Skip to content
OpenAdvisories

Archive

11 July 2012

Vulnerabilities first published on this day (UTC), newest first.

← June 2012 2012 / July /11 August 2012 →
  1. 1 
  2. 2 
  3. 345
  4. 4 
  5. 520
  6. 6 
  7. 75
  8. 8 
  9. 910
  10. 1014
  11. 1116
  12. 1234
  13. 1312
  14. 14 
  15. 15 
  16. 1628
  17. 1799
  18. 1829
  19. 194
  20. 2017
  21. 2115
  22. 2218
  23. 2319
  24. 243
  25. 25113
  26. 2616
  27. 272
  28. 282
  29. 29 
  30. 303
  31. 3112
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2011-4303

    lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registration_hubs.secre…

  • Medium —
    CVE-2011-4306

    Moodle XSS Vulnerability

    Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data.

    moodle/moodle Packagist
  • Unscored —
    CVE-2011-4307

    Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1…

  • Unscored —
    CVE-2011-4304

    The chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to discove…

  • Medium —
    CVE-2011-4300

    Moodle does not properly restrict access to category and course data

    The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file.

    moodle/moodle Packagist
  • Low —
    CVE-2011-4299

    Moodle vulnerable to Cross-Site Scripting

    Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment.

    moodle/moodle Packagist
  • Unscored —
    CVE-2011-4302

    mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not prope…

  • Unscored —
    CVE-2011-4309

    Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and per…

  • Unscored —
    CVE-2011-4305

    message/refresh.php in Moodle 1.9.x before 1.9.14 allows remote authenticated users to cause a denial of service (infin…

  • Unscored —
    CVE-2011-4308

    mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticate…

  • Medium —
    CVE-2011-4298

    Moodle vulnerable to Cross-Site Request Forgery

    Multiple cross-site request forgery (CSRF) vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data.

    moodle/moodle Packagist
  • Medium —
    CVE-2011-4301

    Moodle Allows Modification of Constants

    The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not recognize Forms API setConstant operations, which allows remote attackers to submit unexpected form content b…

    moodle/moodle Packagist
  • Unscored —
    CVE-2012-3889

    The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or pos…

  • Unscored —
    CVE-2012-3890

    The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) o…

  • Unscored —
    CVE-2012-2020 Public exploit EPSS 65%

    Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2012-2019 Public exploit EPSS 64%

    Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via …