750 matches found
CVE-2022-40314
CVE-2022-40314 describes a remote code execution risk when restoring backup files originating from Moodle 1.9. The vulnerability is reported with a high/critical impact (CVSS: 9.8, NETWORK attack vector, no user interaction) and is supported by multiple connected sources (NVD entry and Nessus/Ope...
CVE-2022-40314
A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified...
CVE-2022-40314
A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified...
CVE-2022-40314
A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified...
Stack overflow
DISPUTED md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. NOTE: the vendor's position is that the product is not intended for untrusted input...
md2roff 缓冲区错误漏洞
md2roff is a personal developer by Nicholas Christopoulos that converts markdown to groff / troff man, mdoc, mm, mom documents. A buffer error vulnerability exists in md2roff version 1.9, which is caused by a stack-based buffer overflow in Markdown files...
PT-2022-25737 · Md2Roff · Md2Roff
Name of the Vulnerable Software and Affected Versions: md2roff version 1.9 Description: The issue is a stack-based buffer overflow that can occur when processing a Markdown file. It's noted that the vendor considers the product not intended for untrusted input. Recommendations: For md2roff versio...
PT-2022-22356 · Jenkins · Jenkins Opsgenie Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins OpsGenie Plugin versions 1.9 and earlier Description: The issue concerns the transmission and storage of API keys in plain text. Specifically, API keys are transmitted in plain text as part of the global Jenkins configuration form and...
MiniCMS 安全漏洞
MiniCMS is to simple personal website content management system. A security vulnerability exists in MiniCMS v1.9. An attacker exploited the vulnerability to execute arbitrary PHP code via late editing...
PT-2022-22052 · Jenkins · Jenkins +1
Name of the Vulnerable Software and Affected Versions: Jenkins CRX Content Package Deployer Plugin versions 1.9 and earlier Description: The issue is a stored cross-site scripting XSS vulnerability that occurs because the plugin does not escape the name and description of CRX Content Package Choi...
GHSA-62FP-J75Q-MQHC Jenkins CRX Content Package Deployer Plugin subject to Cross-Site Request Forgery
A cross-site request forgery vulnerability in Jenkins CRX Content Package Deployer Plugin prior to 1.9 allowed attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. This issue is patched...
GHSA-FP37-C92Q-4PWQ Kubernetes kube-apiserver unauthorized access
The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced. Authorizations for the resource accessed in this manner are enforced using roles and role bindings within the namespace, meaning that a user with...
CVE-2021-32642
radsecproxy is a generic RADIUS proxy that supports both UDP and TLS RadSec RADIUS transports. Missing input validation in radsecproxy's naptr-eduroam.sh and radsec-dynsrv.sh scripts can lead to configuration injection via crafted radsec peer discovery DNS records. Users are subject to Informatio...
MoinMoin Improper Access Control
security/init.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users with virtual group membership to be treated as a member of the group...
PT-2022-20421 · Jenkins · Jenkins Promoted Builds (Simple) Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Promoted Builds Simple Plugin versions 1.9 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the name and description of Promotion Level parameters on views displaying...
RubyGems Regular Expression Denial of Service vulnerability
Algorithmic complexity vulnerability in Gem::Version::VERSIONPATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x before 2.0.8, and 2.1.x before 2.1.0, as used in Ruby 1.9.0 through 2.0.0p247, allows remote attackers to cause a denial of service CPU...
GHSA-JCRJ-GMR6-P5J8 Moodle Allows Modification of Constants
The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not recognize Forms API setConstant operations, which allows remote attackers to submit unexpected form content by modifying the values of constant...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting XSS vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message...
ALEA-2022:1551 alsa-sof-firmware bug fix and enhancement update
The alsa-sof-firmware package contains firmware binaries for the Sound Open Firmware project. Bug Fixes and Enhancements: Update Intel SOF firmware to 1.9 BZ2044420...
