Skip to content
OpenAdvisories

Archive

27 January 2013

Vulnerabilities first published on this day (UTC), newest first.

← December 2012 2013 / January /27 February 2013 →
  1. 16
  2. 214
  3. 316
  4. 422
  5. 54
  6. 6 
  7. 7 
  8. 81
  9. 915
  10. 1028
  11. 118
  12. 128
  13. 1329
  14. 141
  15. 1524
  16. 16 
  17. 1793
  18. 1811
  19. 194
  20. 20 
  21. 2110
  22. 2210
  23. 231
  24. 2444
  25. 253
  26. 265
  27. 2720
  28. 281
  29. 2918
  30. 301
  31. 3142
All Critical High Medium Low Exploited only Public exploit

20 results · Feed

  • Medium —
    CVE-2012-6112

    PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests

    classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle cont…

    moodle/moodle wordpress tinymce Debian Ubuntu Packagist
  • Unscored —
    CVE-2012-6102

    lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 …

  • Unscored —
    CVE-2012-6105

    blog/rsslib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 continues…

  • Unscored —
    CVE-2012-6106

    calendar/managesubscriptions.php in the Manage Subscriptions implementation in Moodle 2.4.x before 2.4.1 omits a capabi…

  • Unscored —
    CVE-2012-6104

    blog/rsslib.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allows remote attackers to obt…

  • Unscored —
    CVE-2012-6100

    report/outline/index.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly enf…

  • Unscored —
    CVE-2012-6103

    Multiple cross-site request forgery (CSRF) vulnerabilities in user/messageselect.php in the messaging system in Moodle …

  • Medium —
    CVE-2012-6099

    Moodle Arbitrary File Read via Backup Functionality

    The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary file…

    moodle/moodle Packagist
  • Unscored —
    CVE-2012-6101

    Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow r…

  • Unscored —
    CVE-2012-6098

    grade/edit/outcome/edit_form.php in Moodle 1.9.x through 1.9.19, 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before …

  • Unscored —
    CVE-2013-0458

    Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 be…

  • Unscored —
    CVE-2013-0459

    Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 be…

  • Unscored —
    CVE-2013-0460

    Cross-site request forgery (CSRF) vulnerability in the portlet subsystem in the administrative console in IBM WebSphere…

  • Unscored —
    CVE-2013-0651

    The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive infor…

  • Unscored —
    CVE-2013-0462

    Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.1, 7.0 before 7.0.0.27, 8.0, and 8.5 has unknown …

  • Unscored —
    CVE-2013-0653 Public exploit EPSS 19%

    Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy…

  • Unscored —
    CVE-2013-0652

    GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Jav…

  • Unscored —
    CVE-2013-0654

    CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems w…

  • Unscored —
    CVE-2013-0461

    Cross-site scripting (XSS) vulnerability in the virtual member manager (VMM) administrative console in IBM WebSphere Ap…

  • Unscored —
    CVE-2012-5484

    The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate fr…