Lucene search
+L

12708 matches found

osv_debian
osv_debian
•added 2022/03/16 3:15 p.m.•13 views

DEBIAN-CVE-2021-23158

A flaw was found in htmldoc in v1.9.12. Double-free in function pspdfexport,in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service...

9.8CVSS7.6AI score0.02436EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/03/16 3:15 p.m.•26 views

UBUNTU-CVE-2021-23158

A flaw was found in htmldoc in v1.9.12. Double-free in function pspdfexport,in ps-pdf.cxx may result in a write-what-where condition, allowing an attacker to execute arbitrary code and denial of service...

9.8CVSS7.4AI score0.02436EPSS
SaveExploits1References5
OpenVAS
OpenVAS
•added 2022/03/15 12:00 a.m.•78 views

Moodle 3.8.x < 3.8.9, 3.9.x < 3.9.7, 3.10.x < 3.10.4 Multiple Vulnerabilities (MSA-21-0012, MSA-21-0018)

Moodle is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1CVSS5.6AI score0.01128EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/03/14 12:00 a.m.•19 views

WordPress Plugin – Contact Form Submissions: Cross-Site Script Vulnerabilities

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in versions of the WordPress Contact Form Submissions plugin prior to 1.7.3, which stems from...

6.1CVSS5.3AI score0.01717EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2022/03/14 12:00 a.m.•23 views

WordPress plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Team Circle Image Slider With Lightbox...

6.1CVSS5.7AI score0.008EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2022/03/14 12:00 a.m.•17 views

WordPress plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress MOLIE plugin has a cross-site scripting vulnerability that stems from not escaping the courseid parameter before...

6.1CVSS5.2AI score0.00833EPSS
SaveExploits2References3
CNVD
CNVD
•added 2022/03/14 12:00 a.m.•32 views

Ming buffer overflow vulnerability (CNVD-2022-20528)

Ming is a Flash SWF output library written in C language. A security vulnerability exists in Ming 0.4.8, which can be exploited by an attacker to cause a direct segmentation error and lead to a denial of service...

6.5CVSS6.4AI score0.00953EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/03/14 12:00 a.m.•40 views

Ming Out-of-Bounds Read Vulnerability

Ming is a Flash SWF output library written in C language. Ming has a security vulnerability that can be exploited by attackers to obtain sensitive information...

6.5CVSS6.3AI score0.01144EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/03/14 12:00 a.m.•34 views

Ming buffer overflow vulnerability (CNVD-2022-20529)

Ming is a Flash SWF output library written in C language. A security vulnerability exists in Ming that can be exploited by an attacker to cause a direct segmentation error and result in a denial of service...

6.5CVSS6.4AI score0.01105EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/03/14 12:00 a.m.•26 views

Ming Out-of-Bounds Read Vulnerability (CNVD-2022-20530)

Ming is a Flash SWF output library written in C language. A security vulnerability exists in Ming that can be exploited by an attacker to cause a direct segmentation error and result in a denial of service...

6.5CVSS6.4AI score0.00893EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2022/03/12 12:00 a.m.•49 views

Moodle Exposure of Sensitive Information to an Unauthorized Actor

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...

4.3CVSS6.5AI score0.00773EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2022/03/11 6:15 p.m.•27 views

CVE-2021-32472

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...

4.3CVSS6.6AI score0.00773EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/11 6:15 p.m.•18 views

CVE-2021-32472

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...

4.3CVSS6.7AI score0.00773EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/11 6:15 p.m.•50 views

CVE-2021-32472

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...

4.3CVSS0.00773EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2022/03/11 6:15 p.m.•24 views

UBUNTU-CVE-2021-32472

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...

4.3CVSS6.7AI score0.00773EPSS
SaveExploits0References3
Prion
Prion
•added 2022/03/11 6:15 p.m.•29 views

Format string

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...

2.6CVSS4.5AI score0.00773EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/03/11 12:00 a.m.•171 views

CVE-2021-32472

CVE-2021-32472 is an authorization flaw in Moodle where exporting a forum to CSV may expose a CSV of forums from all courses under certain conditions. Affected versions: Moodle 3.10.0–3.10.3, 3.9.x up to 3.9.6, and 3.8.x up to 3.8.8. The provided documents do not specify the exact root cause deta...

4.3CVSS4.7AI score0.00773EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/03/11 12:00 a.m.•64 views

CVE-2021-32472

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...

5AI score0.00773EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/11 12:00 a.m.•8 views

CVE-2021-32472: Missing Authorization

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...

4.3CVSS6.5AI score0.00773EPSS
SaveExploits0References3
Mend
Mend
•added 2022/03/11 12:00 a.m.•13 views

CVE-2021-32472

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...

5.3CVSS0.00773EPSS
SaveExploits0References3
Rows per page
Query Builder