| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-2239 | 6.4 |
Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connections via an XML external entity (XXE) injection attack, as demonstrated by reading config.php.
|
15-02-2024 - 03:19 | 24-11-2012 - 20:55 | |
| CVE-2012-4296 | 3.3 |
Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet.
|
30-10-2018 - 16:27 | 16-08-2012 - 10:38 | |
| CVE-2003-0143 | 10.0 |
The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name.
|
10-10-2017 - 01:30 | 18-03-2003 - 05:00 | |
| CVE-2012-3221 | 2.1 |
Unspecified vulnerability in the Oracle VM Virtual Box component in Oracle Virtualization 3.2, 4.0, and 4.1 allows local users to affect availability via unknown vectors related to VirtualBox Core. NOTE: The previous information was obtained from th
|
19-09-2017 - 01:35 | 17-10-2012 - 10:54 | |
| CVE-2012-4048 | 3.3 |
The PPP dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) via a crafted packet, as demonstrated by a usbmon
|
19-09-2017 - 01:35 | 24-07-2012 - 19:55 | |
| CVE-2012-4545 | 5.1 |
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenti
|
29-08-2017 - 01:32 | 03-01-2013 - 01:55 | |
| CVE-2012-2246 | 6.8 |
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php.
|
29-08-2017 - 01:31 | 24-11-2012 - 20:55 | |
| CVE-2012-6081 | 6.0 |
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to execute arbitrary cod
|
13-12-2013 - 05:08 | 03-01-2013 - 01:55 | |
| CVE-2012-2253 | 4.3 |
Cross-site scripting (XSS) vulnerability in group/members.php in Mahara 1.5.x before 1.5.7 and 1.6.x before 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
|
19-04-2013 - 03:21 | 24-11-2012 - 20:55 | |
| CVE-2012-6037 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4, and other versions including 1.2, allow remote attackers to inject arbitrary web script or HTML via a CSV header with "unknown fields," which are
|
08-02-2013 - 04:55 | 24-11-2012 - 20:55 | |
| CVE-2012-2243 | 4.3 |
Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web script or HTML by uploading an XML file with the xhtml extension, which is rendered inline as script. NOTE:
|
08-02-2013 - 04:50 | 24-11-2012 - 20:55 | |
| CVE-2012-2244 | 6.0 |
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav. NOTE: this can be exploited without authentication by leveraging CVE-2012-2243.
|
08-02-2013 - 04:50 | 24-11-2012 - 20:55 | |
| CVE-2012-2247 | 4.3 |
Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to artefact/file/ and a crafted SVG file.
|
08-02-2013 - 04:50 | 24-11-2012 - 20:55 | |
| CVE-2012-6495 | 6.0 |
Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated users with write permissions to overwrite arbitrary files
|
07-01-2013 - 05:00 | 03-01-2013 - 01:55 | |
| CVE-2012-6080 | 6.4 |
Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in MoinMoin 1.9.3 through 1.9.5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a file name.
|
03-01-2013 - 05:00 | 03-01-2013 - 01:55 |