Skip to content
OpenAdvisories

Archive

May 2013

Vulnerabilities first published in this month (UTC), newest first.

← April 2013 2013 / May June 2013 →
  1. 121
  2. 221
  3. 314
  4. 43
  5. 55
  6. 6 
  7. 73
  8. 818
  9. 914
  10. 1025
  11. 11 
  12. 12 
  13. 1315
  14. 141
  15. 1531
  16. 1658
  17. 17 
  18. 18 
  19. 1923
  20. 20 
  21. 217
  22. 2218
  23. 2317
  24. 2416
  25. 2513
  26. 26 
  27. 277
  28. 284
  29. 2915
  30. 30 
  31. 317
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium —
    CVE-2013-2082

    Moodle does not enforce capability requirements for reading blog comments

    Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not enforce capability requirements for reading blog comments, which allows remote attackers to obtain sensitive information via a crafted request.

    moodle/moodle moodle Ubuntu Packagist
  • Medium —
    CVE-2013-2083

    Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class

    The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly handle a certain array-element syntax, which allows remote attackers to bypass intended form-data filteri…

    moodle/moodle moodle Ubuntu Packagist
  • Medium —
    CVE-2013-2080

    Moodle is vulnerable to Sensitive Information Disclosure

    The core_grade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and…

    moodle/moodle moodle Ubuntu Packagist
  • Medium —
    CVE-2013-2081

    Moodle does not consider "don't send" attributes during hub registration

    Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not consider "don't send" attributes during hub registration, which allows remote hubs to obtain sensitive site information by reading form data.

    moodle/moodle moodle Ubuntu Packagist
  • Medium 4.3
    CVE-2013-2059

    OpenStack Identity (Keystone) improper revoking of the authentication token when deleting a user

    OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, which allows remote authenticated users to retain access via …

    keystone keystone Debian PyPI
  • Medium 6.5
    CVE-2013-1675 Exploited

    Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before…

    KEV Mar 3, 2022
  • Medium 4.3
    CVE-2013-0305

    Django Data leakage via admin history log

    The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated administrators to obtain sensitive object history information.

    python-django django Debian PyPI
  • Medium 5.3
    CVE-2013-0306

    Django is vulnerable to Denial of Service attack in formset

    The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of service (memory consumption) or trigger server errors via a mod…

    python-django django Debian PyPI
  • Medium —
    CVE-2012-5657

    Zend Framework XXE Vulnerability

    The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service (…

    zendframework/zendframework1 zend-framework Ubuntu Packagist