Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4567 State: PUBLISHED Published: 2011-11-29T00:00:00 Last Updated: 2024-08-07T00:09:18.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/templates/template_default/templates/tpl_gv_send_default.php in Zen Cart before 1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a gv_send action to index.php, a different vulnerability than CVE-2011-4547. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/71519 - https://www.dognaedis.com/vulns/DGS-SEC-8.html - http://www.securityfocus.com/bid/50787
CVE ID: CVE-2011-4568 State: PUBLISHED Published: 2011-11-29T11:00:00Z Last Updated: 2024-09-16T18:19:40.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/extend/plugins/fv-wordpress-flowplayer/changelog/ - http://secunia.com/advisories/46346 - http://plugins.trac.wordpress.org/changeset?reponame=&new=413607%40fv-wordpress-flowplayer&old=409594%40fv-wordpress-flowplayer - http://www.securityfocus.com/
eset?reponame=&new=413607%40fv-wordpress-flowplayer&old=409594%40fv-wordpress-flowplayer - http://www.securityfocus.com/bid/50008
CVE ID: CVE-2011-4569 State: PUBLISHED Published: 2011-11-29T11:00:00 Last Updated: 2024-08-07T00:09:19.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70474 - http://www.exploit-db.com/exploits/17962
CVE ID: CVE-2011-4570 State: PUBLISHED Published: 2011-11-29T11:00:00 Last Updated: 2024-08-07T00:09:19.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Time Returns (com_timereturns) component 2.0 and possibly earlier versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a timereturns action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/46267 - http://www.exploit-db.com/exploits/17944 - http://www.securityfocus.com/bid/50026 - http://osvdb.org/76268 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70431
CVE ID: CVE-2011-4571 State: PUBLISHED Published: 2011-11-29T11:00:00 Last Updated: 2024-08-07T00:09:19.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Estate Agent (com_estateagent) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showEO action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/files/view/105618/joomlaestateagent-sql.txt - http://www.securityfocus.com/bid/50024 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70444
CVE ID: CVE-2011-4572 State: PUBLISHED Published: 2011-11-29T11:00:00 Last Updated: 2024-08-07T00:09:18.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure vulnerability, but this is likely inaccurate. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/17927 - http://packetstormsecurity.org/files/view/105524/cfimagehosting1382-disclose.txt - http://
ploit-db.com/exploits/17927 - http://packetstormsecurity.org/files/view/105524/cfimagehosting1382-disclose.txt - http://secunia.com/advisories/46290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/70347 - http://osvdb.org/76059
CVE ID: CVE-2011-4573 State: PUBLISHED Published: 2014-04-01T01:00:00 Last Updated: 2024-08-07T00:09:18.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from being recorded in the audit trail. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=760024 - http://rhn.redhat.com/errata/RHSA-2012-0089.html
CVE ID: CVE-2011-4574 State: PUBLISHED Published: 2021-10-27T00:52:57 Last Updated: 2024-08-07T00:09:19.410Z Vendors: n/a Products: PolarSSL Problem Types: CWE-338 Description: PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing information based on the processor's high resolution timer (the RDTSC instruction). This instruction can be virtualized, and some virtual machine hosts have chosen to disable this instruction, returning 0s or predictable results. Additional Analyst Notes: - CVE Program Container: References: - https://tls.mbed.org/tech-updates/security-advisories/polarssl-security-advisory-2011-02
CVE ID: CVE-2011-4575 State: PUBLISHED Published: 2013-02-05T23:11:00 Last Updated: 2024-08-07T00:09:18.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=760387 - http://www.osvdb.org/89578 - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-
387 - http://www.osvdb.org/89578 - http://rhn.redhat.com/errata/RHSA-2013-0192.html - http://rhn.redhat.com/errata/RHSA-2013-0198.html - http://rhn.redhat.com/errata/RHSA-2013-0195.html - http://rhn.redhat.com/errata/RHSA-2013-0221.html - http://rhn.redhat.com/errata/RHSA-2013-0196.html - http://rhn.redhat.com/errata/RHSA-2013-0193.html - http://secunia.com/advisories/51984 - http://secunia.com/advisories/52054 - http://rhn.redhat.com/errata/RHSA-2013-0191.html - http://rhn.redhat.com/errata/RHSA-2013-0197.html - http://rhn.redhat.com/errata/RHSA-2013-0194.html - http://www.securityfocus.com/bid/57548
CVE ID: CVE-2011-4576 State: PUBLISHED Published: 2012-01-06T01:00:00 Last Updated: 2024-08-07T00:09:19.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/48528 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://lists.opensuse
ort/Document.jsp?objectID=c03360041 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html - http://www.mandriva.com/security/advisories?name=MDVSA-2012:006 - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html - http://www.openssl.org/news/secadv_20120104.txt - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html - http://rhn.redhat.com/errata/RHSA-2012-1308.html - http://rhn.redhat.com/errata/RHSA-2012-1307.html - http://support.apple.com/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - http://www.kb.cert.org/vuls/id/
m/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - http://www.kb.cert.org/vuls/id/737740 - http://marc.info/?l=bugtraq&m=132750648501816&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:007 - http://rhn.redhat.com/errata/RHSA-2012-1306.html - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://secunia.com/advisories/57353 - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://marc.info/?l=bugtraq&m=132750648501816&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www.debian.org/security/2012/dsa-2390 - http://secunia.com/advisor
