32291 matches found
CVE-2015-10033
The CVE-2015-10033 entry concerns jvvlee MerlinsBoard, specifically the Grade Handler component. A vulnerability in an unknown portion of Grade Handler allows improper authorization. The patch identifier 134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5 is cited as a fix, and applying the patch is recomme...
CVE-2015-10033 jvvlee MerlinsBoard Grade improper authorization
A vulnerability, which was classified as problematic, was found in jvvlee MerlinsBoard. This affects an unknown part of the component Grade Handler. The manipulation leads to improper authorization. The identifier of the patch is 134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5. It is recommended to appl...
PT-2023-10212 · Unknown · Jvvlee Merlinsboard
Name of the Vulnerable Software and Affected Versions: jvvlee MerlinsBoard affected versions not specified Description: A vulnerability was found in the Grade Handler component of jvvlee MerlinsBoard, leading to improper authorization. The manipulation of an unknown part of this component is the...
MerlinsBoard 授权问题漏洞
MerlinsBoard is a course management system by Jonathan Lee Personal Developer. An authorization issue vulnerability exists in jvvlee MerlinsBoard, which stems from an unknown section of the file Grade Handler that manipulates to cause incorrect authorization...
Moodle Exposure of Sensitive Information to an Unauthorized Actor
It was possible for a student to view their quiz grade before it had been released, using a quiz web service...
GHSA-GP4W-F57R-9RX3 Moodle Exposure of Sensitive Information to an Unauthorized Actor
It was possible for a student to view their quiz grade before it had been released, using a quiz web service...
CVE-2021-40695
It was possible for a student to view their quiz grade before it had been released, using a quiz web service...
Fedora: Security Advisory for rt (FEDORA-2022-3b84211a66)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1754
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups...
CVE-2020-1754
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups...
UBUNTU-CVE-2020-1754
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups...
Spoofing
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups...
CVE-2020-1754
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups...
CVE-2020-1754
In Moodle, versions prior to 3.8.2, 3.7.5, 3.6.9, and 3.5.11 are affected by an information disclosure vulnerability. Specifically, users viewing the grade history report who do not have the ‘access all groups’ capability could see grades for users outside their own groups. Root cause: missing or...
CVE-2020-1754
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups...
[SECURITY] Fedora 36 Update: rt-5.0.3-1.fc36
RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitted by a community of users...
CVE-2022-34586
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/studentgradewise.php...
CVE-2022-34586
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/studentgradewise.php...