Lucene search
+L

692 matches found

Cvelist
Cvelist
•added 2025/04/25 2:43 p.m.•30 views

CVE-2025-3641 Moodle: authenticated remote code execution risk in the moodle lms dropbox repository

A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled...

8.8CVSS0.00984EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/04/25 2:43 p.m.•9 views

CVE-2025-3641 Moodle: authenticated remote code execution risk in the moodle lms dropbox repository

A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled...

8.8CVSS8AI score0.00984EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/25 12:00 a.m.•0 views

CVE-2025-3641: Improper Control of Generation of Code

A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled...

8.8CVSS6.8AI score0.00984EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/23 12:00 a.m.•19 views

PT-2025-17625 · Dropbox · Dropbox

Name of the Vulnerable Software and Affected Versions: Dropbox affected versions not specified Description: The issue concerns an authentication bypass in Dropbox. No specific details about the technical aspects of the issue, such as API endpoints, vulnerable parameters, or function names, are...

6.6AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/04/22 1:27 p.m.•29 views

CVE-2025-3641

A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled...

8.8CVSS8.1AI score0.00984EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/04/22 12:00 a.m.•9 views

PT-2025-17916

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A flaw was found in Moodle, specifically a remote code execution risk in the Moodle LMS Dropbox repository. This risk is only available to teachers and managers on sites with the Dropbox...

8.8CVSS7.8AI score0.00984EPSS
SaveExploits0References20
CNNVD
CNNVD
•added 2025/04/22 12:00 a.m.•12 views

Moodle 代码注入漏洞

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from a code injection vulnerability that stems from a security issue in the Moodle LMS Dropbox repository that...

8.8CVSS7.7AI score0.00984EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/04/08 1:49 a.m.•15 views

SUSE CVE-2024-58036

Net::Dropbox::API 1.9 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test...

5.5CVSS7AI score0.00284EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/04/07 4:52 p.m.•43 views

CVE-2024-58036

Net::Dropbox::API 1.9 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test...

5.5CVSS7AI score0.00284EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/05 4:15 p.m.•9 views

DEBIAN-CVE-2024-58036

Net::Dropbox::API 1.9 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test...

5.5CVSS5.2AI score0.00284EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/05 4:15 p.m.•27 views

CVE-2024-58036

Net::Dropbox::API 1.9 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test...

5.5CVSS0.00284EPSS
SaveExploits0References5
CVE
CVE
•added 2025/04/05 4:06 p.m.•124 views

CVE-2024-58036

The Net::Dropbox::API Perl module (version 1.9 and earlier ) is vulnerable to a lack of cryptographically secure entropy. The library utilizes the Data::Random library, which relies on the rand() function, making it unsuitable for secure cryptographic functions. This issue results in insufficient...

5.5CVSS6.7AI score0.00284EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2025/04/05 4:06 p.m.•39 views

CVE-2024-58036 Net::Dropbox::API 1.9 and earlier for Perl uses insecure rand() function for cryptographic functions

Net::Dropbox::API 1.9 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test...

0.00284EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/04/05 4:06 p.m.•16 views

CVE-2024-58036 Net::Dropbox::API 1.9 and earlier for Perl uses insecure rand() function for cryptographic functions

Net::Dropbox::API 1.9 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test...

6.6AI score0.00284EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2025/04/05 4:06 p.m.•34 views

CVE-2024-58036

Net::Dropbox::API 1.9 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test...

5.5CVSS5.2AI score0.00284EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/04/05 12:00 a.m.•8 views

PT-2025-15067

Name of the Vulnerable Software and Affected Versions Net::Dropbox::API versions 1.9 and earlier Description The issue concerns the use of a non-cryptographically secure source of entropy for cryptographic functions. Specifically, Net::Dropbox::API uses the Data::Random library, which relies on t...

5.5CVSS6.2AI score0.00284EPSS
SaveExploits0References25
CNNVD
CNNVD
•added 2025/04/05 12:00 a.m.•14 views

MetaCPAN Net::Dropbox::API 安全漏洞

MetaCPAN Net::Dropbox::API is a component of the MetaCPAN Foundation. A security vulnerability exists in MetaCPAN Net::Dropbox::API version 1.9 and earlier that stems from the use of an insecure random number generator...

5.5CVSS6.5AI score0.00284EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/05 12:00 a.m.•2 views

CVE-2024-58036: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Net::Dropbox::API 1.9 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Net::Dropbox::API uses the Data::Random library which specifically states that it is "Useful mostly for test...

5.5CVSS5.8AI score0.00284EPSS
SaveExploits0References1
HackRead
HackRead
•added 2025/03/07 1:19 p.m.•20 views

Microsoft Dismantles Malvertising Scam Using GitHub, Discord, Dropbox

Microsoft Threat Intelligence exposes a malvertising campaign exploiting GitHub, Discord, and Dropbox. Discover the multi-stage attack chain, the…...

7.2AI score
SaveExploits0
OSV
OSV
•added 2025/03/03 1:24 p.m.•9 views

MAL-2025-1787 Malicious code in dropbox-internal (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Rows per page
Query Builder