Lucene search
+L

3632 matches found

OSV
OSV
added 2020/11/19 5:15 p.m.7 views

UBUNTU-CVE-2020-25699

In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.9.3,...

7.5CVSS6.4AI score0.01607EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2020/11/19 5:15 p.m.31 views

CVE-2020-25699

In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.9.3,...

7.5CVSS6.4AI score0.01607EPSS
SaveExploits0References3
OSV
OSV
added 2020/11/19 4:15 p.m.8 views

CVE-2020-11829

Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codebook V2.0.05493e40200722...

9.8CVSS7.3AI score0.01149EPSS
SaveExploits0References1
NVD
NVD
added 2020/11/19 4:15 p.m.17 views

CVE-2020-11829

Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codebook V2.0.05493e40200722...

9.8CVSS9.4AI score0.01149EPSS
SaveExploits0References1
Prion
Prion
added 2020/11/19 4:15 p.m.21 views

Design/Logic Flaw

Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codebook V2.0.05493e40200722...

7.5CVSS9.3AI score0.01149EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/11/19 3:51 p.m.24 views

CVE-2020-11829

Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codebook V2.0.05493e40200722...

9.5AI score0.01149EPSS
SaveExploits0References1
CVE
CVE
added 2020/11/19 3:51 p.m.51 views

CVE-2020-11829

CVE-2020-11829 affects com.coloros.codebook V2.0.0_5493e40_200722. Dynamic loading of services in the backup and restore SDK leads to elevated privileges (Partial confidentiality, integrity, and availability impact per CVSS). No exploit details or fixes are provided in the connected documents. Th...

9.8CVSS9.3AI score0.01149EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2020/11/19 12:00 a.m.13 views

Oppo Backup and Oppo Restore Security Vulnerabilities

OPPO Guangdong Mobile Communications Oppo Backup is a backup service for devices from OPPO Guangdong Mobile Communications, China.OPPO Guangdong Mobile Communications Oppo Restore is a recovery service for devices from OPPO Guangdong Mobile Communications, China. A security vulnerability exists i...

9.8CVSS7.3AI score0.01149EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/11/18 12:00 a.m.41 views

Moodle Unauthorized Access Vulnerability (CNVD-2020-65138)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle suffers from a security vulnerability that stems from inappropriate access restrictions in the process when restoring role...

7.5CVSS7AI score0.01607EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2020/11/17 12:00 a.m.11 views

Moodle 访问控制错误漏洞

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle suffers from a security vulnerability that stems from inappropriate access restrictions in the process when restoring role...

7.5CVSS6.5AI score0.01607EPSS
SaveExploits0References7
Oracle linux
Oracle linux
added 2020/11/12 12:00 a.m.113 views

Unbreakable Enterprise kernel-container security update

4.14.35-2025.402.2.1.el7 - powercap: restrict energy meter to root access Kanth Ghatraju Orabug: 32040805 CVE-2020-8694 CVE-2020-8695 4.14.35-2025.402.2.el7 - ocfs2: fix remounting needed after setfacl command Gang He - Fix multiple variable definition with syzkaller Hans Westgaard Ry Orabug:...

7.8CVSS7.4AI score0.034EPSS
SaveExploits6
Citrix
Citrix
added 2020/11/09 12:00 a.m.15 views

Restore Policy Console Utility

Created Date: 5/13/2016 Updated Date: 10/10/2017 Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download location. Description The...

6.6AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/11/08 12:00 a.m.10 views

PT-2020-16160 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions 3.5 through 3.5.14 Moodle versions 3.7 through 3.7.8 Moodle versions 3.8 through 3.8.5 Moodle versions 3.9 through 3.9.2 Moodle earlier unsupported versions Description: The issue arises from insufficient checks on users'...

9.8CVSS6.1AI score0.52299EPSS
SaveExploits19References147
ATTACKERKB
ATTACKERKB
added 2020/10/27 2:15 p.m.7 views

CVE-2020-6022

Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware...

5.5CVSS5.8AI score0.0031EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/10/27 2:15 p.m.5 views

CVE-2020-6023

Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware...

7.8CVSS7.4AI score0.00337EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2020/10/27 12:00 a.m.11 views

KB4577586: Update for the removal of Adobe Flash Player: October 27, 2020

None None...

6.1AI score
SaveExploits0
Hacker One
Hacker One
added 2020/10/08 9:30 p.m.20 views

Acronis: Local Privilege Escalation via Backup delete

Vulnerability description not provided...

7.1AI score
SaveExploits0
NVD
NVD
added 2020/10/08 5:15 a.m.17 views

CVE-2020-3597

A vulnerability in the configuration restore feature of Cisco Nexus Data Broker software could allow an unauthenticated, remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient validation of configuration backup files. An attacker...

5.8CVSS0.01425EPSS
SaveExploits0References1
OSV
OSV
added 2020/10/08 5:15 a.m.5 views

CVE-2020-3597

A vulnerability in the configuration restore feature of Cisco Nexus Data Broker software could allow an unauthenticated, remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient validation of configuration backup files. An attacker...

5.4CVSS5.9AI score0.01425EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/10/08 4:20 a.m.18 views

CVE-2020-3597 Cisco Nexus Data Broker Software Path Traversal Vulnerability

A vulnerability in the configuration restore feature of Cisco Nexus Data Broker software could allow an unauthenticated, remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient validation of configuration backup files. An attacker...

5.4CVSS5.6AI score0.01425EPSS
SaveExploits0References1
Rows per page
Query Builder