Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-0772 State: PUBLISHED Published: 2012-03-28T19:00:00 Last Updated: 2024-08-06T18:38:14.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unspecified ActiveX control in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228, and AIR before 3.2.0.2070, on Windows does not properly perform URL security domain checking, which allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-07.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1
rity/bulletins/apsb12-07.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15266 - http://secunia.com/advisories/48618 - http://osvdb.org/80706 - http://www.securitytracker.com/id?1026859 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-0773 State: PUBLISHED Published: 2012-03-28T19:00:00 Last Updated: 2024-08-06T18:38:14.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris; Flash Player before 11.1.111.8 on Android 2.x and 3.x; and AIR before 3.2.0.2070 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48652 - http://lists.opensuse.org/opensuse-
Notes: - CVE Program Container: References: - http://secunia.com/advisories/48652 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00017.html - http://www.adobe.com/support/security/bulletins/apsb12-07.html - http://secunia.com/advisories/48618 - http://security.gentoo.org/glsa/glsa-201204-07.xml - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00018.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15391 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16157 - http://www.securitytracker.com/id?1026859 - http://secunia.com/advisories/48819 - http://www.xerox.com/download/sec
57 - http://www.securitytracker.com/id?1026859 - http://secunia.com/advisories/48819 - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2012-0774 State: PUBLISHED Published: 2012-04-10T23:00:00 Last Updated: 2024-08-06T18:38:14.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code via a crafted TrueType font. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0469.html - http://secunia.com/advisories/48756 - http://www.adobe.com/support/security/bulletins/apsb12-08.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00017.html - http://secunia.com/advisories/48846 - http://www.us-cert.gov/cas/techalerts/TA1
ecurity-announce/2012-04/msg00017.html - http://secunia.com/advisories/48846 - http://www.us-cert.gov/cas/techalerts/TA12-101B.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00016.html - http://www.securityfocus.com/bid/52951 - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00013.html - http://www.securitytracker.com/id?1026908 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14860
CVE ID: CVE-2012-0775 State: PUBLISHED Published: 2012-04-10T23:00:00 Last Updated: 2024-08-06T18:38:14.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript implementation in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0469.html - http://secunia.com/advisories/48756 - http://www.adobe.com/support/security/bulletins/apsb12-08.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00017.html - http://www.securityfo
tins/apsb12-08.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00017.html - http://www.securityfocus.com/bid/52949 - http://secunia.com/advisories/48846 - http://www.us-cert.gov/cas/techalerts/TA12-101B.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00013.html - http://www.securitytracker.com/id?1026908 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15477 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74733
CVE ID: CVE-2012-0776 State: PUBLISHED Published: 2012-04-10T23:00:00 Last Updated: 2024-08-06T18:38:14.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-08.html - http://www.us-cert.gov/cas/techalerts/TA12-101B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15270 - http://www.securitytracker.com/id?1026908
CVE ID: CVE-2012-0777 State: PUBLISHED Published: 2012-04-10T23:00:00 Last Updated: 2024-08-06T18:38:14.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript API in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 on Mac OS X and Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-0469.html - http://secunia.com/advisories/48756 - http://www.adobe.com/support/security/bulletins/apsb12-08.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00017.html - http://www
urity/bulletins/apsb12-08.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00017.html - http://www.securityfocus.com/bid/52950 - http://secunia.com/advisories/48846 - http://www.us-cert.gov/cas/techalerts/TA12-101B.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00016.html - http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00013.html - http://www.securitytracker.com/id?1026908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/74735
CVE ID: CVE-2012-0778 State: PUBLISHED Published: 2012-05-09T01:00:00 Last Updated: 2024-08-06T18:38:14.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Professional before CS6 allows attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027045 - http://www.adobe.com/support/security/bulletins/apsb12-12.html - http://www.securityfocus.com/bid/53419
CVE ID: CVE-2012-0779 State: PUBLISHED Published: 2012-05-04T19:00:00 Last Updated: 2024-08-06T18:38:14.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x allows remote attackers to execute arbitrary code via a crafted file, related to an "object confusion vulnerability," as exploited in the wild in May 2012. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027023 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00005.html - http://www.
