CVE-2016-0724

The 1 coreenrolgetcourseenrolmentmethods and 2 enrolselfgetinstanceinfo web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated use...

CVE-2016-0724

The 1 coreenrolgetcourseenrolmentmethods and 2 enrolselfgetinstanceinfo web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated use...

CVE-2016-0724

CVE-2016-0724 concerns Moodle’s core enrolment web services: core_enrol_get_course_enrolment_methods and enrol_self_get_instance_info fail to enforce the moodle/course:viewhiddencourses capability. This allows remote authenticated users to obtain sensitive information via the affected web service...

CVE-2016-0724

The 1 coreenrolgetcourseenrolmentmethods and 2 enrolselfgetinstanceinfo web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated use...

Mageia: Security Advisory (MGASA-2016-0029)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0724

Multiple cross-site scripting XSS vulnerabilities in dncs 7.0.0.12 in Cisco Headend Digital Broadband Delivery System allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in a 1 GET or 2 POST request, aka Bug ID CSCur25604...

CVE-2015-0724

CVE-2015-0724 affects Cisco Headend Digital Broadband Delivery System (dncs 7.0.0.12). The issue is cross-site scripting via HTTP GET/POST parameters due to improper input validation. Impact is that remote attackers can inject arbitrary script/HTML, with potential session-related consequences; CV...

Oracle Solaris Third-Party Patch Update : flash (multiple_vulnerabilities_in_adobe_flashplayer6)

The remote Solaris system is missing necessary patches to address security updates : - Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors, a...

WordPress WP ecommerce Shop Styling 'dompdf' Remote File Inclusion Vulnerability

WordPress WP ecommerce Shop Styling Plugin is prone to a remote file inclusion vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

CVE-2013-0724

Overview: CVE-2013-0724 affects the WordPress WP e-Commerce Shop Styling plugin prior to v1.8, via a remote file inclusion in the PHP file includes/generate-pdf.php. The root cause is that the dompdf parameter can be controlled to include arbitrary PHP resources, enabling remote code execution on...

CVE-2014-0724

Cisco Unified Communications Manager (UCM) bulk administration interface (affected: 10.0(1) and earlier) is affected by an authentication bypass leading to arbitrary file read via an unspecified prompt. Root cause: insufficient input validation in the bulk admin prompt flow. Impact: authenticated...

Oracle Linux 5 : Critical: / firefox (ELSA-2007-0724)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0724 advisory. 1.5.0.12-0.3.el4.0.1 - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js for errata rebuild 1.5.0.12-0.3.el4 - Add a patch ...

FreeBSD Ports: linux-f10-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. VID 20923a0d-82ba-11e1-8d7b-003067b2972c OpenVAS Vulnerability Test $ Description: Auto generated from VID 20923a0d-82ba-11e1-8d7b-003067b2972c Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: linux-f10-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Google Chrome < 18.0.1025.151 Multiple Vulnerabilities (Apr 2012) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome < 18.0.1025.151 Multiple Vulnerabilities (Apr 2012) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Memory corruption

Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0724...

CVE-2012-0724

CVE-2012-0724 affects Adobe Flash Player prior to 11.2.202.229 in Google Chrome prior to 18.0.1025.151. The vulnerability enables memory corruption leading to a possible denial of service or other unspecified impact via unknown vectors (distinct from CVE-2012-0725). Connected advisories corrobora...

CVE-2012-0724

Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0725...

Microsoft Windows SMB Unchecked Buffer Denial of Service (MS02-045; CVE-2002-0724)

A denial of service vulnerability has been reported in Microsoft Windows SMB service. The vulnerability is due to an error in the way the server handles packet requests sent over SMB. A remote attacker may exploit this vulnerability by sending a specially crafted packet request to an affected...