106 matches found
CVE-2021-0984
In onNullBinding of ManagedServices.java, there is a possible permission bypass due to an incorrectly unbound service. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
EUVD-2026-0984
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mojoomla WPCHURCH allows PHP Local File Inclusion.This issue affects WPCHURCH: from n/a through 2.7.0...
CVE-2000-0984
creationtimestamp| type| source ---|---|--- 2025-05-23 21:02:17+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lpujovt2vz2o...
CVE-2013-0984
Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a crafted message...
CVE-2025-0984
creationtimestamp| type| source ---|---|--- 2025-05-06 12:20:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15097 2025-05-06 14:21:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loj3eobl5t2e 2025-05-06 16:09:32+00:00| seen| https://t.me/cvedetector/24608...
CVE-2025-0984 Arbitrary File Upload in Netoloji Software's E-Flow
Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Netoloji Software E-Flow allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS, File Content Injection. This issue...
CVE-2024-0984
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disableOptimization function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with...
CVE-2024-0984 ImageRecycle pdf & image compression <= 3.1.13 - Missing Authorization to Settings Update in disableOptimization
The ImageRecycle pdf & image compression plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disableOptimization function in all versions up to, and including, 3.1.13. This makes it possible for authenticated attackers, with...
WordPress ImageRecycle pdf & image compression Plugin <= 3.1.13 is vulnerable to Broken Access Control
Software ImageRecycle pdf & image compression Type Plugin Vulnerable versions = 3.1.13 Fixed in 3.1.14 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0984 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 35a4c2f10086 Credits Frances...
Rocky Linux 8 : python36:3.6 (RLSA-2019:0984)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2019:0984 advisory. - SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter. CVE-2019-7164 - SQLAlchemy 1.2.17 has SQL Injectio...
CVE-2017-0984
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
Moodle 3.11.x < 3.11.6 Multiple Vulnerabilities
The version of Moodle installed on the remote host is 3.9.x prior to 3.9.13, 3.10.x prior to 3.10.10 or 3.11.x prior to 3.11.6. It is, therefore, affected by multiple vulnerabilities: - An SQL injection vulnerability in the badges code relating to configuring criteria available by default to...
Moodle 3.9.x < 3.9.13 Multiple Vulnerabilities
The version of Moodle installed on the remote host is 3.9.x prior to 3.9.13, 3.10.x prior to 3.10.10 or 3.11.x prior to 3.11.6. It is, therefore, affected by multiple vulnerabilities: - An SQL injection vulnerability in the badges code relating to configuring criteria available by default to...
SUSE CVE-2004-0984
Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges...
CVE-2022-0984
creationtimestamp| type| source ---|---|--- 2022-04-29 20:25:02+00:00| seen| https://t.me/cibsecurity/41669...
CVE-2022-0984
Users with the capability to configure badge criteria teachers and managers by default were able to configure course badges with profile field criteria, which should only be available for site badges...
CVE-2022-0984
CVE-2022-0984: In Moodle, users with the ability to configure badge criteria (typically teachers/managers) could configure course badges using profile field criteria, a capability that should be limited to site badges. The description does not provide affected versions or a fixed patch. Other con...
CVE-2022-0984
Users with the capability to configure badge criteria teachers and managers by default were able to configure course badges with profile field criteria, which should only be available for site badges...
Fedora: Security Advisory for moodle (FEDORA-2022-1c459083df)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for moodle (FEDORA-2022-09abde662f)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...