ecuritytracker.com/id?1027023 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00005.html - http://www.securityfocus.com/bid/53395 - http://secunia.com/advisories/49096 - http://rhn.redhat.com/errata/RHSA-2012-0688.html - http://osvdb.org/81656 - http://secunia.com/advisories/49038 - http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00004.html - http://www.adobe.com/support/security/bulletins/apsb12-09.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/75383
CVE ID: CVE-2012-0780 State: PUBLISHED Published: 2012-05-09T01:00:00 Last Updated: 2024-08-06T18:38:14.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2023, CVE-2012-2024, CVE-2012-2025, and CVE-2012-2026. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/bulletins/apsb12-10.html - http://www.securityfocus.com/bid/53422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75445 - http://www.securitytracker.com/id?1027047
CVE ID: CVE-2012-0781 State: PUBLISHED Published: 2012-01-18T20:00:00 Last Updated: 2024-08-06T18:38:14.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18370/ - http://archives.neohapsis.com/archives/bugtraq/2012-01/0092.html - http://lists.opensuse.org/opensuse-security-announce/201
p://archives.neohapsis.com/archives/bugtraq/2012-01/0092.html - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html - http://secunia.com/advisories/48668 - http://cxsecurity.com/research/103
CVE ID: CVE-2012-0782 State: PUBLISHED Published: 2012-01-30T17:00:00Z Last Updated: 2024-09-16T23:26:38.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dbhost, (2) dbname, or (3) uname parameter. NOTE: the vendor disputes the significance of this issue; also, it is unclear whether this specific XSS scenario has security relevance Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18417 - https://www.trustwave.com/s
yst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18417 - https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt - http://archives.neohapsis.com/archives/bugtraq/2012-01/0150.html
CVE ID: CVE-2012-0785 State: PUBLISHED Published: 2020-02-24T16:54:05 Last Updated: 2024-08-06T18:38:14.308Z Vendors: Jenkins project Products: Jenkins, Jenkins LTS, Jenkins Enterprise by CloudBees Problem Types: and hash collision attack Description: Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by CloudBees 1.424.x before 1.424.2.1 and 1.400.x before 1.400.0.11 could allow remote attackers to cause a considerable CPU load, aka "the Hash DoS attack." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/01/20/8 - https://security-tracker.debian.org/tracker/CVE-2012-07
ces: - http://www.openwall.com/lists/oss-security/2012/01/20/8 - https://security-tracker.debian.org/tracker/CVE-2012-0785 - https://access.redhat.com/security/cve/cve-2012-0785 - https://jenkins.io/security/advisory/2012-01-12/ - https://www.cloudbees.com/jenkins-security-advisory-2012-01-12
CVE ID: CVE-2012-0786 State: PUBLISHED Published: 2013-11-23T18:00:00 Last Updated: 2024-08-06T18:38:14.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: The transform_save function in transform.c in Augeas before 1.0.0 allows local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on a .augnew file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hercules-team/augeas/commit/16387744 - http://secunia.com/advisories/55811 - http://augeas.net/news.html - https://bugzilla.redhat.com/show_bug.cgi?id=772257 - http://rhn.redhat.com/errata/RHSA-2013-1537.html
CVE ID: CVE-2012-0787 State: PUBLISHED Published: 2013-11-23T18:00:00 Last Updated: 2024-08-06T18:38:14.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: The clone_file function in transfer.c in Augeas before 1.0.0, when copy_if_rename_fails is set and EXDEV or EBUSY is returned by the rename function, allows local users to overwrite arbitrary files and obtain sensitive information via a bind mount on the (1) .augsave or (2) destination file when using the backup save option, or (3) .augnew file when using the newfile save option. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55811 - http://augeas.net/news.html - https://bugzilla
VE Program Container: References: - http://secunia.com/advisories/55811 - http://augeas.net/news.html - https://bugzilla.redhat.com/show_bug.cgi?id=772261 - http://rhn.redhat.com/errata/RHSA-2013-1537.html - https://github.com/hercules-team/augeas/commit/b8de6a8c
CVE ID: CVE-2012-0788 State: PUBLISHED Published: 2012-02-14T15:00:00 Last Updated: 2024-08-06T18:38:14.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start function, as demonstrated by a crash of the Apache HTTP Server. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html - https://bugs.php.net/bug.php?id=55776 - http://lists.o
s.opensuse.org/opensuse-security-announce/2012-03/msg00013.html - https://bugs.php.net/bug.php?id=55776 - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html - http://secunia.com/advisories/48668 - http://www.php.net/ChangeLog-5.php#5.3.9 - https://bugzilla.redhat.com/show_bug.cgi?id=783605
CVE ID: CVE-2012-0789 State: PUBLISHED Published: 2012-02-14T15:00:00 Last Updated: 2024-08-06T18:38:14.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html - http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html - http://secunia.com/advisories/48668 - https://bugzilla.redhat.com
org/opensuse-security-announce/2012-03/msg00016.html - http://secunia.com/advisories/48668 - https://bugzilla.redhat.com/show_bug.cgi?id=783609 - http://www.php.net/ChangeLog-5.php#5.3.9 - https://bugs.php.net/bug.php?id=53502
CVE ID: CVE-2012-0790 State: PUBLISHED Published: 2012-01-24T18:00:00Z Last Updated: 2024-08-06T18:38:14.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in smokeping_cgi in Smokeping 2.4.2, 2.6.6, and other versions before 2.6.7 allows remote attackers to inject arbitrary web script or HTML via the displaymode parameter. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=783584 - http://secunia.com/advisories/47678 - http://www.securityfocus.com/bid/51584 - http://holisticinfosec.org/content/view/188/45/ - http://oss.oetiker.ch/smokeping/pub/CHANGES - https://bugs.gentoo.org/sho
