Lucene search
+L

8 matches found

EUVD
EUVD
added 2026/08/25 9:00 a.m.5 views

EUVD-2026-65350

The extension's indexer passed every field value returned by content object rendering through PHP's unserialize function when transferring multi-value data for the SOLRCLASSIFICATION, SOLRMULTIVALUE and SOLRRELATION content object types, rather than a safe format. If user-generated content saved ...

7.7CVSS5.5AI score0.00247EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/25 9:00 a.m.10 views

CVE-2026-56095 Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

The extension's indexer passed every field value returned by content object rendering through PHP's unserialize function when transferring multi-value data for the SOLRCLASSIFICATION, SOLRMULTIVALUE and SOLRRELATION content object types, rather than a safe format. If user-generated content saved ...

7.7CVSS0.00247EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/29 7:16 a.m.19 views

CVE-2026-63230

A pre-authentication error-based SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to read sensitive database contents, including personally identifiable information, credentials, and valid JWT tokens that may enable account takeover, via the SCORM report endpoint...

9.1CVSS0.00296EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/17 12:00 a.m.10 views

Beakon Learning Management System Sharable Content Object Reference Model 安全漏洞

Beakon Learning Management System Sharable Content Object Reference Model is a learning management system from Beakon Australia. A security vulnerability exists in Beakon Learning Management System Sharable Content Object Reference Model version V.5.4.3, which stems from mishandling of URL...

5.4CVSS5.9AI score0.00257EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/09/07 10:54 p.m.36 views

Content object state fetch functions open to SQL injection

Impact This Security Update is about a vulnerability in eZ Publish Legacy. The content object state code could be vulnerable to SQL injection. There is no known exploit, but one might be possible. If you use Legacy in any way, we strongly recommend that you install this update as soon as possible...

1.8AI score
SaveExploits0References4Affected Software1
OSV
OSV
added 2019/01/24 4:29 a.m.6 views

CVE-2018-17670

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

8.8CVSS6.2AI score0.03918EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:00 a.m.11 views

The vulnerability of the Moodle learning management system allows a hacker to bypass existing access restrictions.

The vulnerability of the modscorm component in the Moodle learning management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass existing access restrictions and gain access to SCORM content...

4CVSS5.8AI score0.01306EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2014/01/09 12:00 a.m.41 views

TYPO3 Multiple Vulnerabilities (Dec 2010)

TYPO3 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; ifdescription...

6.8CVSS6.3AI score0.03117EPSS
SaveExploits2References3
Rows per page
Query Builder