CVE-2016-8643

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

Code injection

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

UBUNTU-CVE-2016-8643

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

CVE-2016-8643

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

CVE-2016-8643

Technical details (affected product/version, root cause, impact, and fixes) are not publicly provided in the supplied documents. Please monitor for updates from vendors and security bodies.

Cross site request forgery (csrf)

RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request...

CVE-2016-10086

RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request...

CVE-2016-10086

RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticated users to read or modify task information by leveraging incorrect permissions applied to a RESTful request...

CVE-2016-10086

CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 contain a RESTful services vulnerability (CVE-2016-10086) where remote authenticated users could read or modify task information due to incorrect permissions on RESTful requests. The affected components are REST endpoints handling t...

HPE Helion Eucalyptus Security Bypass Vulnerability

HPE Helion Eucalyptus is an open source for building Amazon Web Services AWS compatible private cloud solutions. A security bypass vulnerability exists in HPE Helion Eucalyptus, which allows remote attackers to submit a special request to perform an unauthorized operation...

Description of the cumulative update package for Communicator 2007 R2: November 2010

Describes the issues that are fixed in the November, 2010 cumulative update package for Communicator 2007 R2.SummaryThis article describes the Microsoft Office Communicator 2007 R2 issues that are fixed in the update for Communicator 2007 R2 that is dated November 2010.This article describes the...

Moodle 3.0.x < 3.0.7 Multiple Vulnerabilities

Binary data 9836.prm...

Moodle 2.9.x < 2.9.9 Multiple Vulnerabilities

Binary data 9834.prm...

Moodle 3.1.x < 3.1.3 Multiple Vulnerabilities

Binary data 9838.prm...

moodle -- multiple vulnerabilities

Marina Glancy reports: MSA-16-0023: Question engine allows access to files that should not be available MSA-16-0024: Non-admin site managers may accidentally edit admins via web services MSA-16-0025: Capability to view course notes is checked in the wrong context MSA-16-0026: When debugging is...

Microsoft Browser Spoofing Vulnerability

A spoofing vulnerability exists when Microsoft browsers do not properly parse HTTP content. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a...

RedHat Update for resteasy-base RHSA-2016:2604-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: resteasy-base security and bug fix update

An update for resteasy-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Oracle Secure Global Desktop Unspecified Vulnerability (October 2016 CPU)

The version of Oracle Secure Global Desktop installed on the remote host is 4.71 or 5.2 and is missing a security patch from the October 2016 Critical Patch Update CPU. It is, therefore, affected by an unspecified vulnerability in the web services component. An authenticated, remote attacker can...

CVE-2016-5580

Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.7 and 5.2 allows remote authenticated users to affect confidentiality and availability via vectors through Web Services...