33 matches found
FACT
Forensic Artefact Collection Tool Overview FACT is a tool to collect, process and visualise forensic data from clusters of machines running in the cloud or on-premise. Deployment For a basic single-node deployment, we recommend using Docker and Docker Compose. First, read docker-compose.yaml for...
EUVD-2026-60546
Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated...
CVE-2026-42162
Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated...
CVE-2026-42162
Mahara before 25.04.5 and 26.04.0 allows artefact access to unauthorized users when file paths in pages are manipulated. CVSS 9.1 (Critical) reflects network-exploitable, no-authentication confidentiality and integrity impact. No exploitation evidence is available; affected users should upgrade t...
CVE-2026-42162
Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated...
PT-2026-76879
Name of the Vulnerable Software and Affected Versions Mahara versions prior to 25.04.5 Mahara versions prior to 26.04.0 Description An issue exists where artefacts may become accessible to unauthorized users if the file path to an artefact within a page is manipulated. Recommendations Update to...
CVE-2026-18749
The type=track branch authorises on ismycasetattach.case only and never checks VinceTrackAttachment.shared. A coordinator-uploaded case artefact that has NOT been marked shared is still retrievable by any case member who has or is sent its uuid — leaks not-yet-released coordinator material to...
CVE-2026-18749 CVE-2026-18749
The type=track branch authorises on ismycasetattach.case only and never checks VinceTrackAttachment.shared. A coordinator-uploaded case artefact that has NOT been marked shared is still retrievable by any case member who has or is sent its uuid — leaks not-yet-released coordinator material to...
CVE-2026-18749
The CVE-2026-18749 issue is a logic flaw in the track branch: authorization is performed via is_my_case(t_attach.case) and does not verify VinceTrackAttachment.shared. As a result, a coordinator-uploaded case artefact that has not been marked as shared remains retrievable by any case member who p...
PT-2026-71334
The type=track branch authorises on is my caset attach.case only and never checks VinceTrackAttachment.shared. A coordinator-uploaded case artefact that has NOT been marked shared is still retrievable by any case member who has or is sent its uuid — leaks not-yet-released coordinator material to...
EUVD-2011-1409
Malware in sbrugna...
CVE-2020-7907
In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections...
CVE-2009-2171
Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...
openSUSE Security Update : vlc (openSUSE-2021-691)
This update for vlc fixes the following issues : Update to version 3.0.13 : + Demux : - Adaptive: fix artefacts in HLS streams with wrong profiles/levels - Fix regression on some MP4 files for the audio track - Fix MPGA and ADTS probing in TS files - Fix Flac inside AVI files - Fix VP9/Webm...
jobs.artefact.com Cross Site Scripting vulnerability OBB-1411760
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-7907
In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections...
Design/Logic Flaw
In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections...
CVE-2020-7907
The CVE-2020-7907 issue affects the JetBrains Scala plugin prior to 2019.2.1, where artifact dependencies were resolved over unencrypted HTTP connections. This could allow an attacker to sniff network traffic and potentially obtain sensitive information. The vulnerability was addressed in 2019.2....
