CVE-2026-33266

Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings. The remember-me cookie encryption key is set to default value in openmeetings.properties and not being auto-rotated. In case OM admin hasn't changed the default encryption key, an attacker who has stolen a cookie from a...

GHSA-78CG-FC6C-W44W Apache OpenMeetings has an Improper Handling of Insufficient Privileges vulnerability

Sny registered user can query web service with their credentials and get files/sub-folders of any folder by ID metadata only NOT contents. Metadata includes id, type, name and some other field. Full list of fields get be checked at FileItemDTO object. This issue affects Apache OpenMeetings: from...

EUVD-2016-0797

Malware in sbrugna...

EUVD-2021-1375

Malware in sbrugna...

EUVD-2022-3877

Malicious code in bioql PyPI...

EUVD-2022-2693

Malicious code in bioql PyPI...

EUVD-2022-3709

Malicious code in bioql PyPI...

EUVD-2022-4021

Malicious code in bioql PyPI...

EUVD-2022-5799

Malicious code in bioql PyPI...

EUVD-2022-2032

Malicious code in bioql PyPI...

EUVD-2022-4494

Malicious code in bioql PyPI...

EUVD-2022-2090

Malicious code in bioql PyPI...

EUVD-2022-3635

Malicious code in bioql PyPI...

EUVD-2022-1957

Malicious code in bioql PyPI...

EUVD-2023-1625

Malicious code in bioql PyPI...

EUVD-2023-1579

Malicious code in bioql PyPI...

CVE-2024-54676

Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.1.0 before 8.0.0 Description: Default clustering instructions at https://openmeetings.apache.org/Clustering.html doesn't specify white/black lists for OpenJPA this leads to possible deserialisation of untrusted...

CVE-2023-29032

An attacker that has gained access to certain private information can use this to act as other user. Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 3.1.3 before 7.1.0...

CVE-2021-27576

If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0...

CVE-2020-13951

Attackers can use public NetTest web service of Apache OpenMeetings 4.0.0-5.0.0 to organize denial of service attack...