Skip to content
OpenAdvisories

Archive

21 July 2012

Vulnerabilities first published on this day (UTC), newest first.

← June 2012 2012 / July /21 August 2012 →
  1. 1 
  2. 2 
  3. 345
  4. 4 
  5. 520
  6. 6 
  7. 75
  8. 8 
  9. 910
  10. 1014
  11. 1116
  12. 1234
  13. 1312
  14. 14 
  15. 15 
  16. 1628
  17. 1799
  18. 1829
  19. 194
  20. 2017
  21. 2115
  22. 2218
  23. 2319
  24. 243
  25. 25113
  26. 2616
  27. 272
  28. 282
  29. 29 
  30. 303
  31. 3112
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2012-2358

    Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an ac…

  • Unscored —
    CVE-2012-2365

    Cross-site scripting (XSS) vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allow…

  • Unscored —
    CVE-2012-2366

    mod/data/preset.php in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not properly iterate through an array, whi…

  • Unscored —
    CVE-2012-2357

    The Multi-Authentication feature in the Central Authentication Service (CAS) functionality in auth/cas/cas_form.html in…

  • Unscored —
    CVE-2012-2360

    Cross-site scripting (XSS) vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.…

  • Unscored —
    CVE-2012-2362

    Cross-site scripting (XSS) vulnerability in blog/lib.php in the blog implementation in Moodle 1.9.x before 1.9.18, when…

  • Medium —
    CVE-2012-2356

    Moodle Authentication Bypass in Question-Bank

    The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a save_question action.

    moodle/moodle Packagist
  • Medium —
    CVE-2012-2353

    Moodle Exposes Sensitive User Information

    Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive user information from hidden fields by leveraging the teacher role and navigating to "Enrolled users" under the Users Settings section.

    moodle/moodle Packagist
  • Unscored —
    CVE-2012-2363

    SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x before 1.9.18 allows r…

  • Unscored —
    CVE-2012-2359

    admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authent…

  • Unscored —
    CVE-2012-2361

    Cross-site scripting (XSS) vulnerability in admin/webservice/forms.php in the web services implementation in Moodle 2.0…

  • Unscored —
    CVE-2012-2364

    Cross-site scripting (XSS) vulnerability in lib/filelib.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x…

  • Unscored —
    CVE-2012-2367

    Moodle 1.9.x before 1.9.18, 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated …

  • Unscored —
    CVE-2012-2355

    Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass question:use* capability r…

  • Unscored —
    CVE-2012-2354

    Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/site:readallmes…