Skip to content
OpenAdvisories

Archive

26 March 2017

Vulnerabilities first published on this day (UTC), newest first.

9 results · Feed

  • Unscored —

    With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts wi…

  • Medium 5.3

    Moodle Global search displays user names for unauthenticated users

    In Moodle 3.2.x, global search displays user names for unauthenticated users.

  • Medium 6.1

    Moodle XSS in attachments to evidence of prior learning

    In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.

  • Medium 6.1

    Moodle XSS Vulnerability

    In Moodle 3.x, XSS can occur via evidence of prior learning.

  • Critical 9.8
    CVE-2017-2641 Public exploit EPSS 15%

    Moodle SQL injection via user preferences

    In Moodle 2.x and 3.x, SQL injection can occur via user preferences.

  • Unscored —

    Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), A…

  • Unscored —

    The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-…

  • Medium 5.3

    Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote …

  • Medium 6.1

    Netflix Security Monkey Open Redirect vulnerability

    Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.