8231 matches found
CVE-2011-4963
nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...
CVE-2011-4963: Undefined Security Weakness
nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via 1 a trailing . dot or 2 certain "$indexallocation" sequences in a request...
PT-2012-2024
Name of the Vulnerable Software and Affected Versions nginx/Windows versions 1.2.x through 1.2.0 and versions 1.3.x through 1.3.0 Description The issue allows remote attackers to bypass intended access restrictions and access restricted files. This can be achieved via a trailing . dot or certain...
CVE-2012-3391
mod/forum/rsslib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly implement the requirement for posting before reading a Q&A forum, which allows remote authenticated users to bypass intended access restrictions by leveraging the student role and reading the RSS feed for a...
CVE-2012-3391
mod/forum/rsslib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly implement the requirement for posting before reading a Q&A forum, which allows remote authenticated users to bypass intended access restrictions by leveraging the student role and reading the RSS feed for a...
CVE-2012-3397
The CVE-2012-3397 issue affects Moodle versions 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1. It arises because lib/modinfolib.php does not verify group-membership when deciding if an activity is unavailable or hidden. This allows remote authenticated users ...
CVE-2012-3391
CVE-2012-3391 affects Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4. The issue in mod/forum/rsslib.php arises from not enforcing the posting-before-reading requirement for Q&A forums, enabling remote authenticated users (student role) to bypass access restrictions by reading the RSS feed. The ...
CVE-2012-3391: Undefined Security Weakness
mod/forum/rsslib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly implement the requirement for posting before reading a Q&A forum, which allows remote authenticated users to bypass intended access restrictions by leveraging the student role and reading the RSS feed for a...
CVE-2012-3397: Undefined Security Weakness
lib/modinfolib.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 does not check for a group-membership requirement when determining whether an activity is unavailable or hidden, which allows remote authenticated users to bypass intended access...
PT-2012-4690
Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.x through 2.0.9 Moodle versions 2.1.x through 2.1.6 Moodle versions 2.2.x through 2.2.3 Moodle versions 2.3.x through 2.3.0 Description The issue allows remote authenticated users to bypass intended access restrictions by...
CVE-2012-3385
WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors...
CVE-2012-3385
WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors...
Design/Logic Flaw
WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors...
CVE-2012-3385
WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors...
CVE-2012-3385
WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors...
CVE-2012-3385
WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors...
CVE-2012-3385
The CVE-2012-3385 entry concerns WordPress prior to version 3.4.1. The vulnerability is an information disclosure: WordPress does not properly restrict access to post contents (including private/draft posts), allowing remote authors or contributors to obtain sensitive information via unknown vect...
CVE-2011-4590
The web services implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly consider the maintenance-mode state and account attributes during login attempts, which allows remote authenticated users to bypass intended access restrictions by connecting to a webservice serv...
PT-2012-1841
Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.x through 2.0.3 Moodle versions 2.1.x through 2.1.0 Description The issue allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory. This is due to the theme...
