Lucene search
+L

27 matches found

OSV
OSV
added 2020/02/11 1:15 p.m.28 views

CVE-2018-14553

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd not bundled...

7.5CVSS6.6AI score
SaveExploits0References9
Prion
Prion
added 2020/02/11 1:15 p.m.27 views

Null pointer dereference

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd not bundled...

4.3CVSS7.3AI score0.03407EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2015/08/07 12:0 a.m.10 views

The vulnerability of the Moodle learning management system allows a hacker to alter the settings of the chat ban.

The vulnerability of the message/externallib.php component of the Moodle learning management system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to alter the settings for chat messages by using...

4CVSS5.4AI score0.01712EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/08/07 12:0 a.m.7 views

The vulnerability of the Moodle learning management system allows a hacker to view protected information about scheduled events.

The vulnerability of the calendar/externallib.php component in the Moodle learning management system is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to access sensitive information about scheduled events...

4CVSS5.4AI score0.01687EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2015/06/01 7:59 p.m.2 views

UBUNTU-CVE-2015-0215

calendar/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to obtain sensitive calendar-event information via a web-services request...

4CVSS5.8AI score0.01687EPSS
SaveExploits0References4
FreeBSD
FreeBSD
added 2012/07/04 12:0 a.m.17 views

typo3 -- Cross-Site Scripting Vulnerability in TYPO3 Core

Typo3 Security Report TYPO3-CORE-SA-2012-003: TYPO3 bundles and uses an external JavaScript and Flash Upload Library called swfupload. TYPO3 can be configured to use this Flash uploader. Input passed via the "movieName" parameter to swfupload.swf is not properly sanitised before being used in a...

1.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2010/09/23 12:0 a.m.17 views

BlackBerry Desktop Software < 6.0.0.47 Insecure Library Loading Vulnerability

BlackBerry Desktop Software is prone to an insecure library loading vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.3CVSS7AI score0.04708EPSS
SaveExploits0References4
Rows per page
Query Builder