CVE-database
129.550 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-5341 MEDIUM · 4.3 mod_scorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 mishandles availability dates, which allows remote authenticated users to bypass… Moodle
- CVE-2015-5340 MEDIUM · 4.3 Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not consider the moodle/badges:viewbadges capability, which allows remote authenticated users to… Moodle
- CVE-2015-5339 MEDIUM · 4.3 De webservice core_enrol_get_enrolled_users in enrol/externallib.php in Moodle via 2.6.11, 2.7.x vóór 2.7.11, 2.8.x vóór 2.8.9 en 2.9.x vóór 2.9.3 implementeert geen op groepen gebaseerde toegangsbeperkingen,… Moodle
- CVE-2015-5338 HIGH · 8.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the lesson module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allow… Moodle
- CVE-2015-5337 MEDIUM · 6.1 Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers… Moodle
- CVE-2015-5336 MEDIUM · 5.4 Meerdere cross-site scripting (XSS) -kwetsbaarheden in de enquêtemodule in Moodle via 2.6.11, 2.7.x vóór 2.7.11, 2.8.x vóór 2.8.9 en 2.9.x vóór 2.9.3 stellen op afstand… Moodle
- CVE-2015-5335 MEDIUM · 4.3 Cross-site request forgery (CSRF) vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to… Moodle
- CVE-2015-5332 MEDIUM · 6.8 ATTO in Moodle 2.8.x voor 2.8.9 en 2.9.x voor 2.9.3 stelt externe aanvallers in staat om een denial of service (schijfverbruik) te veroorzaken door gebruik… Moodle
- CVE-2015-5331 MEDIUM · 4.3 Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions… Moodle
- CVE-2015-5272 MEDIUM · 4.3 The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by… Moodle
- CVE-2015-5269 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in group/overview.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to… Moodle
- CVE-2015-5268 MEDIUM · 4.3 The rating component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 mishandles group-based authorization checks, which allows remote authenticated… Moodle
- CVE-2015-5267 HIGH · 7.5 lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on the PHP mt_rand function to implement the random_string… Moodle
- CVE-2015-5266 MEDIUM · 6.8 The enrol_meta_sync function in enrol/meta/locallib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to obtain… Moodle
- CVE-2015-5265 MEDIUM · 4.3 The wiki component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 does not consider the mod/wiki:managefiles capability before authorizing… Moodle
- CVE-2015-5264 MEDIUM · 5.4 The lesson module in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to bypass intended access… Moodle
- CVE-2015-3275 MEDIUM · 6.1 Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allow remote… Moodle
- CVE-2015-3274 MEDIUM · 6.1 Cross-site scripting (XSS) vulnerability in the user_get_user_details function in user/lib.php in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, and 2.9.x before 2.9.1 allows… Moodle
- CVE-2015-3273 MEDIUM · 4.3 mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups capability before authorizing "Post a copy to all groups" actions, which allows remote authenticated… Moodle
- CVE-2015-3272 HIGH · 7.4 Open omleidingskwetsbaarheid in de clean_param-functie in lib/moodlelib.php in Moodle via 2.6.11, 2.7.x vóór 2.7.9, 2.8.x vóór 2.8.7 en 2.9.x vóór 2.9.1 stelt externe aanvallers in… Moodle
- CVE-2016-1629 CRITICAL · 9.8 Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors. Google Novell Opensuse Debian
- CVE-2015-7425 CRITICAL · 10.0 The Data Protection component in the VMware vSphere GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for… Ibm
- CVE-2016-2275 CRITICAL · 9.8 The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement… Advantech
- CVE-2016-1628 MEDIUM · 6.3 pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute… Google Debian
- CVE-2016-2045 MEDIUM · 5.4 Cross-site scripting (XSS) vulnerability in the SQL editor in phpMyAdmin 4.5.x before 4.5.4 allows remote authenticated users to inject arbitrary web script or HTML via… Phpmyadmin Fedoraproject
- CVE-2016-2044 MEDIUM · 5.3 libraries/sql-parser/autoload.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full… Fedoraproject Phpmyadmin
