|
294671
|
5.3 |
MEDIUM
Network
|
apereo debian
|
phpcas debian_linux
|
A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed.
|
CWE-269
Improper Privilege Management
|
CVE-2012-1104
|
2024-11-21 10:36 |
2019-12-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294672
|
6.1 |
MEDIUM
Network
|
chyrp
|
chyrp
|
Multiple cross-site scripting (XSS) vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) content parameter to includes…
|
CWE-79
Cross-site Scripting
|
CVE-2012-1001
|
2024-11-21 10:36 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294673
|
5.5 |
MEDIUM
Local
|
pidgin
|
pidgin
|
Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2012-1257
|
2024-11-21 10:36 |
2019-11-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294674
|
7.5 |
HIGH
Network
|
moodle fedoraproject
|
moodle fedora
|
Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough
|
CWE-354
Improper Validation of Integrity Check Value
|
CVE-2012-1170
|
2024-11-21 10:36 |
2019-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294675
|
5.3 |
MEDIUM
Network
|
moodle fedoraproject
|
moodle fedora
|
Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.
|
CWE-200
Information Exposure
|
CVE-2012-1169
|
2024-11-21 10:36 |
2019-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294676
|
4.3 |
MEDIUM
Network
|
moodle fedoraproject
|
moodle fedora
|
Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results
|
CWE-200
Information Exposure
|
CVE-2012-1161
|
2024-11-21 10:36 |
2019-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294677
|
2.7 |
LOW
Network
|
moodle fedoraproject
|
moodle fedora
|
Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2012-1160
|
2024-11-21 10:36 |
2019-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294678
|
4.3 |
MEDIUM
Network
|
moodle fedoraproject
|
moodle fedora
|
Moodle before 2.2.2: Overview report allows users to see hidden courses
|
CWE-200
Information Exposure
|
CVE-2012-1159
|
2024-11-21 10:36 |
2019-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294679
|
4.3 |
MEDIUM
Network
|
moodle fedoraproject
|
moodle fedora
|
Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export
|
CWE-200
Information Exposure
|
CVE-2012-1158
|
2024-11-21 10:36 |
2019-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294680
|
4.3 |
MEDIUM
Network
|
moodle fedoraproject
|
moodle fedora
|
Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default
|
CWE-276
Incorrect Default Permissions
|
CVE-2012-1157
|
2024-11-21 10:36 |
2019-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|