375 matches found
MS15-082: Description of the security update for RDP in Windows: August 11, 2015 (KB3075222)
MS15-082: Description of the security update for RDP in Windows: August 11, 2015 KB3075222 Applies To Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Datacenter Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Standard Windows Server 2008 R2 Web Edition Windows Server 2008 R2...
March 30, 2020—KB4554354 (OS Build 17763.1132)
March 30, 2020—KB4554354 OS Build 17763.1132 Applies To Windows 10, version 1809, all editions Windows Server version 1809 Windows Server 2019, all editions Note For more information about the various types of Windows updates, such as critical, security, driver, service packs, and so on, please s...
Reassociated WFP context in same flow doesn't work in Windows
Reassociated WFP context in same flow doesn't work in Windows Applies To Windows Server 2012 R2 Datacenter Windows Server 2012 R2 Standard Windows Server 2012 R2 Essentials Windows Server 2012 R2 Foundation Windows 8.1 Enterprise Windows 8.1 Pro Windows 8.1 Windows RT 8.1 Windows Server 2012...
September 2015 update to fix Windows or application freezes after you install security update 3076895
September 2015 update to fix Windows or application freezes after you install security update 3076895 Applies To Windows Server 2012 R2 Datacenter Windows Server 2012 R2 Standard Windows Server 2012 R2 Essentials Windows Server 2012 R2 Foundation Windows 8.1 Enterprise Windows 8.1 Pro Windows 8.1...
"GsDraw error (1): GenericError" error occurs and application crashes when you create text outline in Windows
"GsDraw error 1: GenericError" error occurs and application crashes when you create text outline in Windows Applies To Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Datacenter Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Standard Windows Server 2008 R2 Foundation Window...
Items in the navigation pane of File Explorer may disappear in Windows
Items in the navigation pane of File Explorer may disappear in Windows Applies To Windows Server 2012 R2 Datacenter Windows Server 2012 R2 Standard Windows Server 2012 R2 Essentials Windows Server 2012 R2 Foundation Windows 8.1 Enterprise Windows 8.1 Pro Windows 8.1 Windows RT 8.1 This article...
Description of the security update for the Windows COM elevation of privilege vulnerability in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: November 13, 2018
Description of the security update for the Windows COM elevation of privilege vulnerability in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: November 13, 2018 Applies To Windows Embedded Standard 2009 Windows Embedded POSReady 2009 Summary An elevation of privilege exists in...
May 14, 2024-Security and Quality Rollup for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 (KB5038291)
May 14, 2024-Security and Quality Rollup for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 KB5038291 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4.6.2 REMINDER Windows Server 2008 R2 SP1 have...
April 9, 2024-Security Only Update for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2008 R2 SP1 (KB5037127)
April 9, 2024-Security Only Update for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2008 R2 SP1 KB5037127 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.7.2...
Cross-Site Request Forgery (CSRF)
moodle/moodle is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to the link to update all installed language packs not including a necessary CSRF token. An attacker can exploit this vulnerability by tricking a user into clicking on a crafted link or navigating to a...
BIT-MOODLE-2024-25982 Msa-24-0005: csrf risk in language import utility
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk...
Cross-Site Request Forgery in moodle
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk...
GHSA-7PJP-FM93-P6PJ Cross-Site Request Forgery in moodle
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk...
CVE-2024-25982
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk...
Cross site request forgery (csrf)
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk...
CVE-2024-25982
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk...
UBUNTU-CVE-2024-25982
The link to update all installed language packs did not include the necessary token to prevent a CSRF risk...
CVE-2024-25982
CVE-2024-25982 corresponds to a CSRF risk in Moodle where the update-link for language packs did not include the necessary token. The OSV/GHSA entries explicitly describe a cross-site request forgery risk in moodle’s language import/update flow, caused by the missing CSRF token. Documented impact...
