CVE-2019-6246

An issue was discovered in SVG++ aka svgpp 1.2.3. After calling the gil::getcolor function in Generic Image Library in Boost, the return code is used as an address, leading to an Access Violation because of an out-of-bounds read...

CVE-2019-6246

The CVE-2019-6246 entry concerns SVG++ (svgpp) 1.2.3. A bug occurs after calling gil::get_color in Boost.GIL, where the return code is used as an address, causing an out-of-bounds read and an access violation. The connected sources corroborate the same vulnerability description across multiple fe...

boost/boost_regex_fuzzer: Crash in boost::re_detail_NUMBER::basic_regex_creator<char, boost::regex_traits<char, boo

Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=5680605526753280 Project: boost Fuzzer: aflboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: aflasanboost Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6231d00001ba Crash...

apex-frontend-boost (>=3.1.0, <=3.1.4), apex-nitro (>=4.0.0-beta.1, <=4.0.0) potentially affected by CVE-2018-16462 via apex-publish-static-files (1.0.8)

apex-publish-static-files NPM version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on apex-publish-static-files and may be impacted: - apex-frontend-boost =3.1.0, =4.0.0-beta.1, =4.0.0 Source cves: CVE-2018-16462 Source advisory: MEND:CVE-2018-16...

Cross-Site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS attack. The attack is possible because the Boost theme search parameter is not sanitized properly...

FreeBSD : moodle -- multiple vulnerabilities (074cb225-bb2d-11e8-90e1-fcaa147e860e)

moodle reports : Moodle XML import of ddwtos could lead to intentional remote code execution QuickForm library remote code vulnerability upstream Boost theme - blog search GET parameter insufficiently filtered C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Moodle boost cross-site scripting vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. boost theme is one of the theme components. A security vulnerability exists in boost...

Moodle CMS 3.5.x < 3.5.2, 3.4.x < 3.4.5, and < 3.3.8 XSS Vulnerability - Windows

Moodle CMS is prone to a reflected cross-site scripting XSS vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Cross site scripting

moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. The breadcrumb navigation provided by Boost theme when displaying search results of a blog were insufficiently filtered, which could result in reflected XSS if a user...

CVE-2018-14631

moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. The breadcrumb navigation provided by Boost theme when displaying search results of a blog were insufficiently filtered, which could result in reflected XSS if a user...

CVE-2018-14631

moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. The breadcrumb navigation provided by Boost theme when displaying search results of a blog were insufficiently filtered, which could result in reflected XSS if a user...

CVE-2018-14631

moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. The breadcrumb navigation provided by Boost theme when displaying search results of a blog were insufficiently filtered, which could result in reflected XSS if a user...

UBUNTU-CVE-2018-14631

moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. The breadcrumb navigation provided by Boost theme when displaying search results of a blog were insufficiently filtered, which could result in reflected XSS if a user...

CVE-2018-14631

CVE-2018-14631 affects Moodle before versions 3.5.2, 3.4.5, and 3.3.8. The vulnerability arises in the Boost theme’s blog search: the GET parameter used for search is not sufficiently filtered, and the breadcrumb navigation rendered for search results can be exploited to perform a reflected Cross...

CVE-2018-14631

moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. The breadcrumb navigation provided by Boost theme when displaying search results of a blog were insufficiently filtered, which could result in reflected XSS if a user...

CVE-2018-14631

moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. The breadcrumb navigation provided by Boost theme when displaying search results of a blog were insufficiently filtered, which could result in reflected XSS if a user...

CVE-2018-14631: Improper Input Validation

moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. The breadcrumb navigation provided by Boost theme when displaying search results of a blog were insufficiently filtered, which could result in reflected XSS if a user...

PT-2018-12627

Name of the Vulnerable Software and Affected Versions moodle versions prior to 3.5.2 moodle versions prior to 3.4.5 moodle versions prior to 3.3.8 Description The issue concerns a reflected XSS vulnerability due to insufficient filtering of the search parameter in the breadcrumb navigation provid...

moodle -- multiple vulnerabilities

moodle reports: Moodle XML import of ddwtos could lead to intentional remote code execution QuickForm library remote code vulnerability upstream Boost theme - blog search GET parameter insufficiently filtered...

boost/boost_regex_fuzzer: Crash in boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_match

Project: https://github.com/boostorg/boost.git Detailed report: https://oss-fuzz.com/testcase?key=5847161655787520 Project: boost Fuzzer: libFuzzerboostregexfuzzer Fuzz target binary: boostregexfuzzer Job Type: libfuzzerubsanboost Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...