145 matches found
CVE-2014-5354
plugins/kdb/ldap/libkdbldap/ldapprincipal2.c in MIT Kerberos 5 aka krb5 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by creating a database entry for a keyless principal, as...
Information disclosure
mod/data/edit.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 sets a certain group ID to zero upon a database-entry change, which allows remote authenticated users to obtain sensitive information by accessing the database after an edit by a teacher...
CVE-2014-7833
mod/data/edit.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 sets a certain group ID to zero upon a database-entry change, which allows remote authenticated users to obtain sensitive information by accessing the database after an edit by a teacher...
CVE-2014-8295
creationtimestamp| type| source ---|---|--- 2014-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34851...
CVE-2014-5023
creationtimestamp| type| source ---|---|--- 2014-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33929...
CVE-2014-4166
creationtimestamp| type| source ---|---|--- 2014-06-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33714...
CVE-2014-2013
creationtimestamp| type| source ---|---|--- 2014-01-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31090...
CVE-2013-7186
creationtimestamp| type| source ---|---|--- 2013-12-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30032...
CVE-2013-3161
creationtimestamp| type| source ---|---|--- 2013-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28187...
CVE-2013-6127
creationtimestamp| type| source ---|---|--- 2013-09-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28084...
CVE-2013-4266
creationtimestamp| type| source ---|---|--- 2013-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24086...
CVE-2012-4772
creationtimestamp| type| source ---|---|--- 2012-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22159...
CVE-2012-4015
Cross-site scripting XSS vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry...
Cross site scripting
Cross-site scripting XSS vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry...
CVE-2012-4015
Cross-site scripting XSS vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry...
CVE-2008-0565
creationtimestamp| type| source ---|---|--- 2012-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37786...
CVE-2012-3845
creationtimestamp| type| source ---|---|--- 2012-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18816...
CVE-2012-4877
creationtimestamp| type| source ---|---|--- 2012-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37035...
CVE-2012-1028
creationtimestamp| type| source ---|---|--- 2012-02-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36665...
CVE-2012-0980
creationtimestamp| type| source ---|---|--- 2012-01-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18432...