Archive
20 January 2017
Vulnerabilities first published on this day (UTC), newest first.
25 results · Feed
-
Unscored —CVE-2014-2045 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet Multichannel VPN Router 3…
-
Unscored —
The hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does not validate the remo…
-
Unscored —
The hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does not validate the remo…
-
Unscored —CVE-2016-6253 Public exploit
mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of o…
-
Unscored —
The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows r…
-
Unscored —
parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash…
-
Unscored —
Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlie…
-
Unscored —
Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to cras…
-
Unscored —
The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-…
-
Unscored —
The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read an…
-
Unscored —
Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the applicat…
-
Unscored —
Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attacke…
-
High 7.3
Moodle Weak Password Recovery Mechanism for Forgotten Password
In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed.
-
Unscored —
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.
-
Unscored —
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.
-
Medium 5.3
Moodle Unauthenticated Access
In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.
-
Unscored —
A vulnerability in Tiki Wiki CMS 15.2 could allow a remote attacker to read arbitrary files on a targeted system via a …
-
Medium 5.4
Moodle Does Not Escape Characters In Email Headers
In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam.
-
Medium 5.4
Moodle sensitive information disclosure
In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course.
-
Medium 5.3
Moodle Glossary search displays entries without checking user permissions to view them
In Moodle 3.x, glossary search displays entries without checking user permissions to view them.
-
Medium 6.1
Moodle Cross-site Scripting in assignment submission page
In Moodle 3.x, there is XSS in the assignment submission page.
-
Medium 5.3
Moodle Incorrect sanitation of attributes in forums
In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums.
-
Critical 9.8
Subrion CMS PHP Object Injection
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.
-
Unscored —
Directory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allo…