CVE-2012-2353

Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive user information from hidden fields by leveraging the teacher role and navigating to "Enrolled users" under the Users Settings section...

UBUNTU-CVE-2012-2355

Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass question:use capability requirements and add arbitrary questions to a quiz via the questions feature...

UBUNTU-CVE-2012-2364

Cross-site scripting XSS vulnerability in lib/filelib.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via an assignment submission with zip compression, leading to text/html rendering during a...

UBUNTU-CVE-2012-2360

Cross-site scripting XSS vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is inserted into a page title...

CVE-2012-2367

The CVE affects Moodle versions: 1.9.x before 1.9.18, 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3. A remote authenticated user can bypass the moodle/calendar:manageownentries capability and create a calendar entry via New Entry. Root cause is a capability check bypass in the ca...

CVE-2012-2358

CVE-2012-2358 affects Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3. A remote authenticated user can bypass an activity’s read-only state and modify the database by leveraging the student role to edit existing database activity entries. The provided documents do not specif...

CVE-2011-4581

mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 allows remote authenticated users to discover the username of a wiki creator by visiting the history and deletion user interface...

CVE-2012-3008

Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items...

CVE-2012-3117

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows remote authenticated users to affect confidentiality via unknown vectors related to HTTP...

CVE-2012-1739

Technical details about CVE-2012-1739 are not publicly available in the provided connected documents. Monitor for updates from Oracle advisories and CVE records for affected products, versions, impact, and remediation.

PYSEC-2012-40

The Nova scheduler in OpenStack Compute Nova Folsom 2012.2 and Essex 2012.1, when DifferentHostFilter or SameHostFilter is enabled, allows remote authenticated users to cause a denial of service excessive database lookup calls and server hang via a request with many repeated IDs in the...

CVE-2012-0796

class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted 1 From: or 2 Sender: header...

CVE-2012-0797

The CVE-2012-0797 issue affects Moodle webservices authentication: remote authenticated users could bypass the deleted status and continue using a server via a token. Affected versions are Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1. The root cause is improper handling o...

PT-2012-3446 · Oracle +3 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.1.62 and earlier Oracle MySQL Server versions 5.5.22 and earlier Description: The issue affects the availability of the system, related to the Server Optimizer component. It can be exploited by remote...

CVE-2011-4288

The CVE-2011-4288 issue affects Moodle 1.9.x up to 1.9.11 and 2.0.x up to 2.0.2, due to improper associations between teachers and groups. This allows remote authenticated users with the teacher role to read quiz reports of arbitrary students. Root cause: flawed access control for teacher-group a...

Design/Logic Flaw

The administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Bug ID CSCth85804...

CVE-2012-3075

The CVE-2012-3075 case concerns Cisco TelePresence Immersive Endpoint Devices prior to 1.7.4. The advisory confirms multiple remote-command-execution vulnerabilities, including exploitation via the Administrative Web interface over TCP 443 and via API/Discovery Protocol, allowing command injectio...

CVE-2012-3864

Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files on the puppet master server by leveraging an arbitrary user's certificate and private key in a GET request...

Code injection

mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors...

CVE-2011-4304

CVE-2011-4304 affects Moodle chat functionality (versions 2.0.x prior to 2.0.5 and 2.1.x prior to 2.1.2). The cited issue enables remote authenticated users to discover the name of another user via a beep operation. The PT-2012-1852 entry confirms affected versions and provides remediation guidan...