Vulnerabilities > Fedoraproject

DATE CVE VULNERABILITY TITLE RISK
2019-11-14 CVE-2012-1161 Information Exposure vulnerability in multiple products
Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results
network
low complexity
moodle fedoraproject CWE-200
4.3
2019-11-14 CVE-2012-1160 Incorrect Permission Assignment for Critical Resource vulnerability in multiple products
Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php
network
low complexity
moodle fedoraproject CWE-732
2.7
2019-11-14 CVE-2012-1159 Information Exposure vulnerability in multiple products
Moodle before 2.2.2: Overview report allows users to see hidden courses
network
low complexity
moodle fedoraproject CWE-200
4.3
2019-11-14 CVE-2012-1158 Information Exposure vulnerability in multiple products
Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export
network
low complexity
moodle fedoraproject CWE-200
4.3
2019-11-14 CVE-2012-1157 Incorrect Default Permissions vulnerability in multiple products
Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default
network
low complexity
moodle fedoraproject CWE-276
4.3
2019-11-14 CVE-2012-1168 Improper Input Validation vulnerability in multiple products
Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.
network
low complexity
moodle fedoraproject redhat CWE-20
8.2
2019-11-14 CVE-2012-1156 Information Exposure Through Log Files vulnerability in multiple products
Moodle before 2.2.2 has users' private files included in course backups
network
low complexity
moodle fedoraproject redhat CWE-532
7.5
2019-11-14 CVE-2012-1155 Information Exposure vulnerability in multiple products
Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to
network
low complexity
moodle fedoraproject redhat debian CWE-200
7.5
2019-11-13 CVE-2010-4661 Unrestricted Upload of File with Dangerous Type vulnerability in multiple products
udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.
7.8
2019-11-13 CVE-2019-18837 Link Following vulnerability in multiple products
An issue was discovered in crun before 0.10.5.
network
low complexity
crun-project fedoraproject CWE-59
8.6