GHSA-X29X-QWVX-FXR2 Moodle BigBlueButton web service leaks meeting joining information

Insufficient capability checks meant it was possible for users to gain access to BigBlueButton join URLs they did not have permission to access...

Moodle BigBlueButton web service leaks meeting joining information

Insufficient capability checks meant it was possible for users to gain access to BigBlueButton join URLs they did not have permission to access...

CVE-2024-38273 moodle: BigBlueButton web service leaks meeting joining information to users who should not have access

Insufficient capability checks meant it was possible for users to gain access to BigBlueButton join URLs they did not have permission to access...

CVE-2024-22296

Missing Authorization vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.28...

CVE-2024-22296

Missing Authorization vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.28...

CVE-2024-22296 WordPress 12 Step Meeting List plugin <= 3.14.28 - Broken Access Control vulnerability

Missing Authorization vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.28...

CVE-2024-22296 WordPress 12 Step Meeting List plugin <= 3.14.28 - Broken Access Control vulnerability

Missing Authorization vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.28...

CVE-2024-33850

Pexip Infinity before 34.1 has Improper Access Control for persons in a waiting room. They can see the conference roster list, and perform certain actions that should not be allowed before they are admitted to the meeting...

PT-2024-19317 · Unknown · Code For Recovery 12 Step Meeting List

Name of the Vulnerable Software and Affected Versions: Code for Recovery 12 Step Meeting List versions 3.14.28 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Code for Recovery 12 Step Meeting List. Recommendations: For versions 3.14.28 and earlier,...

WordPress plugin 12 Step Meeting List security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

Pexip Infinity Security Vulnerability

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. The product provides high quality and secure cloud conferencing capabilities. A security vulnerability exists in versions prior to Pexip...

CVE-2024-35693

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list.This issue affects 12 Step Meeting List: from n/a through = 3.14.33...

CVE-2024-35693

CVE-2024-35693 affects WordPress plugin “12 Step Meeting List” (versions

WordPress plugin 12 Step Meeting List Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-26641

Name of the Vulnerable Software and Affected Versions Code for Recovery 12 Step Meeting List versions from n/a through 3.14.33 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS...

WordPress 12 Step Meeting List plugin <= 3.14.33 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by alien8 Patchstack Alliance in WordPress Plugin 12 Step Meeting List versions = 3.14.33...

PT-2024-58: Insecure password storage in Yealink Meeting Server (YMS)

The vulnerability was identified in Yealink Meeting Server YMS, versions V26.0.0.67. The discovered vulnerability allows an attacker to obtain static key data, allowing user passwords to be decrypted. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 06.06.2024...

VulnCheck KEV: CVE-2024-35693

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list.This issue affects 12 Step Meeting List: from n/a through = 3.14.33...

WordPress 12 Step Meeting List Plugin <= 3.14.33 is vulnerable to Cross Site Scripting (XSS)

Software 12 Step Meeting List Type Plugin Vulnerable versions = 3.14.33 Fixed in 3.14.34 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35693 Patch priority Medium CVSS severity Medium 7.1 Developer Code for Recovery PSID 8149c3967f73 Credits alien8 Required...

PT-2024-57: Information exposure in Yealink Meeting Server (YMS)

The vulnerability was identified in Yealink Meeting Server YMS, versions V26.0.0.67. The discovered vulnerability allows an attacker to access sensitive information, including user credentials. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 06.06.2024 Recommendations...