Moodle 1.9.x < 1.9.11 Multiple Vulnerabilities

Binary data 8707.prm...

Wordpress Reflex Gallery Upload Vulnerability

This module exploits an arbitrary PHP code upload in the WordPress Reflex Gallery version 3.1.3. The vulnerability allows for arbitrary file upload and remote code execution. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2014-4137

Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4133...

CVE-2014-4133

CVE-2014-4133 and CVE-2014-4137 affect Microsoft Internet Explorer 6 and 7, causing remote code execution or memory corruption via a crafted web site. These are described as a memory corruption family but are noted as different vulnerabilities from one another. The connected evidence references a...

Microsoft Internet Explorer Multiple Vulnerabilities (2987107)

This host is missing a critical security update according to Microsoft Bulletin MS14-056. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Internet Explorer CVE-2014-4133 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer Memory Corruption (MS14-056: CVE-2014-4133)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

SuSE 11.3 Security Update : kdebase4-workspace (SAT Patch Number 9467)

This kdebase4-workspace update fixes two security issues : - NULL pointer dereference in KDM and KCheckPass. CVE-2013-4132 - Memory leak that could lead to a denial of service. CVE-2013-4133 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

openSUSE Security Update : kdebase4-workspace (openSUSE-SU-2013:1291-1)

kdebase4-workspace received fixes for : - KDM: a potential crash in crypt was fixed bnc829857, CVE-2013-4132 - Fixes plasma systemtray memory leak with legacy icons kde314919, bnc817932, bnc829857, CVE-2013-4133 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Updated kde packages fix security issues

This update provides the last stable version of KDE for the 4.10.x branch. Some of the new packages fixes additional issues open on our tracker : - A memory leak in kde-workspace kde 314919 & mga 7953 - A memory leak in kmix mga 10702 & kde 309464 - A packaging issue affecting kdebase4-runtime...

CVE-2011-4133

Cross-site request forgery CSRF vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block...

CVE-2011-4133

CVE-2011-4133 is a CSRF vulnerability affecting Moodle 1.9.x prior to 1.9.11. The issue allows an attacker to hijack the authentication of unspecified victims to perform requests that modify an RSS feed in an RSS block. The primary impact is authenticated user session abuse for modifying RSS cont...

Debian Security Advisory DSA 2262-1 (moodle)

The remote host is missing an update to moodle announced via advisory DSA 2262-1. OpenVAS Vulnerability Test $Id: deb22621.nasl 8972 2018-02-28 07:02:10Z cfischer $ Description: Auto-generated from advisory DSA 2262-1 moodle Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2262-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2262-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.1 Security Update : PHP5 (SAT Patch Number 4133)

PHP5 was updated to fix several security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000 exit0;...

Fedora Update for condor FEDORA-2010-0227

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Security Advisory RHSA-2009:1688

The remote host is missing updates announced in advisory RHSA-2009:1688. Condor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority scheme, and resource monitoring and management. A flaw was found in the way Cond...

Condor任务提交绕过安全限制漏洞

BUGTRAQ ID: 37443 CVE ID: CVE-2009-4133 Condor是为计算密集任务所设计的专用负载管理系统，提供任务队列机制、调度策略、优先级规划和资源监控及管理。 Condor管理任务的方式存在漏洞，可能允许授权向Condor提交任务的用户以不同本地用户的身份排列任务，这可能导致非授权访问该用户的账号。Condor不会以root用户权限运行任务，因此这个漏洞不会导致入侵root用户账号。 Condor Project Condor 7.4 厂商补丁： RedHat ------...

CVE-2009-4133

CVE-2009-4133 affects Condor (versions 6.5.4–7.2.4, 7.3.x, and 7.4.0 as used in MRG/GRID environments). The issue allows remote authenticated users to queue jobs as an arbitrary user by using a Condor CLI tool to modify an unspecified job attribute, enabling privilege elevation (partial confident...