Vulnerabilities fixed in Microsoft Office products

Microsoft has fixed vulnerabilities in Office products. A malicious party can exploit the vulnerabilities to execute arbitrary code with user privileges and spoofing. Below is a summary of the various vulnerabilities described by component and the impact. Microsoft Office SharePoint:...

CVE-2021-27509

In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code...

CVE-2021-27509

In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code...

CVE-2021-27509

In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code...

CVE-2021-27509

CVE-2021-27509 affects Visualware MyConnection Server prior to version 11.0b build 5382. The issue is that each published report is not associated with its own access code, which can lead to unintended access to reports via improper linkage. NVD CVSS data indicate CVSSv3.1 base score 7.5 (HIGH) w...

PT-2021-17485

Name of the Vulnerable Software and Affected Versions Visualware MyConnection Server versions prior to 11.0b build 5382 Description The issue arises because each published report is not associated with its own access code. Recommendations For versions prior to 11.0b build 5382, update to version...

BigBlueButton Conference Access Code Brute Force Attack Vulnerability

BigBlueButton is BigBlueButton community of a set of open source Web conferencing system . A conference access code brute force attack vulnerability exists in BigBlueButton 2.2.29 and earlier versions. The vulnerability stems from the ability to enter an unlimited amount of code for a conference...

CVE-2020-29042

An issue was discovered in BigBlueButton through 2.2.29. A brute-force attack may occur because an unlimited number of codes can be entered for a meeting that is protected by an access code...

CVE-2020-29042

An issue was discovered in BigBlueButton through 2.2.29. A brute-force attack may occur because an unlimited number of codes can be entered for a meeting that is protected by an access code...

Code injection

An issue was discovered in BigBlueButton through 2.2.29. A brute-force attack may occur because an unlimited number of codes can be entered for a meeting that is protected by an access code...

CVE-2020-29042

An issue was discovered in BigBlueButton through 2.2.29. A brute-force attack may occur because an unlimited number of codes can be entered for a meeting that is protected by an access code...

CVE-2020-29042

CVE-2020-29042 : The issue affects BigBlueButton up to version 2.2.29, where an unlimited number of access codes can be entered for a meeting, enabling brute-force attempts to bypass access protection. The impact is potential unauthorized meeting access; the description does not specify whether e...

BigBlueButton 安全漏洞

BigBlueButton is BigBlueButton community of a set of open source Web conferencing system . A conference access code brute force attack vulnerability exists in BigBlueButton 2.2.29 and earlier versions. The vulnerability stems from the ability to enter an unlimited amount of code for a conference...

PT-2020-17084

Name of the Vulnerable Software and Affected Versions BigBlueButton versions through 2.2.29 Description An issue was discovered that allows a brute-force attack to occur because an unlimited number of codes can be entered for a meeting that is protected by an access code. Recommendations For...

CVE-2020-29042: Improper Restriction of Excessive Authentication Attempts

An issue was discovered in BigBlueButton through 2.2.29. A brute-force attack may occur because an unlimited number of codes can be entered for a meeting that is protected by an access code...

BigBlueButton 2.2.29 Brute Force

Title: BigBlueButton Meeting Access Code Brute Force Vulnerability Google Dork: N/A Date: 24.11.2020 Author: Seccops https://seccops.com Vendor Homepage: bigbluebutton.org Version: 2.2.29 and previous versions CVE: CVE-2020-29042 === Summary === An issue was discovered in BigBlueButton through...

CVE-2020-7530

A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which allows improper access to executable code folders...

CVE-2020-15001

CVE-2020-15001 affects Yubico YubiKey 5 NFC, specifically firmware versions 5.0.0–5.2.6 and 5.3.0–5.3.1. The OTP application allows optional access codes on OTP slots, but the access code is not checked when updating NFC-specific OTP configurations. As a result, an attacker could read configured ...

Design/Logic Flaw

The extractgroupiconcursorresource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service process crash and execute arbitrary code via a crafted executable...

LifeOmic: open redirect while login at https://apps.dev.jupiterone.io can leak access code.

LifeOmic Comments @base64 found an open redirect bug in our auth flow. After review, we determined that due to design the exploit would only work in our dev environment. Though we determined mitigating controls were already in place for this attack in prod, we valued @base64 's efforts and awarde...