Skip to content
OpenAdvisories

Vendor

[UNKNOWN]

239 known vulnerabilities.

Products

moodle 22 kernel: 19 jenkins 12 samba 9 ceph 7 ansible 7 389-ds-base 6 keycloak 6 dpdk 5 procps-ng, procps 5 pki-core 4 gnutls 4 QEMU: 3 golang 3 CFME 3 pdns 3 atomic-openshift 3 openstack-mistral 3 rkt 3 undertow 3 sssd 3 nginx 3 python 2 glusterfs 2 libtirpc 2 openwsman 2 infinispan 2 vdsm 2 ttembed 2 wildfly 2 redhat-certification 2 CloudForms 2 Tower 2 ovirt-engine 2 foreman 2 git-annex 2 curl 2 pulp 2 jboss 2 admin-cli 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.4
    CVE-2019-3847 Public exploit

    Moodle XSS Vulnerability

    A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to t…

    [UNKNOWN] moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 4.3
    CVE-2019-3810 Public exploit EPSS 14%

    Moodle XSS Vulnerability

    A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did not escape users' full names, which are included as text when hovering over profile images. Note this page is …

    [UNKNOWN] moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 5.9
    CVE-2018-16875 Public exploit

    Denial of service in chain verification in crypto/x509

    The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting…

    [UNKNOWN] golang stdlib golang-1.8 Ubuntu Go
  • Medium 6.5
    CVE-2018-16854 Public exploit

    Moodle Login CSRF vulnerability in login form

    A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form is not protected by a token to prevent login cross-site request forgery. Fixed versions include 3.6, 3.5.3, 3.4.6, 3.3.9 and 3.1.15.

    [UNKNOWN] moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 5.3
    CVE-2018-16843 Public exploit EPSS 48%

    nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessiv…

    [UNKNOWN] nginx nginx nginx Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2016-6328 Public exploit

    A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can…

    [UNKNOWN] libexif libexif libexif Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2017-2666 Public exploit

    Undertow-core vulnerable to HTTP Request Smuggling

    It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data int…

    [UNKNOWN] undertow undertow undertow Debian Ubuntu Maven
  • Medium 5.3
    CVE-2018-10906 Public exploit

    In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is ac…

    [UNKNOWN] fuse fuse fuse3 Debian Ubuntu Alpine