Linux Distros Unpatched Vulnerability : CVE-2015-6816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ganglia-web before 3.7.1 allows remote attackers to bypass authentication. CVE-2015-6816 Note that Nessus relies on the presence of the package as reported by t...

OpenZiti Console 代码问题漏洞

OpenZiti Console is an OpenZiti open source web interface for the management of an OpenZiti network. A code issue vulnerability exists in OpenZiti Console versions prior to 3.7.1 that stems from unauthenticated access to an endpoint and could lead to server-side request forgery...

AOMedia Buffer Error Vulnerability

AOMedia is a next-generation open source digital media technology for everyone from the AOMedia organization. AOMedia versions prior to v3.7.1 suffer from a buffer error vulnerability that stems from the fact that increasing the resolution of a video frame while performing multi-threaded encoding...

CVE-2023-4800

The DoLogin Security WordPress plugin before 3.7.1 does not restrict the access of a widget that shows the IPs of failed logins to low privileged users...

Bolt CMS Cross-Site Scripting Vulnerability (CNVD-2020-35955)

Bolt CMS is a PHP-based open source content management system for the Bolt community. A cross-site scripting vulnerability exists in Bolt CMS versions prior to 3.7.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this...

CVE-2019-20104

The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML Entity Expansion vulnerability...

openITCOCKPIT Code Injection Vulnerability

openITCOCKPIT is a set of open source system monitoring tools . A code injection vulnerability exists in versions of openITCOCKPIT prior to 3.7.1. The vulnerability arises from external input data to construct code segments in the process , the network system or product is not properly filtered f...

openITCOCKPIT Cross-Site Request Forgery Vulnerability

openITCOCKPIT is a set of open source system monitoring tools . A cross-site request forgery vulnerability exists in versions prior to openITCOCKPIT 3.7.1. An attacker can exploit this vulnerability to send unintended requests to the server via an affected client...

UBUNTU-CVE-2019-10189

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assignment...