19 matches found
CVE-2023-31065
Insufficient Session Expiration vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. An old session can be used by an attacker even after the user has been deleted or the password has been changed. Users are advised to upgrade to...
CVE-2022-31065
BigBlueButton is an open source web conferencing system. In affected versions an attacker can embed malicious JS in their username and have it executed on the victim's client. When a user receives a private chat from the attacker whose username contains malicious JavaScript, the script gets...
CVE-2025-31065
Missing Authorization vulnerability in themeton Rozario allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Rozario: from n/a through 1.4...
CVE-2025-31065
Missing Authorization vulnerability in themeton Rozario allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Rozario: from n/a through 1.4...
CVE-2025-31065
CVE-2025-31065 affects Rozario WordPress theme versions up to 1.4 (themeton Rozario). Public docs describe a Missing Authorization / Broken Access Control vulnerability due to incorrectly configured access control levels. CVSS v3.1 base score 5.3 (Medium). No confirmed public fix version is provi...
WordPress Rozario Theme <= 1.4 is vulnerable to Broken Access Control
Software Rozario Type Theme Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-31065 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 039f36178658 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...
CVE-2024-31065
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the City input field...
CVE-2024-31065
CVE-2024-31065 affects the Insurance Management System (version 1.0.0 and earlier). A Cross-Site Scripting (XSS) flaw in the City input field could allow a remote attacker to execute arbitrary code. Public sources indicate upgrading to a fixed version is recommended (no specific patched version i...
CVE-2024-31065
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the City input field...
CVE-2023-31065
creationtimestamp| type| source ---|---|--- 2023-05-22 20:30:33+00:00| published-proof-of-concept| https://t.me/cibsecurity/64558...
CVE-2023-31065
Apache InLong versions 1.4.0–1.6.0 are affected by an Insufficient Session Expiration vulnerability. An old session can be reused by an attacker even after the user is deleted or the password changed. Affected product: Apache InLong (1.4.0–1.6.0). Root cause: insufficient session expiration leadi...
CVE-2023-31065 Apache InLong: Insufficient Session Expiration in InLong
Insufficient Session Expiration vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. An old session can be used by an attacker even after the user has been deleted or the password has been changed. Users are advised to upgrade to...
CVE-2022-31065
creationtimestamp| type| source ---|---|--- 2022-06-28 00:35:21+00:00| seen| https://t.me/cibsecurity/45242...
CVE-2022-31065
BigBlueButton is an open source web conferencing system. In affected versions an attacker can embed malicious JS in their username and have it executed on the victim's client. When a user receives a private chat from the attacker whose username contains malicious JavaScript, the script gets...
CVE-2022-31065
CVE-2022-31065 affects BigBlueButton prior to versions 2.4.8 and 2.5.0. The vulnerability allows an attacker to embed malicious JavaScript in their username, which is executed on the victim’s client when the attacker sends a private chat or when a notification of the attacker leaving the session ...
CVE-2022-31065 Cross site scripting vulnerability for private chat in bigbluebutton
BigBlueButton is an open source web conferencing system. In affected versions an attacker can embed malicious JS in their username and have it executed on the victim's client. When a user receives a private chat from the attacker whose username contains malicious JavaScript, the script gets...
CVE-2021-31065
CVE-2021-31065 entry is rejected and not used per description.
Windows Media Encoder 9 wmex.dll ActiveX buffer overflow
Added: 09/09/2008 CVE: CVE-2008-3008 BID: 31065 OSVDB: 47962 Background Windows Media Encoder is a tool for content producers to capture and compress audio and video content. Windows Media Encoder 9 installs the wmex.dll ActiveX control. Problem A buffer overflow vulnerability in the wmex.dll...