patrick@puiterwijk.org
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS patrick@puiterwijk.org
03
assessed vulnerabilities (187)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-114460US | — | — | ||
A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during… | ||||
| CVE-2026-114459US | — | — | ||
A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenti… | ||||
| CVE-2026-114458US | — | — | ||
A flaw was found in mod_qos. An unauthenticated remote attacker can cause a Denial of Service (DoS) by maintaining numerous concurrent low-rate connections to a target server. When… | ||||
| CVE-2026-114457US | — | — | ||
A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS) by sending a specially crafted JSON request when JSON body filtering is enable… | ||||
| CVE-2026-103680US | medium6.5 | — | ||
A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numbered backup suffixes for duplicate filenames. When numbered… | ||||
| CVE-2026-103679US | — | — | ||
A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple… | ||||
| CVE-2026-103678US | high8.1 | — | ||
A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format (RTF) data. Because the applicat… | ||||
| CVE-2026-103431US | — | — | ||
colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local use… | ||||
| CVE-2026-102588US | — | — | ||
A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an authenticated user with grade management pe… | ||||
| CVE-2026-102587US | — | — | ||
A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An authorized user with manager privileges can filter user lis… | ||||
| CVE-2026-102586US | medium6.1 | — | ||
A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting (XSS) attack. By convi… | ||||
| CVE-2026-102585US | — | — | ||
A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the selected group actually belongs to that… | ||||
| CVE-2026-102584US | — | — | ||
A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required per… | ||||
| CVE-2026-102583US | — | — | ||
A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authenticated user to invoke… | ||||
| CVE-2026-102582US | medium4.3 | — | ||
A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing users with enrolment permissions… | ||||
| CVE-2026-102581US | medium5.4 | — | ||
A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting (XSS) vulnerability. An attacker can inject… | ||||
| CVE-2026-102580US | medium4.3 | — | ||
A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Builder component, allowing arbitrary class instantiation… | ||||
| CVE-2026-102579US | — | — | ||
A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access profile information of other students enrolled in the s… | ||||
| CVE-2026-102578US | high8.8 | — | ||
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL (… | ||||
| CVE-2026-102577US | — | — | ||
A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated remote user to bypass blocked-h… | ||||