/TechSupport/Document.jsp?objectID=c03360041 - http://www.debian.org/security/2012/dsa-2390 - http://secunia.com/advisories/55069 - http://marc.info/?l=bugtraq&m=133951357207000&w=2 - http://aix.software.ibm.com/aix/efixes/security/openssl_advisory3.asc
CVE ID: CVE-2011-4577 State: PUBLISHED Published: 2012-01-06T01:00:00 Last Updated: 2024-08-07T00:09:18.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://lists.opensuse.org/o
cument.jsp?objectID=c03360041 - http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004564 - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00017.html - http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092905.html - http://www.openssl.org/news/secadv_20120104.txt - http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00018.html - http://support.apple.com/kb/HT5784 - http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html - http://www.kb.cert.org/vuls/id/737740 - http://marc.info/?l=bugtraq&m=132750648501816&w=2 - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://secunia.com/advisories/57353 - http://marc.info/?l=bug
&w=2 - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://secunia.com/advisories/57353 - http://marc.info/?l=bugtraq&m=134039053214295&w=2 - http://marc.info/?l=bugtraq&m=132750648501816&w=2 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
CVE ID: CVE-2011-4578 State: PUBLISHED Published: 2012-08-29T22:00:00 Last Updated: 2024-08-07T00:09:19.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: event.c in acpid (aka acpid2) before 2.0.11 does not have an appropriate umask setting during execution of event-handler scripts, which might allow local users to (1) perform write operations within directories created by a script, or (2) read files created by a script, via standard filesystem system calls. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=760984 - http://sourceforge.net/u/tedfelix/acpid2/ci/02d0bf29207f17996936ab652717855b15873901/tree/Changelog?force
gi?id=760984 - http://sourceforge.net/u/tedfelix/acpid2/ci/02d0bf29207f17996936ab652717855b15873901/tree/Changelog?force=True - http://www.mandriva.com/security/advisories?name=MDVSA-2012:138 - http://www.openwall.com/lists/oss-security/2011/12/06/3 - https://bugs.launchpad.net/ubuntu/+source/acpid/+bug/893821
CVE ID: CVE-2011-4579 State: PUBLISHED Published: 2012-08-20T20:00:00Z Last Updated: 2024-09-17T01:30:40.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The svq1_decode_frame function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9, and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.6, 0.6.x before 0.6.4, and 0.7.x before 0.7.3 allows remote attackers to cause a denial of service (memory corruption) via a crafted SVQ1 stream, related to "dimensions changed." Additional Analyst Notes: - CVE Program Container: References: - http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=6e24b9488e67849a28e64a8056e05f83cf439
Program Container: References: - http://git.libav.org/?p=libav.git%3Ba=commit%3Bh=6e24b9488e67849a28e64a8056e05f83cf439229 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:076 - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=6e24b9488e67849a28e64a8056e05f83cf439229 - http://ubuntu.com/usn/usn-1320-1 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:074 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:075 - http://ffmpeg.org/ - http://libav.org/ - http://ubuntu.com/usn/usn-1333-1 - http://www.securityfocus.com/archive/1/520620
CVE ID: CVE-2011-4580 State: PUBLISHED Published: 2014-02-26T15:00:00 Last Updated: 2024-08-07T00:09:19.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2011-1822.html
CVE ID: CVE-2011-4581 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-07T00:09:19.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 allows remote authenticated users to discover the username of a wiki creator by visiting the history and deletion user interface. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=140af2a0f0a4598bf568b9ae182cb81eb583edeb - https://bugzilla.redhat.com/show_bug.cgi?id=761248 - http://moodle.org/mod/forum/discuss.php?d=191747
CVE ID: CVE-2011-4582 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-07T00:09:19.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=761248 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28720&sr=1 - http://moodle.org/mod/forum/discuss.php?d=191748
CVE ID: CVE-2011-4583 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-07T00:09:19.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=191750 - https://bugzilla.redhat.com/show_bug.cgi?id=761248 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28670&sr=1
CVE ID: CVE-2011-4584 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-07T00:09:19.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MNET authentication functionality in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 allows remote authenticated users to impersonate other user accounts by using the Login As feature in conjunction with a remote MNET single sign-on capability, as demonstrated by a Mahara site. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=761248 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=10df8657c1c138c0d0ab1d4796c552fcec0c299b - http://www.d
id=761248 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=10df8657c1c138c0d0ab1d4796c552fcec0c299b - http://www.debian.org/security/2012/dsa-2421 - http://moodle.org/mod/forum/discuss.php?d=191751
