500 matches found
UBUNTU-CVE-2022-40315
A limited SQL injection risk was identified in the "browse list of users" site administration page...
CVE-2022-40315
A limited SQL injection risk was identified in the "browse list of users" site administration page...
CVE-2022-40315
A limited SQL injection risk was identified in the "browse list of users" site administration page...
CVE-2022-40315
CVE-2022-40315 corresponds to a limited SQL injection vulnerability in Moodle’s admin page that lists users (browse list of users). The issue is described with a high severity (CVSS 3.1 base score 9.8, critical) and is relevant to Moodle installations where the admin interface exposes this browse...
Moodle SQL注入漏洞
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A SQL injection vulnerability exists in Moodle that stems from a limited risk of SQL injection in the Browse User List site. The...
CVE-2022-33311
Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Address Book via unspecified vectors...
CVE-2022-33311
Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Address Book via unspecified vectors...
CVE-2022-32283
Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Cabinet via unspecified vectors...
CVE-2022-29891
Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Custom App via unspecified vectors...
CVE-2022-32283
Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Cabinet via unspecified vectors...
CVE-2022-32283
Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Cabinet via unspecified vectors...
CVE-2022-25986
Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Scheduler...
CVE-2022-29891
Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Custom App via unspecified vectors...
CVE-2022-25986
Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Scheduler...
Authentication flaw
Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Scheduler...
CVE-2022-33311
Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Address Book via unspecified vectors...
CVE-2022-33311
Cybozu Office contains a browse restriction bypass in the Address Book for versions 10.0.0–10.8.5, allowing a remote authenticated attacker to obtain Address Book data via unspecified vectors. The issue is documented across multiple sources (e.g., NVD/JVN/Red Hat) with consistent impact: data dis...
CVE-2022-32283
CVE-2022-32283 affects Cybozu Office (Cabinet component) from version 10.0.0 through 10.8.5. It is described as a browse restriction bypass vulnerability (CWE-284) that allows a remote authenticated attacker to obtain Cabinet data via unspecified vectors. The issue is tied to Cabinet access contr...