| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2011-2908 | 6.0 | Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authe | 2023-02-13 04:32:00 | 2012-11-23 20:55:00 |
| CVE-2011-3209 | 4.9 | The div_long_long_rem implementation in include/asm-x86/div64.h in the Linux kernel before 2.6.26 on the x86 platform allows local users to cause a denial of service (Divide Error Fault and panic) via a clock_gettime system call. | 2023-02-13 04:32:00 | 2012-10-03 11:02:00 |
| CVE-2011-4290 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to URL encoding. | 2023-02-13 04:32:00 | 2012-07-16 10:28:00 |
| CVE-2011-4288 | 4.0 | Moodle 1.9.x before 1.9.12 and 2.0.x before 2.0.3 does not properly implement associations between teachers and groups, which allows remote authenticated users to read quiz reports of arbitrary students by leveraging the teacher role. | 2023-02-13 04:32:00 | 2012-07-16 10:28:00 |
| CVE-2011-4309 | 5.0 | Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to a URL. | 2023-02-13 04:32:00 | 2012-07-11 10:26:00 |
| CVE-2011-4301 | 5.0 | The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not recognize Forms API setConstant operations, which allows remote attackers to submit unexpected form | 2023-02-13 04:32:00 | 2012-07-11 10:26:00 |
| CVE-2011-4300 | 5.0 | The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file. | 2023-02-13 04:32:00 | 2012-07-11 10:26:00 |
| CVE-2011-4328 | 5.0 | plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which allows local users to obtain sensitive information. | 2023-02-13 04:32:00 | 2012-06-16 00:55:00 |
| CVE-2011-2911 | 6.8 | Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer | 2023-02-13 04:32:00 | 2012-06-07 19:55:00 |
| CVE-2011-4081 | 4.9 | crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_setkey function call, followed | 2023-02-13 04:32:00 | 2012-05-24 23:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: