NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
46607 | CVE-2012-5479 | The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to upload and execute files via a modified Portfolio API callback. | 2 | 6.5 | Medium | 2017-01-19 | 2013-06-20 | View | |
46863 | CVE-2012-5827 | Joomla! 2.5.x before 2.5.8 and 3.0.x before 3.0.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors involving "Inadequate protection." | 2 | 4.3 | Medium | 2017-01-19 | 2012-11-19 | View | |
47375 | CVE-2009-0026 | Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) search.jsp or (2) swr.jsp. | 2 | 4.3 | Medium | 2017-01-07 | 2011-03-07 | View | |
48143 | CVE-2009-0828 | QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information, including user credentials, via a direct request. | 2 | 5 | Medium | 2017-01-07 | 2009-03-21 | View | |
48399 | CVE-2009-1089 | Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read arbitrary files via a base64-encoded absolute path in the filename parameter. | 2 | 5 | Medium | 2017-01-07 | 2012-10-24 | View |
Page 569 of 17672, showing 5 records out of 88360 total, starting on record 2841, ending on 2845