32291 matches found
PT-2022-13112 · Moodle +1 · Moodle +1
Name of the Vulnerable Software and Affected Versions: Moodle versions 3.11 to 3.11.4 Moodle versions 3.10 to 3.10.8 Moodle versions 3.9 to 3.9.11 Moodle versions earlier than 3.9 Description: A flaw was found in the software that could allow users to access their grade report for courses where...
Moodle 访问控制错误漏洞
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle suffers from an Access Control Error vulnerability that arises from a networked system or product that does not properly restric...
CVE-2021-40695
CVE-2021-40695 concerns Moodle's quiz service where a student could view their quiz grade before it was officially released. The available connected sources confirm this is an information disclosure impacting Moodle quiz grading workflows, with the root cause described only at a high level as a f...
CVE-2021-40695
It was possible for a student to view their quiz grade before it had been released, using a quiz web service...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.9.0 enhancement, security, and bug fix update
Updated images that include numerous enhancements, security, and bug fixes are now available for Red Hat OpenShift Data Foundation 4.9.0 on Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVS...
CVE-2021-41677
A SQL injection vulnerability exists in version 8.0 of openSIS when MySQL or MariaDB is used as the application database. An attacker can then issue the SQL command through the /opensis/functions/GetStuListFnc.php &Grade= parameter...
Apple Lawsuit Amps Up Pressure on Pegasus Spyware-Maker
In the wake of a zero-click zero-day exploit that was deployed against iPhone users, Apple has filed a lawsuit against NSO Group. The complaint alleges that the maker of the infamous Pegasus mobile spyware is responsible for the illegal surveillance of Apple users. The computing giant is looking...
PT-2022-11304 · Alt Linux · Alt Linux
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows a student to view their quiz grade before it has been released, utilizing a quiz web service. No information is provided about the...
Protect your business with Microsoft Security’s comprehensive protection
Securing an organization has never been simple. But over the past year, we’ve seen significant changes in the threat landscape that are having a major impact on organizations of every size in every sector. The frequency and sophistication of cyber events have increased significantly. We see...
Fedora: Security Advisory for rt (FEDORA-2021-05feb8a8b2)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: rt-4.4.5-4.fc34
RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitted by a community of users...
Student Quarterly Grading System 1.0 Cross Site Scripting
Exploit Title: Student Quarterly Grading System 1.0 - 'grade' Stored Cross-Site Scripting XSS Date: 11.10.2021 Exploit Author: Hüseyin Serkan Balkanli Vendor Homepage: https://www.sourcecodester.com/php/14953/student-quarterly-grading-system-using-php-and-sqlite-free-source-code.html Software Lin...
Moving Forward After CentOS 8 EOL
The Linux community was caught unprepared when, in December 2020, as part of a change in the way Red Hat supports and develops CentOS, Red Hat suddenly announced that it's cutting the official CentOS 8 support window from ten years – to just two, with support ending Dec 31, 2021. It created a...
Weak password vulnerability in IVMS-8201E-NCG at Hangzhou Hikvision Digital Technology Co.
IVMS-8201E-NCG is a telecom-grade networking gateway device integrating signaling gateway service, media gateway service, security authentication, rights management, log management and network management functions, which can realize cascading and interconnection between video surveillance platfor...
Projectsworlds College Management System 跨站请求伪造漏洞
ProjectWorlds College Management System is a college management system. projectWorlds College Management System is vulnerable to cross-site request forgery, which can be exploited by attackers to modify, delete student, faculty, teacher, subject, grade, location, and article data or create new...
Command Execution Vulnerability in Shanghai Atech Technology Co., Ltd.'s Aggressive 750W (CNVD-2021-22732)
The Aggressive 750W is an enterprise-grade wireless router. Ltd. Aggressive 750W suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...
Denial of Service Vulnerability in H8922 4G Wireless Router
Shenzhen Hongdian Technology Co., Ltd H8922 supports dual-SIM card backup; built-in WiFi module, supports wired and wireless, wireless and wireless backup each other; richer interfaces and better expandability 4 LAN ports, 1 WAN port; it is a feature-rich, widely used industrial-grade VPN router...
Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM DataQuant for Workstation (CVE-2015-4000)
Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM DataQuant for Workstation. Vulnerability Details CVEID: CVE-2015-4000 The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properly convey...
Moodle Information Disclosure Vulnerability (CNVD-2021-09497)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. An information disclosure vulnerability exists in Moodle 3.10, 3.9 to 3.9.3, 3.8 to 3.8.6, which originates from the disclosure of grad...