Moodle 4.0.x < 4.0.3 Multiple Vulnerabilities

The version of Moodle installed on the remote host is 3.9.x prior to 3.9.16, 3.11.x prior to 3.11.9 or 4.0.x prior to 4.0.3. It is, therefore, affected by multiple vulnerabilities: - A vulnerable version of the Mustache template library included in Moodle. CVE-2022-0323 - A Cross-Site Request...

CVE-2022-2986

Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk...

CVE-2022-2986

Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk...

CVE-2022-2986

Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk...

CVE-2022-2986

CVE-2022-2986 relates to a CSRF flaw in Moodle where enabling/disabling H5P libraries did not require a CSRF token, exposing high impact risk (CVSS v3.1: 8.8). The connected documents tie this to Moodle/H5P integration and note CSRF involvement across several advisories. No explicit product versi...

SUSE: Security Advisory (SUSE-SU-2022:2986-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0075)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: A security vulnerability for cross-site scripting affects multiple IBM Rational products based on IBM Jazz technology (CVE-2016-2986)

Summary This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session affecting the following IBM Jazz Team Server based Applications: Collaborative Lifecycle...

CVE-2019-2986

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM component: LLVM Interpreter. The supported version that is affected is 19.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle GraalVM...

CVE-2019-2986

CVE-2019-2986 affects Oracle GraalVM Enterprise Edition (LLVM Interpreter) with affected version 19.2.0. The Red Hat and NVD entries describe an easily exploitable vulnerability allowing a low-privilege, network-reachable attacker to cause a hang or frequent crash (complete DOS) of GraalVM Enterp...

Oracle GraalVM Enterprise Edition CVE-2019-2986 Remote Security Vulnerability

Description Oracle GraalVM Enterprise Edition is prone to a remote security vulnerability. This vulnerability can be exploited over the 'Multiple' protocol. The 'LLVM Interpreter' component is affected. This vulnerability affects the following supported versions: 19.2.0 Technologies Affected Orac...

CVE-2018-2986

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Workflow. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-2986

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Workflow. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2018-2986

CVE-2018-2986 affects Oracle PeopleSoft Enterprise PeopleTools (subcomponent: Workflow). The vulnerability targets supported versions 8.55 and 8.56 and is exploitable by an unauthenticated attacker over HTTP. Successful exploitation requires human interaction from a person other than the attacker...

CVE-2013-2986

CVE-2013-2986 is rejected/not used; this candidate does not represent an active vulnerability entry.

Adobe Flash: Heap Overflow in YUVPlane decoding (CVE-2017-2986)

The attached FLV file causes a heap overflow in YUVPlane decoding. To reproduce, put LoadMP4. swf and yuvplane. flv on a server, and visit 127.0.0.1/LoadMP4. swf? file=yvplane. flv. Attachment: yuvplane. flv LoadMP4. swf...

CVE-2017-2986

creationtimestamp| type| source ---|---|--- 2017-02-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41423 2017-02-22 12:34:18+00:00| published-proof-of-concept| https://t.me/canyoupwnme/817...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2017-2986

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video FLV codec. Successful exploitation could lead to arbitrary code execution...

CVE-2017-2986

CVE-2017-2986 affects Adobe Flash Player, specifically the Flash Video (FLV) codec. The vulnerability is an exploitable heap overflow in the FLV codec for Flash Player versions 24.0.0.194 and earlier, which could allow arbitrary code execution. Evidence from multiple advisories confirms affected ...