CVEs published in July 2012
498 vulnerabilities, 108 critical, 1 exploited.
- moodleAlgorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x...4.0 Medium
- moodlelib/modinfolib.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3...4.0 Medium
- moodleCross-site scripting (XSS) vulnerability in cohort/edit_form.php in Moodle 2.0.x before 2.0.10, 2...3.5 Low
- moodleSQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x...6.5 Medium
- moodleauth/ldap/ntlmsso_attempt.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2...5.0 Medium
- moodleCross-site scripting (XSS) vulnerability in repository/lib.php in Moodle 2.1.x before 2.1.7 and 2...3.5 Low
- moodlemod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not...5.5 Medium
- moodlemod/forum/rsslib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly...4.0 Medium
- moodlelib/filelib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly restrict...3.5 Low
- moodleMultiple cross-site scripting (XSS) vulnerabilities in mod/lti/typessettings.php in Moodle 2.2.x...4.3 Medium
- moodleThe is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1...4.0 Medium
- moodleMoodle Authentication Bypass in File Upload4.0 Medium
- symantec web gatewayThe management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to...5.0 Medium
- symantec web gatewayThe management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to...10.0 High
- symantec web gatewaySQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3...7.5 High
- symantec web gatewayThe management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain...7.2 High
- symantec web gatewayThe management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to...10.0 High
- symantec web gatewaySQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3...7.5 High
- symantec system recovery, backupexec system recovery +1 moreUntrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec...4.4 Medium
- nullsoft winampMultiple heap-based buffer overflows in bmp.w5s in Winamp before 5.63 build 3235 allow remote...7.5 High
- wordpressWordPress before 3.4.1 does not properly restrict access to post contents such as private or...5.0 Medium
- wordpressCross-site request forgery (CSRF) vulnerability in the customizer in WordPress before 3.4.1...6.8 Medium
- wordpressThe map_meta_cap function in wp-includes/capabilities.php in WordPress 3.4.x before 3.4.2, when...2.6 Low
- ray stode accountsserviceThe user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in...1.9 Low
- libtiffMultiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a...6.8 Medium
- libtiffInteger signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and...7.5 High
- libpngOff-by-one error in the png_formatted_warning function in pngerror.c in libpng 1.5.4 through 1.5...7.5 High
- h peter anvin tftp-hpaBuffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and...7.5 High
- openstack diablo, essex, folsom +2 moreOpenStack Nova Arbitrary file injection/corruption through directory traversal issues5.5 Medium
- openstack essex, folsom +1 moreOpenStack Nova Directory traversal vulnerability5.5 Medium
- viewvcThe SVN revision view (lib/vclib/svn/svn_repos.py) in ViewVC before 1.1.15 does not properly...5.0 Medium
- viewvcThe remote SVN views functionality (lib/vclib/svn/svn_ra.py) in ViewVC before 1.1.15 does not...5.0 Medium
- nalin dahyabhai vteThe VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause...4.0 Medium
- trustwave modsecurity, opensuse +1 moreModSecurity before 2.5.11 treats request parameter values containing single quotes as files,...4.3 Medium
- moodleMoodle 1.9.x before 1.9.18, 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows...4.0 Medium
- moodlemod/data/preset.php in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not properly iterate...5.5 Medium
- moodleCross-site scripting (XSS) vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2...3.5 Low
- moodleCross-site scripting (XSS) vulnerability in lib/filelib.php in Moodle 2.0.x before 2.0.9, 2.1.x...3.5 Low
- moodleSQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x...6.5 Medium
- moodleCross-site scripting (XSS) vulnerability in blog/lib.php in the blog implementation in Moodle 1.9...2.6 Low
- moodleCross-site scripting (XSS) vulnerability in admin/webservice/forms.php in the web services...3.5 Low
- moodleCross-site scripting (XSS) vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1...3.5 Low
- moodleadmin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3...6.5 Medium
- moodleMoodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated...5.5 Medium
- moodleThe Multi-Authentication feature in the Central Authentication Service (CAS) functionality in...5.0 Medium
- moodleMoodle Authentication Bypass in Question-Bank4.0 Medium
- moodleMoodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass...4.0 Medium
- moodleMoodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass the...4.0 Medium
- moodleMoodle Exposes Sensitive User Information4.0 Medium
- phpThe SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir...5.0 Medium
- Show moreLoading…