Fedora Update for moodle FEDORA-2013-12950

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 17 : moodle-2.2.11-1.fc17 (2013-13252)

Latest upstream release for this branch. Correct unbundling of php-pear-HTML-Quickform. Fix for: MSA-13-0025: XSS vulnerability in YUI library MSA-13-0026: Personal information leak in IMS-LTI CVE-2013-2242 MSA-13-0027: Access issue in Chat module CVE-2013-2243 MSA-13-0028: Answer information...

CVE-2013-2245

CVE-2013-2245 affects Moodle up to 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1. The issue arises from improper RSS token handling for impersonation, allowing remote authenticated users to read an RSS feed and obtain sensitive block information. Conn...

Fedora 19 : moodle-2.4.5-2.fc19 (2013-12964)

Latest upstream release for this branch. Correct unbundling of php-pear-HTML-Quickform. Fix for: MSA-13-0025: XSS vulnerability in YUI library MSA-13-0026: Personal information leak in IMS-LTI CVE-2013-2242 MSA-13-0027: Access issue in Chat module CVE-2013-2243 MSA-13-0028: Answer information...

Fedora 18 : moodle-2.3.8-2.fc18 (2013-12950)

Latest upstream release for this branch. Correct unbundling of php-pear-HTML-Quickform. Fix for: MSA-13-0025: XSS vulnerability in YUI library MSA-13-0026: Personal information leak in IMS-LTI CVE-2013-2242 MSA-13-0027: Access issue in Chat module CVE-2013-2243 MSA-13-0028: Answer information...

Debian Security Advisory DSA 2245-1 (chromium-browser)

The remote host is missing an update to chromium-browser announced via advisory DSA 2245-1. OpenVAS Vulnerability Test $Id: deb22451.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2245-1 chromium-browser Authors: Thomas Reinke Copyright: Copyright c 2011...

Debian DSA-2245-1 : chromium-browser - several vulnerabilities

Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-1292 Use-after-free vulnerability in the frame-loader implementation in Google Chrome allows remote attackers to cause a denial of servi...

CVE-2008-2245

creationtimestamp| type| source ---|---|--- 2008-10-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6732...

Microsoft Windows Image Color Management System Code Execution Vulnerability (952954)

This host is missing a critical security update according to Microsoft Bulletin MS08-046. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows图形颜色管理组件堆溢出漏洞（MS08-046）

BUGTRAQ ID: 30594 CVECAN ID: CVE-2008-2245 Microsoft Windows是微软发布的非常流行的操作系统。 Windows操作系统中所捆绑的图形颜色管理（ICM）组件使用Microsoft颜色管理系统（MSCMS）模块帮助用户跨各种设备（扫描仪、相机、打印机等）始终一致的重新生成颜色。mscms.dll库的InternalOpenColorProfile函数没有正确地验证超长参数，如果用户受骗打开了特制的图像文件，就可能触发堆溢出，导致执行任意代码。 Microsoft Windows XP SP3 Microsoft Windows XP...

iDefense Security Advisory 08.12.08: Microsoft Windows Color Management Module Heap Buffer Overflow Vulnerability

iDefense Security Advisory 08.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 12, 2008 I. BACKGROUND Microsoft Windows Color Management Module provides consistent color mappings between different devices and applications. It is also used to transform colors between color spaces...

CVE-2008-2245

CVE-2008-2245 affects Microsoft Windows Image Color Management System (ICM) via a heap-based overflow in mscms.dll (InternalOpenColorProfile). The vulnerability, in the ICCM/ICM component, allows remote code execution when a crafted image file is opened. Affected systems include Windows 2000 SP4,...

Microsoft Color Management System (MSCMS) module remote code execution

Overview The Microsoft Color Management System MSCMS module for the Microsoft ICM component is vulnerable to a remote code execution vulnerability which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description According to Microsoft, the Microsoft...

Debian Security Advisory DSA 1370-1 (phpmyadmin)

The remote host is missing an update to phpmyadmin announced via advisory DSA 1370-1. OpenVAS Vulnerability Test $Id: deb13701.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1370-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1370-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1370-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1370-2] New phpmyadmin packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1370-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 10th, 2007 http://www.debian.org/security/faq -...

CVE-2007-2245

CVE-2007-2245 describes remote cross-site scripting (XSS) in phpMyAdmin prior to 2.10.1.0, enabling an attacker to inject arbitrary script/HTML via (1) the fieldkey parameter to browse_foreigners.php or (2) input to the PMA_sanitize function. Connected docs confirm multiple advisories and Debian/...

XSS vulnerabilities

PMASA-2007-4 Announcement-ID: PMASA-2007-4 Date: 2007-04-24 Updated: 2007-05-17 Summary XSS vulnerabilities Description We received an advisory from Lukasz Plonka "sp3x" SecurityReason and we wish to thank him for his work. It was possible to trigger these attacks on various scripts due to...

CVE-2004-2245

Goollery is affected by multiple XSS in viewalbum.php (via the page parameter) and viewpic.php (via the btopage parameter). The CVE entry documents a reflected XSS vulnerability in Goollery 0.03 that allows remote attackers to inject arbitrary HTML/JS in a user’s browser. OpenVAS/Nessus entries c...