CVE ID: CVE-2011-4585 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-07T00:09:19.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: login/change_password.php in Moodle 1.9.x before 1.9.15 does not use https for the change-password form even if the httpslogin option is enabled, which allows remote attackers to obtain credentials by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=761248 - http://www.debian.org/security/2012/dsa-2421 - http://moodle.org/mod/forum/discuss.php?d=191752 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=01dd64a8c8aa95f793accea371b2392e662663c5
CVE ID: CVE-2011-4586 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-07T00:09:19.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in calendar/set.php in the Calendar subsystem in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=761248 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=581e8dba387f090d89382115fd850d8b44351526 - http://www.debian.org/security/2012/dsa-242
rg/gw?p=moodle.git%3Ba=commit%3Bh=581e8dba387f090d89382115fd850d8b44351526 - http://www.debian.org/security/2012/dsa-2421 - http://moodle.org/mod/forum/discuss.php?d=191754
CVE ID: CVE-2011-4587 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-07T00:09:19.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle certain zero values in the password policy, which makes it easier for remote attackers to obtain access by leveraging the possible existence of user accounts that have unchangeable blank passwords. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=761248 - http://moodle.org/mod/forum/discuss.php?d=191755 - http://www.debian.org/security/2012/dsa-2421 - h
_bug.cgi?id=761248 - http://moodle.org/mod/forum/discuss.php?d=191755 - http://www.debian.org/security/2012/dsa-2421 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=e079e82c087becf06d902089d14f3f76686bde19
CVE ID: CVE-2011-4588 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-07T00:09:19.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x before 1.9.15 uses an incorrect data type, which allows remote attackers to bypass intended IP address restrictions via an XMLRPC request. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=761248 - http://www.debian.org/security/2012/dsa-2421 - http://moodle.org/mod/forum/discuss.php?d=191756 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=3ab2851d2a59721445945d0706c58092e07e861e
CVE ID: CVE-2011-4589 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-07T00:09:19.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: backup/moodle2/restore_stepslib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not check for the moodle/course:changeidnumber privilege during handling of course ID numbers, which allows remote authenticated users to overwrite ID numbers via a restore action. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=761248 - http://moodle.org/mod/forum/discuss.php?d=191758 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-29591
CVE ID: CVE-2011-4590 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-07T00:09:19.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web services implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly consider the maintenance-mode state and account attributes during login attempts, which allows remote authenticated users to bypass intended access restrictions by connecting to a webservice server. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=761248 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28629 - http://moodle.org/mod/forum/discuss
1248 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28629 - http://moodle.org/mod/forum/discuss.php?d=191759
CVE ID: CVE-2011-4591 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-07T00:09:19.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the print_object function in lib/datalib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3, when a developer debugging script is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors involving object states. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=761248 - http://moodle.org/mod/forum/discuss.php?d=191760 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=187672608ec96659e07f24
/moodle.org/mod/forum/discuss.php?d=191760 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=187672608ec96659e07f2461b3b83634debd16cb
CVE ID: CVE-2011-4592 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-07T00:09:19.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: The command-line cron implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly interact with IP blocking, which might allow remote attackers to bypass intended IP address restrictions by leveraging a configuration in which IP blocking was disabled to restore cron functionality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=761248 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=ade30ad3c420ce035a3d68287db701b70e806b3f - http://mood
?id=761248 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=ade30ad3c420ce035a3d68287db701b70e806b3f - http://moodle.org/mod/forum/discuss.php?d=191761
CVE ID: CVE-2011-4593 State: PUBLISHED Published: 2012-07-20T10:00:00 Last Updated: 2024-08-07T00:09:19.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle user/action_redir group messages, which allows remote authenticated users to discover e-mail addresses by visiting the messaging interface. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=761248 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=e94113a859015a4a80b9397957b8fc4044e2951f - http://moodle.org/mod/forum/discuss.php?d=191762
CVE ID: CVE-2011-4594 State: PUBLISHED Published: 2012-05-17T10:00:00Z Last Updated: 2024-08-07T00:09:19.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service (system crash) via crafted use of the sendmmsg system call, leading to an incorrect pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bc909d9ddbf7778371e36a651d6e4194b1cc7d4c - https://github.com/torvalds/linux/commit/bc909d9ddbf7778371e36a651d6e4194b1cc7d4c - https://bugzilla.redhat.com/show