83 matches found
CVE-2016-2645
This CVE entry is rejected/not used; does not represent an active vulnerability.
Fedora Update for moodle FEDORA-2017-0196511d58
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-2645
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...
CVE-2017-2645
CVE-2017-2645 describes an XSS vulnerability in Moodle 3.x, triggerable through attachments to evidence of prior learning. The entry specifies a cross-site scripting flaw with a CVSS base score of 4.3 (NVD CVSS2) and 6.1 (CVSS3), indicating network access, no authentication, and user interaction ...
TP-LINK WR1043N Multiple Cross-Site Request Forgery (CVE-2013-2645)
Multiple cross-site request forgery CSRF vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043NDV1120405 allow remote attackers to hijack the authentication of administrators for requests...
CVE-2015-2645
Oracle E-Business Suite’s Oracle Web Applications Desktop Integrator component (versions: 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, 12.2.4) contains CVE-2015-2645. Connected sources indicate an unspecified vulnerability that could affect integrity via unknown vectors and requires authentication. The vul...
Ubuntu: Security Advisory (USN-2645-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerability (USN-2645-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2645-1 advisory. Philip Pettersson discovered a privilege escalation when using overlayfs mounts inside of user namespaces. A local user could exploit this flaw to gain...
CVE-2013-2645
CVE-2013-2645 affects the TP-LINK WR1043N router (firmware TL-WR1043ND_V1_120405). Multiple CSRF vulnerabilities allow remote attackers to hijack administrator authentication by crafting requests that alter FTP settings and bandwidth controls (e.g., shareEntire to enable FTP, nas_admin_pwd to cha...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-2645, CVE-2014-2644. Reason: this ID was intended for one issue, but was mapped to two issues. Notes: All CVE users should consult CVE-2013-2645 and CVE-2014-2644 to determine which ID is appropriate. All references and...
CVE-2014-2645
CVE-2014-2645 concerns HP Systems Insight Manager (SIM) prior to 7.4, where a remote attacker can induce a clickjacking vulnerability. The HP security bulletin notes SIM v7.4 as the remediation (software updates for Linux/Windows), addressing the issue alongside related vulnerabilities (e.g., XSS...
CVE-2013-2645
creationtimestamp| type| source ---|---|--- 2013-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38492 2018-12-11 16:08:58+00:00| seen| MISP/5c0fdf07-0608-4e51-9884-1f070a021402 2018-12-13 08:43:56+00:00| seen| https://t.me/securixykz/328...
CVE-2012-2645
The Yahoo! Japan Yahoo! Browser application 1.2.0 and earlier for Android does not properly implement the WebView class, which allows remote attackers to obtain sensitive information via a crafted application...
CVE-2012-2645
CVE-2012-2645 affects Yahoo! Japan Yahoo! Browser for Android (up to 1.2.0; 1.2.1 also listed) where the WebView implementation is faulty, allowing a remote attacker to obtain sensitive information via a crafted Android application. The vulnerability enables information disclosure without user in...
CVE-2011-2645
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM...
CVE-2011-2645
Kiwi before 3.74.2, used in SUSE Studio 1.1 before 1.1.4, contains an unspecified vulnerability that allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM. The issue is documented across multiple sources (SUSE CVE entry and NVD) with no publicly detailed root-c...
Google Chrome multiple vulnerabilities - July 10
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnjul10.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - July 10 Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...
CVE-2010-2645
CVE-2010-2645 applies to Google Chrome prior to 5.0.375.99, where WebGL usage could trigger an out-of-bounds read leading to a denial of service. The issue is described as an unspecified vulnerability with unknown vectors, affecting Chrome’s WebGL handling. Public references in OpenVAS and third-...
SuSE9 Security Update : libexif (YOU Patch Number 11555)
A denial of service problem crash was fixed in the EXIF Loader of libexif, which could be used to crash the browser or image viewer when it interprets the EXIF tags in prepared JPEG files. CVE-2007-2645 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...