Skip to content
OpenAdvisories

Archive

June 2015

Vulnerabilities first published in this month (UTC), newest first.

← May 2015 2015 / June July 2015 →
  1. 125
  2. 219
  3. 38
  4. 47
  5. 57
  6. 6 
  7. 716
  8. 814
  9. 926
  10. 1070
  11. 117
  12. 1216
  13. 1322
  14. 14 
  15. 1567
  16. 1615
  17. 1719
  18. 1816
  19. 1911
  20. 204
  21. 21 
  22. 2210
  23. 2316
  24. 2427
  25. 253
  26. 2611
  27. 272
  28. 2825
  29. 293
  30. 3029
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low —
    CVE-2015-4053

    ceph-deploy uses world-readable permissions on client.admin key

    The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.

    ceph-deploy PyPI
  • Low —
    CVE-2015-0216

    Moodle does not set the RISK_XSS bit for graders

    access.php in the Lesson module in Moodle 2.8.x before 2.8.2 does not set the RISK_XSS bit for graders, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted essay feedback.

    moodle/moodle Packagist
  • Low —
    CVE-2015-0212

    Moodle cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in course/pending.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted course summary.

    moodle/moodle Packagist
  • Low —
    CVE-2015-3179

    Moodle allows attackers to bypass intended login restrictions

    login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account.

    moodle/moodle Packagist
  • Low —
    CVE-2015-3178

    Moodle cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or H…

    moodle/moodle Packagist
  • Low —
    CVE-2015-3174

    Moodle does not set the RISK_XSS bit for graders

    mod/quiz/db/access.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 does not set the RISK_XSS bit for graders, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted gradeb…

    moodle/moodle Packagist
  • Low —
    CVE-2015-2273

    Moodle cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in mod/quiz/report/statistics/statistics_question_table.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to inject arbitrary web script or HT…

    moodle/moodle Packagist
  • Low —
    CVE-2015-2269 Public exploit

    Moodle XSS Vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in lib/javascript-static.js in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allow remote authenticated users to inject arbitrary web script or HTML via a (1) alt or (2…

    moodle/moodle Packagist