Skip to content
OpenAdvisories

Archive

July 2012

Vulnerabilities first published in this month (UTC), newest first.

← June 2012 2012 / July August 2012 →
  1. 1 
  2. 2 
  3. 345
  4. 4 
  5. 520
  6. 6 
  7. 75
  8. 8 
  9. 910
  10. 1014
  11. 1116
  12. 1234
  13. 1312
  14. 14 
  15. 15 
  16. 1628
  17. 1799
  18. 1829
  19. 194
  20. 2017
  21. 2115
  22. 2218
  23. 2319
  24. 243
  25. 25113
  26. 2616
  27. 272
  28. 282
  29. 29 
  30. 303
  31. 3112
All Critical High Medium Low Exploited only Public exploit

536 results · Feed

  • Unscored —
    CVE-2012-2367

    Moodle 1.9.x before 1.9.18, 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated …

  • Unscored —
    CVE-2012-2355

    Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass question:use* capability r…

  • Unscored —
    CVE-2012-2354

    Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/site:readallmes…

  • Unscored —
    CVE-2011-4583

    Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and …

  • Unscored —
    CVE-2011-4591

    Cross-site scripting (XSS) vulnerability in the print_object function in lib/datalib.php in Moodle 2.0.x before 2.0.6 a…

  • Unscored —
    CVE-2011-4585

    login/change_password.php in Moodle 1.9.x before 1.9.15 does not use https for the change-password form even if the htt…

  • Unscored —
    CVE-2011-4588

    The ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x before 1.9.15 uses an incorrect data type, which allow…

  • Unscored —
    CVE-2011-4581

    mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 allows remote authenticated users to discover …

  • Unscored —
    CVE-2011-4587

    lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle ce…

  • Unscored —
    CVE-2011-4589

    backup/moodle2/restore_stepslib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not check for the moodle/c…

  • Unscored —
    CVE-2011-4592

    The command-line cron implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly interact wit…

  • Unscored —
    CVE-2011-4586

    CRLF injection vulnerability in calendar/set.php in the Calendar subsystem in Moodle 1.9.x before 1.9.15, 2.0.x before …

  • Medium —
    CVE-2011-4582

    Moodle Open Redirect in Calendar Set Page

    Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.

    moodle/moodle Packagist
  • Unscored —
    CVE-2011-4584

    The MNET authentication functionality in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 allows …

  • Unscored —
    CVE-2011-4590

    The web services implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly consider the main…

  • Unscored —
    CVE-2011-4593

    Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle user/action_redir group…

  • Unscored —
    CVE-2012-3365

    The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism v…

  • Unscored —
    CVE-2012-3008

    Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute…

  • Unscored —
    CVE-2012-2955 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mai…

  • Unscored —
    CVE-2012-2688 Public exploit EPSS 10%

    Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4…

  • Unscored —
    CVE-2012-4025

    Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote att…

    squashfs-tools Debian
  • Unscored —
    CVE-2012-4024

    Stack-based buffer overflow in the get_component function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier all…

    squashfs-tools Debian
  • Unscored —
    CVE-2012-0284 Public exploit EPSS 36%

    Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.…

  • Unscored —
    CVE-2012-2974

    The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass authentication and obtain administrativ…

  • Unscored —
    CVE-2012-0867

    PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 charact…

  • Unscored —
    CVE-2012-0868

    CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and…

  • Unscored —
    CVE-2012-0866

    CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does …

  • Unscored —
    CVE-2012-3358

    Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to ca…

  • Unscored —
    CVE-2012-2655

    PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authentic…

  • Unscored —
    CVE-2009-5030

    The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2012-4033

    Multiple unspecified vulnerabilities in the Zingiri Web Shop plugin before 2.4.0 for WordPress have unknown impact and …

  • Medium —
    CVE-2012-2139

    Mail Gem Path Traversal vulnerability

    Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter.

    mail ruby-mail Debian RubyGems
  • High —
    CVE-2012-2140

    Mail Gem Improper Input Validation vulnerability

    The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.

    mail ruby-mail Debian RubyGems
  • Unscored —
    CVE-2012-2303

    The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remo…

  • Unscored —
    CVE-2012-1963

    The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Th…

  • Unscored —
    CVE-2012-1964

    The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4…

  • Unscored —
    CVE-2012-1951

    Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Fir…

  • Unscored —
    CVE-2012-1954

    Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.…

  • Unscored —
    CVE-2012-1965

    Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a…

  • Unscored —
    CVE-2012-1953

    The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6,…