Lucene search
K

161 matches found

Nuclei
Nuclei
added 2 days ago30 views

Moodle Jitsi Meet 2.7-2.8.3 - Cross-Site Scripting

Moodle Jitsi Meet 2.7 through 2.8.3 plugin contains a cross-site scripting vulnerability via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject JavaScript code to be run by the application. id: CVE-2021-26812 info: name: Moodle...

6.1CVSS6.3AI score0.18986EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2026/01/09 11:27 a.m.5 views

CVE-2021-33506

jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrictroomcreation is set by default. This can allow an attacker to circumvent conference moderation...

7.5CVSS6.8AI score0.00242EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/14 10:1 p.m.5 views

CVE-2025-64754

Jitsi Meet is an open source video conferencing application. A vulnerability present in versions prior to 2.0.10532 allows attackers to hijack the OAuth authentication window for Microsoft accounts. This is fixed in version 2.0.10532. No known workarounds are available...

6.9CVSS6.8AI score0.00159EPSS
Exploits0References1
NVD
NVD
added 2025/11/13 10:15 p.m.4 views

CVE-2025-64754

Jitsi Meet is an open source video conferencing application. A vulnerability present in versions prior to 2.0.10532 allows attackers to hijack the OAuth authentication window for Microsoft accounts. This is fixed in version 2.0.10532. No known workarounds are available...

6.9CVSS0.00159EPSS
Exploits0References1
CVE
CVE
added 2025/11/13 9:48 p.m.18 views

CVE-2025-64754

Jitsi Meet (open‑source video conferencing) contains a DOM/OAuth flow vulnerability affecting versions prior to 2.0.10532, where an attacker could hijack the Microsoft account OAuth authentication window. The issue is fixed in 2.0.10532. No workarounds are documented. Remediation: upgrade to 2.0....

6.9CVSS6.4AI score0.00159EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2025/11/13 9:48 p.m.4 views

CVE-2025-64754

Jitsi Meet is an open source video conferencing application. A vulnerability present in versions prior to 2.0.10532 allows attackers to hijack the OAuth authentication window for Microsoft accounts. This is fixed in version 2.0.10532. No known workarounds are available...

6.9CVSS6.9AI score0.00159EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/13 9:48 p.m.3 views

EUVD-2025-177182

Jitsi Meet is an open source video conferencing application. A vulnerability present in versions prior to 2.0.10532 allows attackers to hijack the OAuth authentication window for Microsoft accounts. This is fixed in version 2.0.10532. No known workarounds are available...

6.9CVSS6.3AI score0.00159EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/13 9:48 p.m.2 views

CVE-2025-64754 Jitsi Meet has DOM Redirect on Microsoft OAuth Flow

Jitsi Meet is an open source video conferencing application. A vulnerability present in versions prior to 2.0.10532 allows attackers to hijack the OAuth authentication window for Microsoft accounts. This is fixed in version 2.0.10532. No known workarounds are available...

6.9CVSS6.4AI score0.00159EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/13 9:48 p.m.6 views

CVE-2025-64754 Jitsi Meet has DOM Redirect on Microsoft OAuth Flow

Jitsi Meet is an open source video conferencing application. A vulnerability present in versions prior to 2.0.10532 allows attackers to hijack the OAuth authentication window for Microsoft accounts. This is fixed in version 2.0.10532. No known workarounds are available...

6.9CVSS0.00159EPSS
Exploits0References1
OSV
OSV
added 2025/11/13 9:48 p.m.3 views

CVE-2025-64754 Jitsi Meet has DOM Redirect on Microsoft OAuth Flow

Jitsi Meet is an open source video conferencing application. A vulnerability present in versions prior to 2.0.10532 allows attackers to hijack the OAuth authentication window for Microsoft accounts. This is fixed in version 2.0.10532. No known workarounds are available...

6.9CVSS5.8AI score0.00159EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.3 views

PT-2025-46918

Name of the Vulnerable Software and Affected Versions Jitsi Meet versions prior to 2.0.10532 Description Jitsi Meet is a video conferencing application. A flaw exists that allows attackers to hijack the OAuth authentication window for Microsoft accounts. This issue does not have any known...

6.9CVSS6.5AI score0.00159EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.2 views

Jitsi Meet 输入验证错误漏洞

Jitsi Meet is a set of open source projects from Jitsi Open Source. Enabling users to use and deploy a video conferencing platform with state-of-the-art video quality and features. An input validation error vulnerability exists in versions prior to Jitsi Meet 2.0.10532 that stems from a possible...

6.9CVSS6.5AI score0.00159EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-20205

Malware in sbrugna...

7.5CVSS7.6AI score0.00242EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-14702

Malware in sbrugna...

5.9CVSS5.9AI score0.00298EPSS
Exploits3References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-25586

Malware in sbrugna...

6.8CVSS6.3AI score0.00285EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-25592

Malware in sbrugna...

7.5CVSS7.5AI score0.0028EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-4218

Malware in sbrugna...

9.8CVSS9.2AI score0.00363EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-17718

Malware in sbrugna...

7.5CVSS7.5AI score0.00132EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-31267

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00146EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-28358

Malicious code in bioql PyPI...

6.5CVSS8.6AI score0.00084EPSS
Exploits0References1
Rows per page
Query Builder