10246 matches found
CVE-2023-5539
The provided documents confirm a remote code execution risk in the Moodle Lesson activity (CVE-2023-5539). Reported as an authenticated issue, by default accessible to teachers/managers, it indicates potential RCE via the Lesson activity. No concrete technical exploit vector, vulnerable version r...
CVE-2023-5539 Moodle: authenticated remote code execution risk in lesson
A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...
CVE-2023-5539 Moodle: authenticated remote code execution risk in lesson
A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...
MAL-2023-8488 Malicious code in resume-sourcing-nodejs-client-credentials (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63bf870804a0bc378ff856c7e19723430ff40b603bebd5c485f101b20ae69e12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2023-32164 · Moodle · Moodle
Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A remote code execution risk was identified in the IMSCP activity. By default, this was only available to teachers and managers. Recommendations: At the moment, there is no information about...
PT-2023-6940 · Moodle · Moodle
Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A remote code execution risk was identified in the Lesson activity of Moodle. This issue is related to incorrect code generation management. By default, the Lesson activity was only availabl...
Malicious code in safe-place (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b80cbcb24e4f1807ee06fd72f2b7a227e474627d391ec40635927294aab3a8d6 The OpenSSF Package Analysis project identified 'safe-place' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-8482 Malicious code in devportal-aws-lambda (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 586c4231b2500b2299bb0a25b45ebdeaec062531b446c12f7547ab351c1b616a The OpenSSF Package Analysis project identified 'devportal-aws-lambda' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...
CVE-2023-46763
Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause background apps to start maliciously...
Design/Logic Flaw
Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause background apps to start maliciously...
PT-2023-30195 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns an unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause background apps to...
CVE-2022-45350
Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple History – user activity log, audit tool.This issue affects Simple History – user activity log, audit tool: from n/a through 3.3.1...
Input validation
Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple History – user activity log, audit tool.This issue affects Simple History – user activity log, audit tool: from n/a through 3.3.1...
CVE-2022-45350
CVE-2022-45350 affects WordPress Simple History plugin (versions
CVE-2022-45350 WordPress Simple History Plugin <= 3.3.1 is vulnerable to CSV Injection
Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple History – user activity log, audit tool.This issue affects Simple History – user activity log, audit tool: from n/a through 3.3.1...
CVE-2022-45350 WordPress Simple History Plugin <= 3.3.1 is vulnerable to CSV Injection
Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple History – user activity log, audit tool.This issue affects Simple History – user activity log, audit tool: from n/a through 3.3.1...
MAL-2023-8471 Malicious code in @klapp-shopping-search-v2/data-types-public (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0e8d176a82dfeb7aa75dd056e4e66c0e63b0f138dcf969a3b0399a60da3bad1 The OpenSSF Package Analysis project identified '@klapp-shopping-search-v2/data-types-public' @ 0.0.0 npm as malicious. It is considered malicio...
CVE-2023-42531
Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background...
Moderate: Red Hat Security Advisory: sysstat security and bug fix update
An update for sysstat is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...