20 April 2017

6 results · Clear filters · Feed

• Medium 6.5
  CVE-2016-3729

  Moodle Improper Access Control

  The user editing form in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to edit profile fields locked by the administrator.

  moodle/moodle Packagist
  Apr 20, 2017
• Medium 4.3
  CVE-2016-3732

  Moodle sensitive information disclosure

  The capability check to access other badges in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to read the badges of other users.

  moodle/moodle moodle Ubuntu Packagist
  Apr 20, 2017
• Medium 4.3
  CVE-2016-3733

  Moodle Improper Access Control

  The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber.

  moodle/moodle Packagist
  Apr 20, 2017
• Medium 4.3
  CVE-2017-2806

  An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion function…

  Lexmark Perceptive Document Filters
  Apr 20, 2017
• Medium 6.1
  CVE-2016-6347

  Improper Neutralization of Input During Web Page Generation in RESTEasy

  Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  resteasy resteasy3.0 org.jboss.resteasy:resteasy-client Debian Ubuntu Maven
  Apr 20, 2017
• Medium 6.6
  CVE-2017-7938 Public exploit

  Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to ca…

  dmitry dmitry Debian Ubuntu
  Apr 20, 2017