13 matches found
EUVD-2021-30078
Malicious code in bioql PyPI...
Desire2Learn Learning Management System Access Control Error Vulnerability
An access control error vulnerability exists in Desire2Learn Learning Management System, a learning management system from Desire2Learn Canada, due to improper access controls. A remote attacker could disable the "Disable Right Click Control"...
CVE-2021-43129
A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz...
Design/Logic Flaw
A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz...
CVE-2021-43129
A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a quiz-taker to access print and copy functionality via the browser’s right click menu even when “Disable Right Click” is enabled on the quiz...
CVE-2021-43129
Desire2Learn/D2L Brightspace LMS quizzing feature contains an access-control bypass for the Disable Right Click setting. Affected component: quizzing (Disable Right Click) in the LMS; root cause is an access-control flaw that allows a remote user to bypass the protection and gain copy/print capab...
PT-2022-11791 · Desire2Learn · Desire2Learn/D2L Learning Management System +1
Name of the Vulnerable Software and Affected Versions: Desire2Learn/D2L Learning Management System LMS version 20.21.7 Description: A bypass exists in the quizzing feature of Desire2Learn/D2L Brightspace, allowing a quiz-taker to access print and copy functionality via the browser's right click...
Desire2Learn Learning Management System 安全漏洞
An access control error vulnerability exists in Desire2Learn Learning Management System, a learning management system from Desire2Learn Canada, due to improper access controls. A remote attacker could disable the "Disable Right Click Control"...
access.desire2learn.com XSS vulnerability
Vulnerable URL: https://access.desire2learn.com/frame.asp?Pg=javascript:alert%28%27OPENBUGBOUNTY%27%29 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
CVE-2014-7483
The Desire2Learn FUSION 2014 aka com.desire2learn.fusion2012 application 4.0.729.1748 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Desire2Learn FUSION 2014 aka com.desire2learn.fusion2012 application 4.0.729.1748 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7483
The Desire2Learn FUSION 2014 aka com.desire2learn.fusion2012 application 4.0.729.1748 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7483
CVE-2014-7483 affects the Desire2Learn FUSION 2014 Android app (com.desire2learn.fusion2012) version 4.0.729.1748. The root cause is that the client does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...