4302 matches found
CVE-2012-1155
Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+, 2.0 to 2.0.7+, 1.9 to 1.9.16+ are affected...
CVE-2012-1155
Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to...
Ubuntu 18.04 LTS : Linux kernel vulnerability and regression (USN-4184-2)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4184-2 advisory. USN-4184-1 fixed vulnerabilities in the Linux kernel. It was discovered that the kernel fix for CVE-2019-0155 i915 missing Blitter Command Streamer check was...
Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4185-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4185-1 advisory. Stephan van Schaik, Alyssa Milburn, Sebastian sterlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Mori...
Ubuntu: Security Advisory (USN-4186-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Medium: libjpeg-turbo
Issue Overview: The cjpeg utility in libjpeg allows remote attackers to cause a denial of service NULL pointer dereference and application crash or execute arbitrary code via a crafted file.CVE-2016-3616 A divide by zero vulnerability has been discovered in libjpeg-turbo in allocsarray function o...
Cisco Small Business Router Privilege Escalation
The vulnerability of the /etc/passwd file in Cisco Small Business routers of the 250, 350, 350X, and 550X series is related to the presence of empty password entries for the root and user accounts. Exploiting this vulnerability allows a remote attacker to elevate their privileges to the root leve...
CVE-2019-17662
creationtimestamp| type| source ---|---|--- 2019-10-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47519 2019-10-23 17:47:24+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/thinvnctraversal.rb 2021-09-21 06:42:47+00:00|...
CVE-2019-3010
creationtimestamp| type| source ---|---|--- 2019-10-16 11:00:06+00:00| seen| https://t.me/canyoupwnme/6054 2019-10-16 18:31:52+00:00| published-proof-of-concept| https://t.me/antichat/6780 2019-10-23 18:37:15+00:00| seen|...
CVE-2019-16724
creationtimestamp| type| source ---|---|--- 2019-10-08 15:50:02+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/filesharingwizardseh.rb 2022-05-02 02:34:40+00:00| published-proof-of-concept| https://t.me/hackingtutoriales/351 2024-11-14...
DEBIAN-CVE-2019-17344
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service by leveraging a long-running operation that exists to support restartability of PTE updates...
SUSE-SU-2019:2521-1 Security update for SUSE Manager Server 3.2
This update fixes the following issues: cobbler: - Jinja2 template library fix bsc1141661 pgjdbc-ng: - Allow dots in database name bsc1146416 py26-compat-salt: - Get tornado dependency from the system on SLE12 bsc1149409 - Catch SSLError for TLS 1.2 bootstraps with RES/RHEL6 and SLE11 bsc1147126...
CVE-2019-5825
creationtimestamp| type| source ---|---|--- 2019-09-25 08:28:15+00:00| seen| MISP/5d8b23ae-50d0-4a09-86da-4dc9950d210f 2020-03-05 19:53:27+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/chromearraymap.rb 2020-03-09 00:00:00+00:00| exploited|...
Fedora 29 : systemd (2019-8a7dfdf1f3)
Security issue: unprivileged users were allowed to change DNS servers configured in systemd-resolved CVE-2019-15718 - hwdb entries for keyboards are updated to the latest version 1725717 No need to log out or reboot. Note that Tenable Network Security has extracted the preceding description block...
EulerOS Virtualization for ARM 64 3.0.2.0 : libjpeg-turbo (EulerOS-SA-2019-1955)
According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - get8bitrow in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial ...
CVE-2019-16185
In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions...
CVE-2019-16185
In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions...
CVE-2019-16185
In Limesurvey before 3.17.14, admin users can view, update, or delete reserved menu entries without proper permissions...
PT-2019-14565
Name of the Vulnerable Software and Affected Versions Limesurvey versions prior to 3.17.14 Description The issue allows admin users to view, update, or delete reserved menu entries without having the proper permissions. Recommendations For versions prior to 3.17.14, update to version 3.17.14 or...
