BIT-MOODLE-2023-5541 Moodle: xss risk when using csv grade import method

The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content...

BIT-LIVEHELPERCHAT-2021-4179

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

BIT-DOTNET-SDK-2022-29145 .NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability...

BIT-DOTNET-2022-29145 .NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability...

BIT-DOTNET-2022-30184 .NET and Visual Studio Information Disclosure Vulnerability

.NET and Visual Studio Information Disclosure Vulnerability...

BIT-DOTNET-SDK-2022-34716 .NET Spoofing Vulnerability

.NET Spoofing Vulnerability...

BIT-APACHE-2020-11993

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of modhttp2 above "info" will mitigate this...

BIT-DOTNET-2022-34716 .NET Spoofing Vulnerability

.NET Spoofing Vulnerability...

BIT-DOTNET-SDK-2022-38013 .NET Core and Visual Studio Denial of Service Vulnerability

.NET Core and Visual Studio Denial of Service Vulnerability...

BIT-DOTNET-2022-38013 .NET Core and Visual Studio Denial of Service Vulnerability

.NET Core and Visual Studio Denial of Service Vulnerability...

BIT-LIVEHELPERCHAT-2022-0374

Cross-site Scripting XSS - Stored in Packagist remdex/livehelperchat prior to 3.93v...

BIT-DOTNET-2022-41032 NuGet Client Elevation of Privilege Vulnerability

NuGet Client Elevation of Privilege Vulnerability...

BIT-DOTNET-SDK-2023-21538 .NET Denial of Service Vulnerability

.NET Denial of Service Vulnerability...

BIT-DOTNET-2023-21538 .NET Denial of Service Vulnerability

.NET Denial of Service Vulnerability...

BIT-LIMESURVEY-2020-23710

Cross Site Scripting XSS vulneraiblity in LimeSurvey 4.2.5 on textbox via the Notifications & data feature...

BIT-APACHE-2020-35452 mod_auth_digest possible stack overflow by one nul byte

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in modauthdigest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation option might make i...

BIT-MOODLE-2023-5551 Moodle: forum summary report shows students from other groups when in separate groups mode

Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups...

BIT-DOTNET-2023-24895 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...

BIT-LUA-2020-24371

lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage...

BIT-APACHE-2020-9490

Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability f...