CVE-2016-5012

In Moodle 3.x, glossary search displays entries without checking user permissions to view them...

Design/Logic Flaw

In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam...

CVE-2017-2578

In Moodle 3.x, there is XSS in the assignment submission page...

Code injection

In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context...

CVE-2016-5012

In Moodle 3.x, glossary search displays entries without checking user permissions to view them...

CVE-2016-5013

In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam...

CVE-2016-8643

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

Default credentials

In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed...

CVE-2016-5013

In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam...

Code injection

In Moodle 3.x, there is XSS in the assignment submission page...

CVE-2017-2576

In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums...

CVE-2017-2578

In Moodle 3.x, there is XSS in the assignment submission page...

CVE-2016-5012

In Moodle 3.x, glossary search displays entries without checking user permissions to view them...

CVE-2016-5012

CVE-2016-5012: In Moodle 3.x, the glossary search function does not enforce view-permission checks, allowing exposure of glossary entries to users who should not see them. Multiple sources (SUITE/SUSE advisory, GHSA) corroborate the same issue under the Moodle glossary search behavior. No exploit...

CVE-2015-5706

Use-after-free vulnerability in the pathopenat function in fs/namei.c in the Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a denial of service or possibly have unspecified other impact via OTMPFILE filesystem operations that leverage a duplicate cleanup operation...

Buffer overflow

drivers/soc/qcom/qdsp6v2/voicesvc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service memory corruption or possibly have unspecified other...

CVE-2016-5343

drivers/soc/qcom/qdsp6v2/voicesvc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service memory corruption or possibly have unspecified other...

WAS - Automatic USB Drive Malware Scanning Tool For The Security-Minded Person

Author: Fabio Baroni http://www.pentest.guru/ @Fabiothebest89 How many times have you plugged in a USB drive and double clicked on a file without scanning for malware? I guess, MANY. Wait A Sec! Even if you are a security guy, you'll often be in a hurry or absent minded and you trust your USB dri...

CVE-2016-5699

Removed by vendor...

CVE-2016-5340

The isashmemfile function in drivers/staging/android/ashmem.c in a certain Qualcomm Innovation Center QuIC Android patch for the Linux kernel 3.x mishandles pointer validation within the KGSL Linux Graphics Module, which allows attackers to bypass intended access restrictions by using the /ashmem...