Archive
20 April 2017
Vulnerabilities first published on this day (UTC), newest first.
101 results · Feed
-
Unscored —
A vulnerability in the detection engine parsing of Pragmatic General Multicast (PGM) protocol packets for Cisco Firepow…
-
Unscored —
The Cloud Controller in Cloud Foundry cf-release versions prior to v255 allows authenticated developer users to exceed …
-
Unscored —
A vulnerability in the Internet Key Exchange Version 1 (IKEv1) XAUTH code of Cisco ASA Software could allow an authenti…
-
Unscored —
A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload…
-
Unscored —
A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticat…
-
Unscored —
A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, rem…
-
Unscored —
A vulnerability in the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) code of Cisco ASA Software could a…
-
Unscored —
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16 could allow an authenti…
-
Unscored —
A vulnerability in the session identification management functionality of the web-based GUI of Cisco Integrated Managem…
-
Unscored —
A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticat…
-
Unscored —
A vulnerability in the web framework code of Cisco Prime Infrastructure 2.2(2) could allow an unauthenticated, remote a…
-
Unscored —
A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software 1.0.0 co…
-
Unscored —
A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticat…
-
Unscored —
A vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause an affec…
-
Unscored —
Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 throu…
-
Unscored —
A vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance (ASA) Software (8.0 through 8.7 and 9.0 thro…
-
Unscored —
Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 throu…
-
Unscored —
A vulnerability in the Session Initiation Protocol (SIP) UDP throttling process of Cisco Unified Communications Manager…
-
Unscored —
Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 throu…
-
Unscored —
Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 throu…
-
Unscored —CVE-2015-8285 Public exploit
The webssx.sys driver in QuickHeal 16.00 allows remote attackers to cause a denial of service.
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in ManageEngine Password Manager Pro before 8.5 (Build 8500).
-
High 8.8
Moodle Cross-site request forgery (CSRF) vulnerability
Cross-site request forgery (CSRF) vulnerability in markposts.php in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13 and earlier allows remote attackers to hijack the authentication of users for requests that marks forum pos…
-
Medium 6.5
Moodle Improper Access Control
The user editing form in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to edit profile fields locked by the administrator.
-
Medium 4.3
Moodle sensitive information disclosure
The capability check to access other badges in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to read the badges of other users.
-
Medium 4.3
Moodle Improper Access Control
The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber.
-
Unscored —
Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidd…
-
Unscored —
IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to o…
-
Unscored —
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows …
-
Unscored —
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows …
-
Unscored —
IBM Curam Social Program Management 5.2, 6.0, and 7.0 could allow an authenticated attacker to disclose sensitive infor…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Red Hat JBoss BRMS and BPMS 6 allows remote attackers to hijack the …
-
Unscored —
IBM Security Guardium 8.2, 9.0, and 10.0 contains a vulnerability that could allow a local attacker with CLI access to …
-
Unscored —
An Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5.2 a…
-
Unscored —
An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, versio…
-
Unscored —
A Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.…
-
Unscored —
coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (CPU consumption) …
-
Unscored —
coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (out-of-bounds rea…
-
Unscored —
Buffer overflow in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (application cr…
-
Unscored —
The EncodeImage function in coders/pict.c in ImageMagick allows remote attackers to cause a denial of service (out-of-b…