Total
8083 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2012-2724 | 1 Md-systems | 1 Simplenews | 2024-11-21 | 5.0 MEDIUM | 5.3 MEDIUM |
The Simplenews module 6.x-1.x before 6.x-1.4, 6.x-2.x before 6.x-2.0-alpha4, and 7.x-1.x before 7.x-1.0-rc1 for Drupal reveals the email addresses of new mailing list subscribers when confirmation is required, which allows remote attackers to obtain sensitive information via the confirmation page. | |||||
CVE-2012-1994 | 1 Hp | 1 Systems Insight Manager | 2024-11-21 | 2.7 LOW | 5.7 MEDIUM |
HP Systems Insight Manager before 7.0 allows a remote user on adjacent network to access information | |||||
CVE-2012-1169 | 2 Fedoraproject, Moodle | 2 Fedora, Moodle | 2024-11-21 | 5.0 MEDIUM | 5.3 MEDIUM |
Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs. | |||||
CVE-2012-1161 | 2 Fedoraproject, Moodle | 2 Fedora, Moodle | 2024-11-21 | 4.0 MEDIUM | 4.3 MEDIUM |
Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results | |||||
CVE-2012-1159 | 2 Fedoraproject, Moodle | 2 Fedora, Moodle | 2024-11-21 | 4.0 MEDIUM | 4.3 MEDIUM |
Moodle before 2.2.2: Overview report allows users to see hidden courses | |||||
CVE-2012-1158 | 2 Fedoraproject, Moodle | 2 Fedora, Moodle | 2024-11-21 | 4.0 MEDIUM | 4.3 MEDIUM |
Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export | |||||
CVE-2012-1155 | 4 Debian, Fedoraproject, Moodle and 1 more | 4 Debian Linux, Fedora, Moodle and 1 more | 2024-11-21 | 5.0 MEDIUM | 7.5 HIGH |
Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to | |||||
CVE-2012-1105 | 3 Apereo, Debian, Fedoraproject | 3 Phpcas, Debian Linux, Fedora | 2024-11-21 | 2.1 LOW | 5.5 MEDIUM |
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner. | |||||
CVE-2012-1094 | 1 Redhat | 1 Jboss Application Server | 2024-11-21 | 5.0 MEDIUM | 7.5 HIGH |
JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be exposed. | |||||
CVE-2012-0844 | 2 Debian, Netsurf-browser | 2 Debian Linux, Netsurf | 2024-11-21 | 2.1 LOW | 5.5 MEDIUM |
Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar. | |||||
CVE-2012-0843 | 2 Debian, Uzbl | 2 Debian Linux, Uzbl | 2024-11-21 | 2.1 LOW | 5.5 MEDIUM |
uzbl: Information disclosure via world-readable cookies storage file | |||||
CVE-2012-0842 | 2 Debian, Suckless | 2 Debian Linux, Surf | 2024-11-21 | 2.1 LOW | 5.5 MEDIUM |
surf: cookie jar has read access from other local user | |||||
CVE-2012-0433 | 1 Crowbar Project | 1 Crowbar | 2024-11-21 | 2.1 LOW | 3.3 LOW |
The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data with insecure permissions, allowing local users to read confidential data. | |||||
CVE-2012-0046 | 1 Mediawiki | 1 Mediawiki | 2024-11-21 | 5.0 MEDIUM | 7.5 HIGH |
mediawiki allows deleted text to be exposed | |||||
CVE-2011-5282 | 1 Mirc | 1 Mirc | 2024-11-21 | 5.0 MEDIUM | 5.3 MEDIUM |
mIRC prior to 7.22 has a message leak because chopping of outbound messages is mishandled. | |||||
CVE-2011-4972 | 1 Ckeditor | 1 Ckeditor | 2024-11-21 | 5.0 MEDIUM | 7.5 HIGH |
hook_file_download in the CKEditor module 7.x-1.4 for Drupal does not properly restrict access to private files, which allows remote attackers to read private files via a direct request. | |||||
CVE-2011-4937 | 1 Joomla | 1 Joomla\! | 2024-11-21 | 5.0 MEDIUM | 7.5 HIGH |
Joomla! 1.7.1 has core information disclosure due to inadequate error checking. | |||||
CVE-2011-4919 | 1 Mpack Project | 1 Mpack | 2024-11-21 | 5.0 MEDIUM | 7.5 HIGH |
mpack 1.6 has information disclosure via eavesdropping on mails sent by other users | |||||
CVE-2011-4916 | 1 Linux | 1 Linux Kernel | 2024-11-21 | 2.1 LOW | 5.5 MEDIUM |
Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ and /dev/tty*. | |||||
CVE-2011-4915 | 3 Canonical, Debian, Linux | 3 Ubuntu Linux, Debian Linux, Linux Kernel | 2024-11-21 | 2.1 LOW | 5.5 MEDIUM |
fs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /proc/interrupts. |