UBUNTU-CVE-2012-2359

admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to gain privileges by leveraging the teacher role and modifying their own capabilities, as demonstrated by obtaining the backup:userinfo capability...

CVE-2012-2359

CVE-2012-2359 affects Moodle versions 2.0.x < 2.0.9, 2.1.x < 2.1.6, and 2.2.x

CVE-2012-2359

admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to gain privileges by leveraging the teacher role and modifying their own capabilities, as demonstrated by obtaining the backup:userinfo capability...

Fedora Update for moodle FEDORA-2012-8365

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for moodle FEDORA-2012-8325

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian Security Advisory DSA 2359-1 (mojarra)

The remote host is missing an update to mojarra announced via advisory DSA 2359-1. OpenVAS Vulnerability Test $Id: deb23591.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2359-1 mojarra Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2359-1 : mojarra - EL injection

It was discovered that Mojarra, an implementation of JavaServer Faces, evaluates untrusted values as EL expressions if includeViewParameters is set to true. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

APPLE-SA-2011-10-12-4 Safari 5.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-4 Safari 5.1.1 Safari 5.1.1 is now available and addresses the following: Safari Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7.2, OS X Lion Server v10.7.2, Windows 7, Vista, XP SP2 or later Impact:...

Debian DSA-2307-1 : chromium-browser - several vulnerabilities

Several vulnerabilities were discovered in the Chromium browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-2818 Use-after-free vulnerability in Google Chrome allows remote attackers to cause a denial of service or possibly have unspecified oth...

[SECURITY] [DSA 2307-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2307-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano September 11, 2011 http://www.debian.org/security/faq -...

Google Chrome Multiple Vulnerabilities - August11 (MacOSX)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnaug11macosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Google Chrome Multiple Vulnerabilities - August11 MacOSX Authors: Rachana Shetty Copyright: Copyright c 2011...

CVE-2011-2359

Technical details about CVE-2011-2359 (affected product/versions, root cause, impact, fix) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2011-2359

Removed by vendor...

Google Fixes 30 Bugs in Chrome, Pays $17K in Bounties

Google has fixed 30 bugs in version 13.0.782.107, the latest build of its Chrome browser, pushed to the stable channel for Windows, Mac and Linux today. 14 of the bugs are deemed high-risk, including cross-origin script injection, HTML range handling and URI handling issues. Nine of the bugs are...

CVE-2010-2359

CVE-2010-2359 is a SQL injection vulnerability in ActiveWebSoftwares.com eWebquiz 8, impacting the eWebQuiz.asp component. The flaw allows remote attackers to execute arbitrary SQL commands via the QuizType parameter, as described in the NVD entry (a different vector than CVE-2007-1706). The conn...

TekRADIUS SQL注入及不安全权限漏洞

CVECAN ID: CVE-2009-2357,CVE-2009-2358,CVE-2009-2359 TekRadius是一个免费的RADIUS服务器，可以支持RFC 2865和RFC 2866规范。 1 TekRADIUS的默认配置使用sa账号与Microsoft SQL Server通讯，远程攻击者可以相对较容易的获得对数据库的特权访问。 2 TekRADIUS将数据库凭据存储在了C:\Program Files\TekRADIUS\TekRADIUS.ini文件中。任何Windows本地用户都可以访问这个文件，读取加密了的凭据。 3...

CVE-2009-2359

Multiple SQL injection vulnerabilities in TekRADIUS 3.0 allow context-dependent attackers to execute arbitrary SQL commands via 1 the GUI client, as demonstrated by input to the Browse Users text box in the Users tab; or 2 the command-line client, as demonstrated by a certain trcli -r command...

CVE-2009-2359

TekRADIUS 3.0 suffers multiple SQL injection vulnerabilities that allow an attacker to run arbitrary SQL commands via the GUI (Browse Users) or the command-line client (trcli -r). The issue is confirmed in CVE-2009-2359 with impact described as ability to execute arbitrary SQL against the databas...

FreeBSD Security Advisory (FreeBSD-SA-05:19.ipsec.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:19.ipsec.asc ADV FreeBSD-SA-05:19.ipsec.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...

CVE-2008-2359

CVE-2008-2359 affects Fedora 8 where the default configuration of consolehelper in system-config-network prior to 1.5.10-1 lacks the USER=root directive. This allows local workstation users to gain privileges and alter network configuration. The issue is documented in multiple connected sources (...