Updated moodle package fixes security vulnerabilities

Some files were being delivered with incorrect headers in Moodle before 2.4.7, meaning they could be cached downstream CVE-2013-4522. Cross-site scripting in Moodle before 2.4.7 due to JavaScript in messages being executed on some pages CVE-2013-4523. The file system repository in Moodle before...

CVE-2013-4525

Cross-site scripting XSS vulnerability in mod/quiz/report/responses/responsestable.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via an answer to a text-based quiz question...

CVE-2013-4525

CVE-2013-4525 affects Moodle: an XSS in mod/quiz/report/responses/responses_table.php that allows a remote authenticated user to inject script/HTML through answers to a text-based quiz question. Affected versions include Moodle up to 2.2.11; 2.3.x before 2.3.10; 2.4.x before 2.4.7; and 2.5.x befo...

Fedora Update for bind FEDORA-2013-4525

Check for the Version of bind OpenVAS Vulnerability Test Fedora Update for bind FEDORA-2013-4525 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

RHEL 5 : kvm (RHSA-2011:0028)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0028 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for th...

CVE-2011-4525

CVE-2011-4525 affects Advantech/BroadWin WebAccess prior to 7.0. A remote attacker can cause the client to create and execute a batch file by injecting arbitrary web content, enabling potential remote code execution. ICS-CERT notes Advantech released WebAccess 7.0 to address most vulnerabilities;...

kvm security and bug fix update

kvm-83-224.0.1 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83-224.el5 - kvm-kernel-KVM-x86-zero-kvmvcpuevents-interrupt.pad.patch bz665407 - Resolves: bz665407 kvmvcpuevents.interrupt.pad must be zeroed - CVE: CVE-2010-4525 kvm-83-223.e...

Low: Red Hat Security Advisory: kvm security and bug fix update

Updated kvm packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

CVE-2010-4525

Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvmvcpuevents-interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors...

CVE-2010-4525

Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvmvcpuevents-interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors...

CVE-2010-4525

CVE-2010-4525: The Linux kernel up to 2.6.34.y omits initialization of kvm_vcpu_events->interrupt.pad, enabling local attackers to read potentially sensitive data from kernel stack memory via unspecified vectors. The affected component is kernel/KVM (Linux kernel 2.6.33/2.6.34.y). Multiple adv...

CVE-2010-4525

Linux kernel 2.6.33 and 2.6.34.y does not initialize the kvmvcpuevents-interrupt.pad structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via unspecified vectors...

CVE-2009-4525

CVE-2009-4525 is a Drupal Print module XSS vulnerability: versions 5.x before 5.x-4.9 and 6.x before 6.x-1.9 allow remote attackers to inject arbitrary web script or HTML via crafted data in a list of links. Remediation details are not provided in the supplied documents.

CVE-2008-4525

CVE-2008-4525 describes an SQL injection in AmpJuke 0.7.5, exploitable via a special parameter in a performerid action in index.php. The root cause is improper handling of user-supplied input, allowing arbitrary SQL execution by remote attackers (impact on confidentiality, integrity, and availabi...

CVE-2008-4525

creationtimestamp| type| source ---|---|--- 2008-10-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32461...

CVE-2007-4525

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

CVE-2007-4525

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

CVE-2007-4525

SPIP 1.7.2 is affected by a PHP remote file inclusion in inc-calcul.php3, where a URL supplied in the squelette_cache parameter can lead to arbitrary PHP code execution. The vector is distinct from CVE-2006-1702. Some third‑party researchers dispute the vulnerability due to claims about squelette...

CVE-2006-4525

CubeCart versions

CVE-2005-4525

CVE-2005-4525 affects the Sygate Protection Agent 5.0, build 6144, via the SmcGui.exe component. The described flaw is that a local user can trigger the privileged management GUI by launching SmcGui.exe and then terminating the process, which causes the high-privilege management interface to appe...