Lucene search
+L

27 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/12 12:00 a.m.•10 views

CVE-2018-5499: Improper Input Validation

ATTO FibreBridge 7500N firmware version 2.95 is susceptible to a vulnerability which allows attackers to cause a Denial of Service DoS...

7.5CVSS5.8AI score0.01321EPSS
SaveExploits0References2
Veracode
Veracode
•added 2017/07/27 12:15 a.m.•24 views

Denial Of Service (DoS) Through Disk Consumption

Moodle is vulnerable to denial of service DoS attacks. A malicious user with the guest role can create multiple big drafts with the Atto module's editor-autosave feature to cause the system to run out of disk space...

7.1CVSS6.9AI score0.01684EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/03/17 12:00 a.m.•20 views

Moodle DoS

The vulnerability of the Atto component in the Moodle learning management system is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by leveraging the autoconservation feature of the editor’s interface...

7.1CVSS6.8AI score0.01684EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2016/02/22 5:59 a.m.•30 views

Design/Logic Flaw

Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a denial of service disk consumption by leveraging the guest role and entering drafts with the editor-autosave feature...

7.1CVSS7AI score0.01684EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2016/02/22 2:00 a.m.•101 views

CVE-2015-5332

Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 are affected by CVE-2015-5332 due to the Atto editor autosave feature. An unauthenticated or guest user can trigger a denial of service (disk consumption) by entering drafts via the editor-autosave mechanism. The underlying issue is in the Atto edi...

7.1CVSS6.5AI score0.01684EPSS
SaveExploits0References2Affected Software1
osv_mgasa
osv_mgasa
•added 2015/12/05 10:03 a.m.•24 views

MGASA-2015-0464 Updated moodle packages fix security vulnerability

In Moodle before 2.8.9, if guest access is open on the site, unauthenticated users can store Atto draft data through the editor autosave area, which could be exploited in a denial of service attack CVE-2015-5332. In Moodle before 2.8.9, due to a CSRF issue in the site registration form, it is...

8.8CVSS4.7AI score0.01684EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2015/12/05 12:00 a.m.•4 views

PT-2016-1300

Name of the Vulnerable Software and Affected Versions Moodle versions 2.8.x through 2.8.8 Moodle versions 2.9.x through 2.9.2 Description The issue is related to resource management errors in the Atto component of the Moodle learning management system. It can be exploited by a remote attacker usi...

7.1CVSS0.01684EPSS
SaveExploits0References19
Rows per page
Query Builder