344 matches found
EUVD-2024-42913
Malicious code in bioql PyPI...
EUVD-2022-4163
Malicious code in bioql PyPI...
EUVD-2023-28434
Malicious code in bioql PyPI...
EUVD-2024-40076
Malicious code in bioql PyPI...
EUVD-2022-2013
Malicious code in bioql PyPI...
EUVD-2022-44998
Malicious code in bioql PyPI...
EUVD-2022-3892
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-43435
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the glob...
Linux Distros Unpatched Vulnerability : CVE-2019-10187
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other...
Linux Distros Unpatched Vulnerability : CVE-2025-26532
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Additional checks were required to ensure trusttext is applied when enabled to glossary entries being restored. CVE-2025-26532 Note that Nessus relies on the...
BIT-MOODLE-2025-26532 Teachers can evade trusttext config when restoring glossary entries
Additional checks were required to ensure trusttext is applied when enabled to glossary entries being restored...
Microsoft and CrowdStrike Launch Shared Threat Actor Glossary to Cut Attribution Confusion
Microsoft and CrowdStrike have announced that they are teaming up to align their individual threat actor taxonomies by publishing a new joint threat actor mapping. "By mapping where our knowledge of these actors align, we will provide security professionals with the ability to connect insights...
CVE-2024-48041
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMindsSolutions CM Tooltip Glossary enhanced-tooltipglossary allows Stored XSS.This issue affects CM Tooltip Glossary: from n/a through = 4.3.9...
CVE-2024-6570
The Glossary plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.2.26. This is due the plugin utilizing wpdesk and not preventing direct access to the test files along with displayerrors being enabled. This makes it possible for unauthenticated...
CVE-2023-24378
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Codeat Glossary plugin = 2.1.27 versions...
CVE-2023-46633
Missing Authorization vulnerability in TCBarrett Glossary allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Glossary: from n/a through 3.1.2...
CVE-2022-41831
Auth. contributor+ Cross-Site Scripting vulnerability in TCBarrett WP Glossary plugin = 3.1.2 versions...
CVE-2021-24678
The CM Tooltip Glossary WordPress plugin before 3.9.21 does not escape some glossarytooltip shortcode attributes, which could allow users a role as low as Contributor to perform Stored Cross-Site Scripting attacks...