CVEs published in November 2014
542 vulnerabilities, 135 critical, 10 exploited.
- moodleMoodle Temporary Passwords are Brute Force-able7.5 High
- moodleMoodle has multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module6.8 Medium
- moodleMoodle allows attackers to remove wiki pages5.5 Medium
- moodleMoodle multiple cross-site request forgery (CSRF) vulnerabilities6.8 Medium
- moodleMoodle allows attackers to upload files containing JavaScript2.1 Low
- moodleMoodle does not verify group permissions4.0 Medium
- moodleMoodle allows attackers to obtain sensitive information4.0 Medium
- moodleMoodle allows attackers to bypass the mod/lti:view capability requirement4.0 Medium
- moodleMoodle cross-site scripting (XSS) vulnerability3.5 Low
- gogits gogsCross-site Scripting in Gogs4.3 Medium
- gogits gogsSQL Injection in Gogs7.5 High
- gogits gogsSQL Injection in gogs.io/gogs7.5 High
- simple email form project email formCross-site scripting (XSS) vulnerability in Simple Email Form 1.8.5 and earlier allows remote...4.3 Medium
- moxi9 phpfoxCross-site scripting (XSS) vulnerability in Guests/Boots in AdminCP in Moxi9 PHPFox before 4 Beta...4.3 Medium
- open-xchange appsuiteSQL injection vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev36 and 7.6.x before 7.6...6.5 Medium
- dolibarrMultiple SQL injection vulnerabilities in Dolibarr ERP/CRM before 3.6.1 allow remote...6.5 Medium
- huawei e3236 firmware, e3276 firmware, e5180s-22 firmware +1 more +3 moreMultiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3276 and E3236 TCPU...6.8 Medium
privoxyMageiaUpdated privoxy package fixes security vulnerabilityNo score- advantech webaccessStack-based buffer overflow in Advantech WebAccess, formerly BroadWin WebAccess, before 8.0...7.2 High
- cisco unified communications manager im and presence serviceCisco Unified Communications Manager IM and Presence Service 9.1(1) produces different returned...5.0 Medium
- tibco silver fabric enabler, spotfire deployment kit, spotfire web player +2 moreSpotfire Web Player Engine in TIBCO Spotfire Web Player 6.0.x before 6.0.2 and 6.5.x before 6.5.2...4.0 Medium
- tibco managed file transfer command center, managed file transfer internet server, slingshot +1 more +3 moreTIBCO Managed File Transfer Internet Server before 7.2.4, Managed File Transfer Command Center...6.4 Medium
- canonical ubuntu, ubuntu apparmor +1 moreapparmor_parser in the apparmor package before 2.8.95~2430-0ubuntu5.1 in Ubuntu 14.04 allows...6.4 Medium
- zteusa zxdsl 831ciiMultiple cross-site request forgery (CSRF) vulnerabilities in ZTE ZXDSL 831CII allow remote...6.8 Medium
- ubercartThe Ubercart module 7.x-3.x before 7.x-3.7 for Drupal does not properly protect the per-user...4.0 Medium
- commerceguys commerceThe default checkout completion rule in the commerce_order module in the Drupal Commerce module 7...5.0 Medium
- protected pages project pagesThe Protected Pages module 7.x-2.x before 7.x-2.4 for Drupal allows remote attackers to bypass...7.5 High
- twilio project twilioThe Twilio module 7.x-1.x before 7.x-1.9 for Drupal does not properly restrict access to the...5.5 Medium
- web component roles project component rolesThe Webform Component Roles module 6.x-1.x before 6.x-1.8 and 7.x-1.x before 7.x-1.8 for Drupal...6.4 Medium
- zteusa zxdsl 831Multiple cross-site scripting (XSS) vulnerabilities in ZTE ZXDSL 831 allow remote attackers to...4.3 Medium
- zte zxdsl 831, zxdsl 831cii +1 moreCross-site scripting (XSS) vulnerability in the Quick Stats page (psilan.cgi) in ZTE ZXDSL 831...4.3 Medium
- zte zxdslMultiple cross-site request forgery (CSRF) vulnerabilities in ZTE ZXDSL 831CII allow remote...6.8 Medium
- zte zxhn h108l firmwareZTE ZXHN H108L with firmware 4.0.0d_ZRQ_GR4 allows remote attackers to modify the CWMP...5.0 Medium
- pivotal software spring frameworkImproper Limitation of a Pathname to a Restricted Directory in Spring Framework5.0 Medium
- monstraMonstra 3.0.1 and earlier uses a cookie to track how many login attempts have been attempted,...5.0 Medium
- vld interactive vldpersonalsMultiple SQL injection vulnerabilities in vldPersonals before 2.7.1 allow remote attackers to...7.5 High
- vld interactive vldpersonalsCross-site scripting (XSS) vulnerability in vldPersonals before 2.7.1 allows remote attackers to...4.3 Medium
- lantronix xprintserverCross-site request forgery (CSRF) vulnerability in Lantronix xPrintServer allows remote attackers...6.8 Medium
- lantronix xprintserverLantronix xPrintServer does not properly restrict access to ips/, which allows remote attackers...10.0 High
- incrediblepbx incredible pbx 11reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows remote authenticated users to execute...6.5 Medium
- mulesoft mule enterprise management consoleMule Enterprise Management Console (MMC) does not properly restrict access to handler...6.5 Medium
- xoopsSQL injection vulnerability in htdocs/modules/system/admin.php in XOOPS before 2.5.7 Final allows...6.5 Medium
- x7chat x7 chatlib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remote authenticated users to execute...6.5 Medium
- digitalvidhya digi online examination systemUnrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online...7.5 High
- nibbleblogMultiple cross-site scripting (XSS) vulnerabilities in Nibbleblog before 4.0.2 allow remote...4.3 Medium
- maarch letterboxSQL injection vulnerability in Maarch LetterBox 2.8 allows remote attackers to execute arbitrary...5.0 Medium
- advantech eki-6340, eki-6340 firmware +1 morecgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated...9.0 High
- faronics deep freezeThe DfDiskLo.sys driver in Faronics Deep Freeze Standard and Enterprise 8.10 and earlier allows...7.2 High
- drupal, debian linux, secure password hashes project passwords hashes +2 moreThe password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass)...5.0 Medium
- drupal, debian linux +1 moreDrupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a...6.8 Medium
- Show moreLoading…