Archive
26 March 2017
Vulnerabilities first published on this day (UTC), newest first.
9 results · Feed
-
Unscored —
With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts wi…
-
Medium 5.3
Moodle Global search displays user names for unauthenticated users
In Moodle 3.2.x, global search displays user names for unauthenticated users.
-
Medium 6.1
Moodle XSS in attachments to evidence of prior learning
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.
-
Medium 6.1
Moodle XSS Vulnerability
In Moodle 3.x, XSS can occur via evidence of prior learning.
-
Critical 9.8
Moodle SQL injection via user preferences
In Moodle 2.x and 3.x, SQL injection can occur via user preferences.
-
Unscored —
Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), A…
-
Unscored —
The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-…
-
Medium 5.3
Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote …
-
Medium 6.1
Netflix Security Monkey Open Redirect vulnerability
Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.