Fedora 16 : moodle-2.0.10-1.fc16 (2012-11028)

Latest upstreams to address security issues. CVE-2012-3387 CVE-2012-3388 CVE-2012-3389 CVE-2012-3390 CVE-2012-3391 CVE-2012-3392 CVE-2012-3393 CVE-2012-3394 CVE-2012-3395 CVE-2012-3396 CVE-2012-3397 CVE-2012-3398 Note that Tenable Network Security has extracted the preceding description block...

CVE-2012-2353

Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive user information from hidden fields by leveraging the teacher role and navigating to "Enrolled users" under the Users Settings section...

CVE-2012-2353

CVE-2012-2353 affects Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3. The issue allows remote authenticated users with the teacher role to obtain sensitive user information from hidden fields by navigating to the Enrolled users page under Users Settings. The description states the vulnerability...

Fedora Update for moodle FEDORA-2012-8325

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for moodle FEDORA-2012-8365

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian: Security Advisory (DSA-2353-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2353

CVE-2010-2353 affects the Drupal Content Construction Kit (CCK) Node Reference module for Drupal 6.x prior to 6.x-2.7. The backend URL used by the autocomplete widget does not perform field‑level access checks on the source field, allowing remote attackers to discover titles and IDs of nodes the ...

Mandrake Security Advisory MDVSA-2009:188 (php4-eaccelerator)

The remote host is missing an update to php4-eaccelerator announced via advisory MDVSA-2009:188. OpenVAS Vulnerability Test $Id: mdksa2009188.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:188 php4-eaccelerator Authors: Thomas Reinke Copyright:...

Mandrake Security Advisory MDVSA-2009:188 (php4-eaccelerator)

The remote host is missing an update to php4-eaccelerator announced via advisory MDVSA-2009:188. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2009-2353

CVE-2009-2353 affects the PHP extension eAccelerator (encoder.php). The vulnerability arises when encoder.php copies a local executable file to a location under the web root via the -o option, and a subsequent direct HTTP request to that file allows remote code execution. Documentation in multipl...

CVE-2009-2353

encoder.php in eAccelerator allows remote attackers to execute arbitrary code by copying a local executable file to a location under the web root via the -o option, and then making a direct request to this file, related to upload of image files...

CVE-2008-2353

creationtimestamp| type| source ---|---|--- 2008-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5647...

Debian: Security Advisory (DSA-1046-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1051-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2002-2353

CVE-2002-2353 concerns TFTPD32, where versions 2.50 and 2.50.2 allow a remote attacker to read or write arbitrary files by using a full pathname in GET and PUT requests. The issue is network-triggered and arises from the TFTP server’s handling of pathnames (no authentication implied in the entry)...

CVE-2007-2353

Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception message...

CVE-2007-2353

Apache Axis 1.0 is affected. The vulnerability allows remote attackers to obtain the installation path by requesting a non-existent WSDL file, which yields an exception message that leaks sensitive information. This is a information-disclosure issue with a partial impact disclosure as described; ...

Debian DSA-1051-1 : mozilla-thunderbird - several vulnerabilities

Several security related problems have been discovered in Mozilla Thunderbird. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2005-2353 The 'run-mozilla.sh' script allows local users to create or overwrite arbitrary files when debugging is enable...

Debian DSA-1046-1 : mozilla - several vulnerabilities

Several security related problems have been discovered in Mozilla. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2005-2353 The 'run-mozilla.sh' script allows local users to create or overwrite arbitrary files when debugging is enabled via a...

[SECURITY] [DSA 1051-1] New Mozilla Thunderbird packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1051-1 [email protected] http://www.debian.org/security/ Martin Schulze May 4th, 2006 http://www.debian.org/security/faq -...