70 matches found
Security Advisory-Information Leakage Vulnerability in Huawei P7 Smartphone
MeWidget is a plug-in of Huawei Emotion UI. The MeWidget module on Huawei smartphone P7 has a vulnerability that could lead to the disclosure of contact information. Attackers can obtain the name and URI information of mobile phone users through the malware installed on the smartphones...
Ubuntu 14.04 LTS : APT vulnerability (USN-2246-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2246-1 advisory. Jakub Wilk discovered that APT did not correctly validate signatures when downloading source packages. If a remote attacker were able to perform a...
CVE-2014-2246
CVE-2014-2246 is an XSS vulnerability in the integrated web server of Siemens SIMATIC S7-1500 CPU PLCs with firmware older than 1.5.0 . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The affected component is the web server running on the PLC dev...
Fedora Update for moodle FEDORA-2013-12964
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for moodle FEDORA-2013-12950
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 17 : moodle-2.2.11-1.fc17 (2013-13252)
Latest upstream release for this branch. Correct unbundling of php-pear-HTML-Quickform. Fix for: MSA-13-0025: XSS vulnerability in YUI library MSA-13-0026: Personal information leak in IMS-LTI CVE-2013-2242 MSA-13-0027: Access issue in Chat module CVE-2013-2243 MSA-13-0028: Answer information...
CVE-2013-2246
mod/feedback/lib.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/feedback:view capability before displaying recent feedback, which allows remote authenticated users to obtain sensitive information via a...
CVE-2013-2246
mod/feedback/lib.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/feedback:view capability before displaying recent feedback, which allows remote authenticated users to obtain sensitive information via a...
CVE-2013-2246
CVE-2013-2246 affects Moodle where mod/feedback/lib.php does not check the mod/feedback:view capability before displaying recent feedback, enabling remote authenticated users to obtain sensitive information via requests for all course feedback since a given time. Affected Moodle branches span 2.1...
Fedora 18 : moodle-2.3.8-2.fc18 (2013-12950)
Latest upstream release for this branch. Correct unbundling of php-pear-HTML-Quickform. Fix for: MSA-13-0025: XSS vulnerability in YUI library MSA-13-0026: Personal information leak in IMS-LTI CVE-2013-2242 MSA-13-0027: Access issue in Chat module CVE-2013-2243 MSA-13-0028: Answer information...
Fedora 19 : moodle-2.4.5-2.fc19 (2013-12964)
Latest upstream release for this branch. Correct unbundling of php-pear-HTML-Quickform. Fix for: MSA-13-0025: XSS vulnerability in YUI library MSA-13-0026: Personal information leak in IMS-LTI CVE-2013-2242 MSA-13-0027: Access issue in Chat module CVE-2013-2243 MSA-13-0028: Answer information...
Debian DSA-2591-1 : mahara - several vulnerabilities
Multiple security issues have been found in Mahara, an electronic portfolio, weblog, and resume builder, which can result in cross-site scripting, clickjacking or arbitrary file execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
CVE-2012-2246
CVE-2012-2246 affects Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4. The issue allows remote attackers to perform clickjacking and bypass CSRF protections to delete arbitrary users via account/delete.php. The vulnerability is described in the standard CVE details and is tied to Mahara deployme...
Debian Security Advisory DSA 2246-1 (mahara)
The remote host is missing an update to mahara announced via advisory DSA 2246-1. OpenVAS Vulnerability Test $Id: deb22461.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2246-1 mahara Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
CVE-2011-2246
The CVE-2011-2246 entry concerns Oracle E-Business Suiteās Business Intelligence component, affecting versions 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 12.1.3. The vulnerability allows remote attackers to impact integrity via unknown vectors related to Financials. The NVD lists a modified b...
Fedora Update for feh FEDORA-2011-0074
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for feh FEDORA-2011-0111
Check for the Version of feh OpenVAS Vulnerability Test Fedora Update for feh FEDORA-2011-0111 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...
CVE-2010-2246
feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL...
CVE-2010-2246
CVE-2010-2246 affects feh prior to 1.8, where enabling --wget-timestamp allows remote command execution via shell metacharacters in a URL. The issue is confirmed in multiple OpenVAS/Gentoo/Gentoo GLSA entries, with CVSS v2 base score 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P). Mitigation documented in GLSA...