1225 matches found
Design/Logic Flaw
An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in frdhcpdecodesuboptions" and a denial of service...
Denial of service
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcpattr2vp" and a denial of service...
Design/Logic Flaw
An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of service...
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses...
Default configuration
In Moodle 3.x, course creators are able to change system default settings for courses...
CVE-2017-2642
Moodle 3.x has user fullname disclosure on the user preferences page...
CVE-2017-10987
An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in frdhcpdecodesuboptions" and a denial of service...
CVE-2017-10984
An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vpwimax" - this allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code...
CVE-2017-10978
An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in makesecret" and a denial of service...
CVE-2017-10983
An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service...
CVE-2017-2642
Moodle 3.x has user fullname disclosure on the user preferences page...
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses...
CVE-2017-7532
CVE-2017-7532 affects Moodle 3.x. The issue, described as: “In Moodle 3.x, course creators are able to change system default settings for courses,” indicates improper privilege handling that lets non‑administrative users alter default course configurations. CVSS information included with the entr...
CVE-2017-10986
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcpattr2vp" and a denial of service...
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses...
CVE-2017-2642
Moodle 3.x has user fullname disclosure on the user preferences page...
CVE-2017-10986
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcpattr2vp" and a denial of service...
CVE-2017-11348
In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted NuGet package, potentially overwriting other packages or modifying system files. This is a directory traversal in the PackageId value...