17 matches found
EUVD-2021-30078
Malicious code in bioql PyPI...
Desire2Learn Learning Management System Access Control Error Vulnerability
An access control error vulnerability exists in Desire2Learn Learning Management System, a learning management system from Desire2Learn Canada, due to improper access controls. A remote attacker could disable the "Disable Right Click Control"...
CVE-2021-43129
A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz...
CVE-2021-43129
A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz...
Design/Logic Flaw
A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz...
CVE-2021-43129
A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz...
CVE-2021-43129
Desire2Learn/D2L Brightspace LMS quizzing feature contains an access-control bypass for the Disable Right Click setting. Affected component: quizzing (Disable Right Click) in the LMS; root cause is an access-control flaw that allows a remote user to bypass the protection and gain copy/print capab...
CVE-2021-43129: Undefined Security Weakness
A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz...
Desire2Learn Learning Management System 安全漏洞
An access control error vulnerability exists in Desire2Learn Learning Management System, a learning management system from Desire2Learn Canada, due to improper access controls. A remote attacker could disable the "Disable Right Click Control"...
PT-2022-11791 · Desire2Learn · Desire2Learn/D2L Learning Management System +1
Name of the Vulnerable Software and Affected Versions: Desire2Learn/D2L Learning Management System LMS version 20.21.7 Description: A bypass exists in the quizzing feature of Desire2Learn/D2L Brightspace, allowing a quiz-taker to access print and copy functionality via the browser's right click...
access.desire2learn.com XSS vulnerability
Vulnerable URL: https://access.desire2learn.com/frame.asp?Pg=javascript:alert%28%27OPENBUGBOUNTY%27%29 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
CVE-2014-7483
The Desire2Learn FUSION 2014 aka com.desire2learn.fusion2012 application 4.0.729.1748 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Desire2Learn FUSION 2014 aka com.desire2learn.fusion2012 application 4.0.729.1748 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7483
The Desire2Learn FUSION 2014 aka com.desire2learn.fusion2012 application 4.0.729.1748 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7483
CVE-2014-7483 affects the Desire2Learn FUSION 2014 Android app (com.desire2learn.fusion2012) version 4.0.729.1748. The root cause is that the client does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...
PT-2014-8031
Name of the Vulnerable Software and Affected Versions Desire2Learn FUSION 2014 application version 4.0.729.1748 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificat...
CVE-2014-7483: Undefined Security Weakness
The Desire2Learn FUSION 2014 aka com.desire2learn.fusion2012 application 4.0.729.1748 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...