p://holisticinfosec.org/content/view/188/45/ - http://oss.oetiker.ch/smokeping/pub/CHANGES - https://bugs.gentoo.org/show_bug.cgi?id=399553 - http://www.openwall.com/lists/oss-security/2012/01/21/1
CVE ID: CVE-2012-0791 State: PUBLISHED Published: 2012-01-24T18:00:00 Last Updated: 2024-08-06T18:38:14.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) composeCache, (2) rtemode, or (3) filename_* parameters to the compose page; (4) formname parameter to the contacts popup window; or (5) IMAP mailbox names. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.horde.org/apps/webmail/doc
arty information. Additional Analyst Notes: - CVE Program Container: References: - http://www.horde.org/apps/webmail/docs/CHANGES - http://www.debian.org/security/2012/dsa-2485 - http://www.horde.org/apps/webmail/docs/RELEASE_NOTES - http://www.securitytracker.com/id?1026553 - http://www.horde.org/apps/imp/docs/RELEASE_NOTES - http://www.securityfocus.com/bid/51586 - http://secunia.com/advisories/47580 - http://www.horde.org/apps/imp/docs/CHANGES - http://www.securitytracker.com/id?1026554 - http://www.openwall.com/lists/oss-security/2012/01/22/2 - http://secunia.com/advisories/47592
CVE ID: CVE-2012-0792 State: PUBLISHED Published: 2012-07-17T10:00:00 Last Updated: 2024-08-06T18:38:14.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=36b0ddeed45d0751508dcd9fa50f17fda43bae54 - http://moodle.org/mod/forum/discuss.php?d=194009 - http://www.debian.org/security/2012/dsa-2421 - https://bugzilla.redhat.com/show_bug.cgi?id=783532
CVE ID: CVE-2012-0793 State: PUBLISHED Published: 2012-07-17T10:00:00 Last Updated: 2024-08-06T18:38:14.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote attackers to view the profile images of arbitrary user accounts via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=194012 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=90911c4ff98dc2078a3acef5ddf5a1a8f7e20ba5 - http://www.debian.org/security/2012/dsa-2421 - https://bugzilla.redhat.com/show_bug.cgi?id=783532
CVE ID: CVE-2012-0794 State: PUBLISHED Published: 2012-07-17T10:00:00 Last Updated: 2024-08-06T18:38:14.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rc4encrypt function in lib/moodlelib.php in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 uses a hardcoded password of nfgjeingjk, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by reading this script's source code within the open-source software distribution. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=194013 - http://www.debian.org/security/2012/dsa-2421 - http://git.moodle
s: - http://moodle.org/mod/forum/discuss.php?d=194013 - http://www.debian.org/security/2012/dsa-2421 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=98456628a24bba25d336860d38a45b5a4e3895da - https://bugzilla.redhat.com/show_bug.cgi?id=783532
CVE ID: CVE-2012-0795 State: PUBLISHED Published: 2012-07-17T10:00:00 Last Updated: 2024-08-06T18:38:14.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does not validate e-mail address settings, which allows remote authenticated users to have an unspecified impact via a crafted address. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-13572 - http://www.debian.org/security/2012/dsa-2421 - https://bugzilla.redhat.com/show_bug.cgi?id=783532 - http://moodle.org/mod/forum/discuss.php?d=194014
CVE ID: CVE-2012-0796 State: PUBLISHED Published: 2012-07-17T10:00:00 Last Updated: 2024-08-06T18:38:14.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted (1) From: or (2) Sender: header. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=194015 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=62988bf0bbc73df655f51884aaf1f523928abff9 - http://www.debian.
015 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=62988bf0bbc73df655f51884aaf1f523928abff9 - http://www.debian.org/security/2012/dsa-2421 - https://bugzilla.redhat.com/show_bug.cgi?id=783532
CVE ID: CVE-2012-0797 State: PUBLISHED Published: 2012-07-17T10:00:00 Last Updated: 2024-08-06T18:38:14.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote authenticated users to bypass the deleted status and continue using a server via a token. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28126 - https://bugzilla.redhat.com/show_bug.cgi?id=783532 - http://moodle.org/mod/forum/discuss.php?d=194016
CVE ID: CVE-2012-0798 State: PUBLISHED Published: 2012-07-17T10:00:00 Last Updated: 2024-08-06T18:38:14.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: The self-enrolment functionality in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 allows remote authenticated users to obtain the manager role by leveraging the teacher role. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-29469 - https://bugzilla.redhat.com/show_bug.cgi?id=783532 - http://moodle.org/mod/forum/discuss.php?d=194017
CVE ID: CVE-2012-0799 State: PUBLISHED Published: 2012-07-17T10:00:00 Last Updated: 2024-08-06T18:38:14.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attackers to obtain session keys for their sessions by visiting the front page. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-27334 - http://moodle.org/mod/forum/discuss.php?d=194018 - https://bugzilla.redhat.com/show_bug.cgi?id=783532
CVE ID: CVE-2012-0800 State: PUBLISHED Published: 2012-07-17T10:00:00 Last Updated: 2024-08-06T18:38:14.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: The form-autocompletion functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 makes it easier for physically proximate attackers to discover passwords by reading the contents of a non-password field, as demonstrated by accessing a create-groups page with Safari on an iPad device. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=194019 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=6e9989dbd3f261b2e1586ff77b0bf22fc7091485 - https: