NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
46607  CVE-2012-5479  The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to upload and execute files via a modified Portfolio API callback.    6.5  Medium  2017-01-19  2013-06-20  View
46863  CVE-2012-5827  Joomla! 2.5.x before 2.5.8 and 3.0.x before 3.0.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors involving "Inadequate protection."    4.3  Medium  2017-01-19  2012-11-19  View
47375  CVE-2009-0026  Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) search.jsp or (2) swr.jsp.    4.3  Medium  2017-01-07  2011-03-07  View
48143  CVE-2009-0828  QuoteBook stores quotes.inc under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information, including user credentials, via a direct request.    Medium  2017-01-07  2009-03-21  View
48399  CVE-2009-1089  Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read arbitrary files via a base64-encoded absolute path in the filename parameter.    Medium  2017-01-07  2012-10-24  View

Page 569 of 17672, showing 5 records out of 88360 total, starting on record 2841, ending on 2845

Actions