Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal

Exploit Title: Lexmark Services Monitor 2.27.4.0.39 - Directory Traversal Google Dork: N/A Date: 2019-11-15 Exploit Author: Kevin Randall Vendor Homepage: https://www.lexmark.com/enus.html Software Link: https://www.lexmark.com/enus.html Version: 2.27.4.0.39 Latest Version Tested on: Windows Serv...

SUSE SLES12 Security Update : bash (SUSE-SU-2019:2976-1)

This update for bash fixes the following issues : CVE-2012-6711: Fixed a heap-based buffer overflow during echo of unsupported characters bsc1138676. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE-SU-2019:2976-1 Security update for bash

This update for bash fixes the following issues: - CVE-2012-6711: Fixed a heap-based buffer overflow during echo of unsupported characters bsc1138676...

CVE-2012-1160

Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php...

CVE-2012-1158

Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export...

CVE-2012-1157

Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+, 2.0 to 2.0.7+ are affected...

CVE-2012-1159

Moodle before 2.2.2: Overview report allows users to see hidden courses Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+ affected...

CVE-2012-1158

Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+ are affected...

CVE-2012-1161

Summary of CVE-2012-1161 (Moodle) : Affected Moodle installations before 2.2.2 are vulnerable to a course information leak where hidden courses appear in tag search results. The issue is a disclosure in the course listing mechanism, with an impact described asPartial confidentiality loss (NVD CVS...

CVE-2012-1170

The CVE-2012-1170 entry affects Moodle prior to 2.2.2, describing an issue in the external enrolment plugin context where capability checks are not thorough. The vulnerability is tied to insufficient permission validation in the enrolment workflow, enabling potential elevation of access via that ...

CVE-2012-1169

CVE-2012-1169 affects Moodle prior to 2.2.2, causing a personal information disclosure where the admin setting for user name display (set to first name) reveals full names in page breadcrumbs. Affected versions per Ubuntu listing include 2.0–2.0.7+, 2.1–2.1.4+, and 2.2–2.2.1+. The NVD entry confi...

CVE-2012-1160

CVE-2012-1160 affects Moodle prior to 2.2.2, with a permission flaw in Forum Subscriptions allowing unenrolled users to subscribe/unsubscribe via mod/forum/index.php. Public data confirms affected versions include Moodle 2.1.x up to 2.1.4+, and 2.2.x up to 2.2.1+. Root cause described as a permis...

CVE-2012-1160

Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php...

CVE-2012-1159

CVE-2012-1159 concerns Moodle before 2.2.2 where the Overview report can disclose information by letting users see hidden courses. Public references confirm affected versions include 2.2.x up to 2.2.1+ and that the issue is an information disclosure vulnerability in course visibility. Connected a...

CVE-2012-1158

CVE-2012-1158 affects Moodle before 2.2.2. The vulnerability is a course information leak in the gradebook export, allowing users to see hidden grade items in exported data. The NVD entry confirms the impact as partial confidentiality loss with no integrity or availability impact, rating CVSSv3.1...

CVE-2012-1157

CVE-2012-1157 concerns Moodle prior to 2.2.2, where a default repository capabilities issue causes all repositories to be viewable by all users. Connected documents confirm the affected condition (default permissions affecting repositories) and identify Moodle versions affected. The root cause is...

CVE-2012-1156

Moodle vulnerability CVE-2012-1156 affects Moodle releases prior to 2.2.2, where private user files could be included in course backups. Connected advisories/cve listings confirm affected versions across 2.0–2.2.x (e.g., 2.0–2.0.7+, 2.1–2.1.4+, 2.2–2.2.1+) and describe this as a design/logic flaw...

CVE-2012-1168

Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified...

CVE-2012-1168

CVE-2012-1168 affects Moodle before 2.2.2. The vulnerability causes the user password to be reset if the password is not specified when updating a user profile. Affected versions include Moodle 2.0.x to 2.2.x (2.0–2.0.7+, 2.1–2.1.4+, 2.2–2.2.1+). No remediation details are provided in the connect...

CVE-2012-1155

Moodle has a database activity export permission issue where the export function incorrectly includes entries from groups the user does not belong to. Connected sources confirm this vulnerability (CVE-2012-1155) and enumerate affected Moodle versions (e.g., 1.9.x up to 1.9.16+, 2.0.x up to 2.0.7+...