- CVE-2016-2043 MEDIUM · 5.4 Cross-site scripting (XSS) -kwetsbaarheid in de goToFinish1NF-functie in js/normalization.js in phpMyAdmin 4.4.x vóór 4.4.15.3 en 4.5.x vóór 4.5.4 stelt op afstand geverifieerde gebruikers in staat… Fedoraproject Opensuse Phpmyadmin
- CVE-2016-2042 MEDIUM · 5.3 phpMyAdmin 4.4.x before 4.4.15.3 and 4.5.x before 4.5.4 allows remote attackers to obtain sensitive information via a crafted request to (1) libraries/phpseclib/Crypt/AES.php or (2) libraries/phpseclib/Crypt/Rijndael.php,… Opensuse Fedoraproject Phpmyadmin
- CVE-2016-2041 HIGH · 7.5 libraries/common.inc.php in phpMyAdmin 4.0.x vóór 4.0.10.13, 4.4.x vóór 4.4.15.3 en 4.5.x vóór 4.5.4 gebruikt geen constant-time algoritme voor het vergelijken van CSRF-tokens, waardoor het voor… Fedoraproject Phpmyadmin Opensuse
- CVE-2016-2040 MEDIUM · 5.4 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 allow remote authenticated users to inject arbitrary web… Fedoraproject Opensuse Phpmyadmin
- CVE-2016-2039 MEDIUM · 5.3 libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, which allows remote attackers to… Opensuse Phpmyadmin Fedoraproject
- CVE-2016-2038 MEDIUM · 5.3 phpMyAdmin 4.0.x vóór 4.0.10.13, 4.4.x vóór 4.4.15.3 en 4.5.x vóór 4.5.4 stelt externe aanvallers in staat om gevoelige informatie te verkrijgen via een vervaardigd verzoek,… Phpmyadmin Fedoraproject Opensuse
- CVE-2016-1927 HIGH · 7.5 The suggestPassword function in js/functions.js in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 relies on the Math.random JavaScript function, which makes… Phpmyadmin
- CVE-2016-1335 HIGH · 7.5 The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication configuration, which allows remote… Cisco
- CVE-2016-1156 MEDIUM · 5.7 LINE 4.3.0.724 and earlier on Windows and 4.3.1 and earlier on OS X allows remote authenticated users to cause a denial of service (application crash)… Apple Linecorp Microsoft
- CVE-2016-1154 CRITICAL · 9.1 SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Cuore
- CVE-2015-7769 MEDIUM · 6.3 baserCMS 3.0.2 through 3.0.8 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors. Basercms
- CVE-2016-2271 MEDIUM · 5.5 VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest… Xen
- CVE-2016-2270 MEDIUM · 6.8 Xen 4.6.x en eerder stelt lokale gastbeheerders in staat om een denial of service (herstart van de host) te veroorzaken via vectoren die verband houden… Debian Fedoraproject Xen Oracle
- CVE-2016-2509 MEDIUM · 5.3 De wachtwoordsynchronisatiefunctie op Belden Hirschmann Classic Platform schakelt L2B vóór 05.3.07 en L2E, L2P, L3E en L3P vóór 09.0.06 stelt een SNMP-gemeenschap in op dezelfde… Belden
- CVE-2016-1987 MEDIUM · 5.9 HPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows remote attackers to cause a denial of service via unspecified UDP packets. Hp
- CVE-2016-0069 HIGH · 8.8 Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability,"… Microsoft
- CVE-2016-0068 HIGH · 8.8 Met Microsoft Internet Explorer 9 tot en met 11 kunnen externe aanvallers het Same Origin-beleid omzeilen via niet-gespecificeerde vectoren, ook bekend als "Internet Explorer Elevation… Microsoft
- CVE-2015-8151 CRITICAL · 9.1 Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access. Symantec
- CVE-2015-8150 HIGH · 7.8 Symantec Encryption Management Server (SEMS) 3.3.2 vóór MP12 stelt lokale gebruikers in staat om root-toegang te verkrijgen door een batchbestand te wijzigen. Symantec
- CVE-2015-8149 HIGH · 7.5 The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to cause a denial of service (heap memory corruption and… Symantec
- CVE-2015-8148 HIGH · 7.5 The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified… Symantec
- CVE-2015-5970 MEDIUM · 5.3 De ChangePassword RPC-methode in Novell ZENworks Configuration Management (ZCM) 11.3 en 11.4 stelt externe aanvallers in staat om XPath-injectieaanvallen uit te voeren en willekeurige tekstbestanden… Novell
- CVE-2016-0795 HIGH · 7.8 LibreOffice before 5.0.5 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted LwpTocSuperLayout record… Libreoffice Canonical
- CVE-2016-0794 HIGH · 7.8 The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via… Libreoffice Canonical