Filtered by vendor Subscriptions
Total 322795 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2012-1258 1 Plixer 1 Scrutinizer Netflow \& Sflow Analyzer 2024-11-21 6.5 Medium
cgi-bin/userprefs.cgi in Plixer International Scrutinizer NetFlow & sFlow Analyzer before 9.0.1.19899 does not validate user permissions, which allow remote attackers to add user accounts with administrator privileges via the newuser, pwd, and selectedUserGroup parameters.
CVE-2012-1257 1 Pidgin 1 Pidgin 2024-11-21 5.5 Medium
Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.
CVE-2012-1187 1 Bitlbee 1 Bitlbee 2024-11-21 9.8 Critical
Bitlbee does not drop extra group privileges correctly in unix.c
CVE-2012-1170 2 Fedoraproject, Moodle 2 Fedora, Moodle 2024-11-21 7.5 High
Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough
CVE-2012-1169 2 Fedoraproject, Moodle 2 Fedora, Moodle 2024-11-21 5.3 Medium
Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.
CVE-2012-1168 3 Fedoraproject, Moodle, Redhat 3 Fedora, Moodle, Enterprise Linux 2024-11-21 8.2 High
Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.
CVE-2012-1161 2 Fedoraproject, Moodle 2 Fedora, Moodle 2024-11-21 4.3 Medium
Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results
CVE-2012-1160 2 Fedoraproject, Moodle 2 Fedora, Moodle 2024-11-21 2.7 Low
Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php
CVE-2012-1159 2 Fedoraproject, Moodle 2 Fedora, Moodle 2024-11-21 4.3 Medium
Moodle before 2.2.2: Overview report allows users to see hidden courses
CVE-2012-1158 2 Fedoraproject, Moodle 2 Fedora, Moodle 2024-11-21 4.3 Medium
Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export
CVE-2012-1157 2 Fedoraproject, Moodle 2 Fedora, Moodle 2024-11-21 4.3 Medium
Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default
CVE-2012-1156 3 Fedoraproject, Moodle, Redhat 3 Fedora, Moodle, Enterprise Linux 2024-11-21 7.5 High
Moodle before 2.2.2 has users' private files included in course backups
CVE-2012-1155 4 Debian, Fedoraproject, Moodle and 1 more 4 Debian Linux, Fedora, Moodle and 1 more 2024-11-21 7.5 High
Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to
CVE-2012-1124 1 Phxeventmanager Project 1 Phxeventmanager 2024-11-21 9.8 Critical
SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the search_terms parameter.
CVE-2012-1115 3 Debian, Fedoraproject, Ldap-account-manager 3 Debian Linux, Fedora, Ldap Account Manager 2024-11-21 6.1 Medium
A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php.
CVE-2012-1114 3 Debian, Fedoraproject, Ldap-account-manager 3 Debian Linux, Fedora, Ldap Account Manager 2024-11-21 6.1 Medium
A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_id action. and the filteruid parameter to list.php.
CVE-2012-1109 1 Pediapress 1 Mwlib 2024-11-21 7.5 High
mwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic functions
CVE-2012-1105 3 Apereo, Debian, Fedoraproject 3 Phpcas, Debian Linux, Fedora 2024-11-21 5.5 Medium
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner.
CVE-2012-1104 3 Apereo, Debian, Linux 3 Phpcas, Debian Linux, Linux Kernel 2024-11-21 5.3 Medium
A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed.
CVE-2012-1102 1 Xml\ 1 \ 2024-11-21 7.5 High
It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.