2016
- Medium4.3The rating component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 mishandles group-based authorization checks, which allow…Check if you run itEPSS 1.58%Feb 22, 2016
- High7.5lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on the PHP mt_rand function to implement the random_…Check if you run itEPSS 2.37%Feb 22, 2016
- Medium6.8The enrol_meta_sync function in enrol/meta/locallib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authent…Check if you run itEPSS 1.57%Feb 22, 2016
- Medium4.3The wiki component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 does not consider the mod/wiki:managefiles capability befo…Check if you run itEPSS 1.50%Feb 22, 2016
- Medium5.4The lesson module in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to bypass intended access…Check if you run itEPSS 1.40%Feb 22, 2016
- Medium6.1Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow…Check if you run itEPSS 1.47%Feb 22, 2016
- Medium6.1Cross-site scripting (XSS) vulnerability in the user_get_user_details function in user/lib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.…Check if you run itEPSS 1.47%Feb 22, 2016
- Medium4.3mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups capability before authorizing "Post a copy to all groups" actions, wh…Check if you run itEPSS 1.50%Feb 22, 2016
- High7.4Open redirect vulnerability in the clean_param function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 a…Check if you run itEPSS 1.85%Feb 22, 2016
- High7.5SAP NetWeaver Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 41.45%Feb 16, 2016
- Medium6.1Multiple cross-site scripting (XSS) vulnerabilities in the Java Proxy Runtime ProxyServer servlet in SAP NetWeaver 7.4 allow remote attackers to inject arbitrary web s…Check if you run itEPSS 1.55%Feb 16, 2016
- Medium5.3SAP NetWeaver Information Disclosure VulnerabilityPatch nowKEVEPSS 52.21%Feb 16, 2016
- Critical9.8SAP NetWeaver SQL Injection VulnerabilityPatch nowKEVEPSS 71.52%Feb 16, 2016
- High7.5Ruby on Rails Directory Traversal VulnerabilityPatch nowKEVEPSS 95.54%Feb 15, 2016
- Low3.7The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exc…Check this weekEPSS 83.64%Feb 15, 2016
- Medium5.9ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to…Check this weekEPSS 10.73%Feb 15, 2016
- UnknownScans for Ciscos IKEv1 and IKEv2 UDP RCE (CVE-2016-1287) A short dissection on who's scanning for CVE-2016-1287, the latest IKEv1 and IKEv2 Buffer Overflow Vulnerability.Check this weekEPSS 74.22%Feb 14, 2016
- High7.8Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."Check this weekEPSS 15.90%Feb 10, 2016
- High7.8Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel V…Check this weekEPSS 15.69%Feb 10, 2016
- High7.8Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Servic…Check this weekEPSS 19.08%Feb 10, 2016
- High7.8CVE-2016-0052 is listed by inventory_critical.Check this weekEPSS 19.08%Feb 10, 2016
- High7.8CVE-2016-0022 is listed by inventory_critical.Check this weekEPSS 19.08%Feb 10, 2016
Sort