14459 matches found
GHSA-5FGV-CVR8-XG48 Moodle vulnerable to Cross-site Scripting
Multiple cross-site scripting XSS vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the Login-As feature or 2 when the global search feature is enabled, unspecified global search forms in the...
CVE-2021-27770
The vulnerability was discovered within the “FaviconService”. The service takes a base64-encoded URL which is then requested by the webserver. We assume this service is used by the “meetings”-function where users can specify an external URL where the online meeting will take place...
CVE-2022-27172
A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted network request can lead to privileged operation execution. An attacker can send a sequence of requests to trigger this vulnerability...
Clearview AI banned from selling facial recognition data in the US
Clearview AI, a facial recognition software and surveillance company, is permanently banned from selling its faceprint database within the United States. The company also cannot sell its database to state and law enforcement entities in Illinois for five years. This is a historic win for the...
Security feature bypass
liblsquic/lsquicqenchdl.c in LiteSpeed QUIC aka LSQUIC before 3.1.0 mishandles MAXTABLECAPACITY...
dotnet: parsing HTML causes Denial of Service
A flaw was found in dotnet. The Microsoft Security Advisory describes the issue of the ASP.NET FormFeature.cs causing a denial of service when HTML forms are parsed...
dotnet: parsing HTML causes Denial of Service
A flaw was found in dotnet. The Microsoft Security Advisory describes the issue of the ASP.NET FormFeature.cs causing a denial of service when HTML forms are parsed...
dotnet: parsing HTML causes Denial of Service
A flaw was found in dotnet. The Microsoft Security Advisory describes the issue of the ASP.NET FormFeature.cs causing a denial of service when HTML forms are parsed...
kernel: cgroups v1 release_agent feature may allow privilege escalation
A vulnerability was found in the Linux kernel’s cgroupreleaseagentwrite in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 releaseagent feature to escalate privileges and bypass the namespace isolation unexpectedly...
CVE-2021-37851
Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o...
PT-2022-9748 · Unknown +1 · Amd System Management Unit +1
Name of the Vulnerable Software and Affected Versions: System Management Unit SMU affected versions not specified Description: The issue is related to insufficient checks in the System Management Unit SMU FeatureConfig, which may result in the reenabling of features. This could potentially lead t...
My Account Portal "Recovery email for case contact" Guide
Purpose The Recovery email for case contact is a feature within the My Account portal that allows each customer to assign an additional email address which will be CC'd on all emails sent by Veeam Support from a case. This additional email address does not have to be associated with the customer'...
CVE-2022-29127
BitLocker Security Feature Bypass Vulnerability...
CVE-2022-29107
Microsoft Office Security Feature Bypass Vulnerability...
CVE-2022-29107
Microsoft Office Security Feature Bypass Vulnerability...
CVE-2022-24466
Windows Hyper-V Security Feature Bypass Vulnerability...
CVE-2022-24466
Windows Hyper-V Security Feature Bypass Vulnerability...
Security feature bypass
Windows Hyper-V Security Feature Bypass Vulnerability...