Lucene search
+L

66 matches found

CVE
CVE
added 2025/01/09 7:15 p.m.59 views

CVE-2024-13263

CVE-2024-13263 affects Opigno group manager (versions 0.0.0 up to 3.1.1). The root cause is improper neutralization of directives in statically saved code (static code injection), which can lead to PHP Local File Inclusion. Several connected sources corroborate that this vulnerability enables arb...

5.5CVSS6.9AI score0.00259EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/09 7:15 p.m.10 views

CVE-2024-13263 Opigno group manager - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-027

Improper Neutralization of Directives in Statically Saved Code 'Static Code Injection' vulnerability in Drupal Opigno group manager allows PHP Local File Inclusion.This issue affects Opigno group manager: from 0.0.0 before 3.1.1...

5.7AI score0.00259EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/09 7:15 p.m.9 views

CVE-2024-13263 Opigno group manager - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-027

Improper Neutralization of Directives in Statically Saved Code 'Static Code Injection' vulnerability in Drupal Opigno group manager allows PHP Local File Inclusion.This issue affects Opigno group manager: from 0.0.0 before 3.1.1...

5.5CVSS5.9AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/01/09 12:00 a.m.16 views

PT-2025-2085 · Unknown · Opigno Group Manager

Name of the Vulnerable Software and Affected Versions: Opigno group manager versions 0.0.0 through 3.1.1 Description: The issue is related to the improper neutralization of directives in statically saved code, also known as 'static code injection', which allows for PHP Local File Inclusion in the...

5.5CVSS7.4AI score0.00259EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.8 views

Drupal 安全漏洞

Drupal is an open source content management system developed using the PHP language by the Drupal community. A security vulnerability exists in Drupal Opigno group manager prior to version 3.1.1, which stems from an unsuccessful neutralization of directives in statically saved code, resulting in ...

5.5CVSS7.3AI score0.00259EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/01 5:30 p.m.9 views

Malicious code in spinal-env-viewer-plugin-group-manager-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d905db5ba537ed47f7f0ba2189c5b72f23c0d8de78591283e86cc1c8651634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2024/08/07 5:19 p.m.8 views

DRUPAL-CONTRIB-2024-027

The Opigno group manager project is related to Opigno LMS distribution. It allows to build the contents of learning paths, by combining together modules, courses, and other activities, ordering them, and defining conditional rules for the transitions from one step to the next one. An administrati...

5.5CVSS7AI score0.00259EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/08/07 12:00 a.m.6 views

Drupal Opigno group manager module < 3.1.1 - Administrator+ Remote Code Execution (RCE) vulnerability

Administrator+ Remote Code Execution RCE vulnerability discovered by catch in WordPress Module Opigno group manager versions 3.1.1...

7.5AI score
SaveExploits0References1Affected Software1
Drupal
Drupal
added 2024/08/07 12:00 a.m.28 views

Opigno group manager - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-027

The Opigno group manager project is related to Opigno LMS distribution. It allows to build the contents of learning paths, by combining together modules, courses, and other activities, ordering them, and defining conditional rules for the transitions from one step to the next one. An administrati...

5.5CVSS7.1AI score0.00259EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:00 a.m.36 views

Oracle Linux 5 : rgmanager (ELSA-2009-1339)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-1339 advisory. 2.0.52-1.0.1 - Update summary and description to be vendor neutral 2.0.52-1 - When vm.sh does a status check and gets 'no state' it is now treated as a running...

6.9CVSS5.5AI score0.0039EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:00 a.m.20 views

Oracle Linux 5 : cman (ELSA-2009-1341)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1341 advisory. 2.0.115-1 - RSA II fencing agent has been fixed. - Resolves: rhbz493802 2.0.114-1 - local variable 'verbosefilename' referenced before assignment has...

6.9CVSS5.8AI score0.0039EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/01/14 8:15 p.m.8 views

CVE-2021-39682

In mgmallocpage of memorygroupmanager.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.8CVSS7.2AI score0.00122EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/14 8:15 p.m.26 views

CVE-2021-39682

In mgmallocpage of memorygroupmanager.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.8CVSS0.00122EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/01/14 7:11 p.m.38 views

CVE-2021-39682

In mgmallocpage of memorygroupmanager.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

8AI score0.00122EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/01 12:00 a.m.12 views

PUB-A-201677538

In mgmallocpage of memorygroupmanager.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.9AI score0.00122EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/23 4:51 p.m.5 views

DRUPAL-CONTRIB-2021-019

This project is related to Opigno LMS distribution. It implements the group manager in the Opigno LMS. The module does not set X-Frame-Options and blocks ability of other modules e.g Security Kit to add them, leaving it vulnerable to Clickjacking...

6.8AI score
SaveExploits0References1
Drupal
Drupal
added 2021/06/23 12:00 a.m.26 views

Opigno group manager - Less critical - UI redressing (clickjacking) - SA-CONTRIB-2021-019

This project is related to Opigno LMS distribution. It implements the group manager in the Opigno LMS. The module does not set X-Frame-Options and blocks ability of other modules e.g Security Kit to add them, leaving it vulnerable to Clickjacking...

6.6AI score
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2020/03/25 6:15 p.m.4 views

CVE-2020-5281

In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sanitisation of the input...

7.5CVSS7.4AI score0.01362EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2019/06/18 12:00 a.m.37 views

SeedDMS Cross-Site Scripting Vulnerability (CNVD-2019-18509)

SeedDMS is a free document management system with an easy-to-use web-based user interface. A stored cross-site scripting vulnerability exists in out/out.GroupMgr.php in SeedDMS 5.1.11. An attacker can exploit this vulnerability by creating a new group with a JavaScript payload as the group name t...

6.1CVSS6.1AI score0.0236EPSS
SaveExploits4References1
Veeam
Veeam
added 2017/01/12 12:00 a.m.24 views

Dell EqualLogic Group Manager throws an error "Request target not found" after successful backup

Challenge After a successful backup of VMs stored on Dell EqualLogic storage especially when the option Allow processing of multiple VMs with a single volume snapshot is enabled you may receive an error in Group Manager "iSCSI login to target 'X.X.X.X:Y' from initiator 'X:X:X:X::Z' failed for...

6.8AI score
SaveExploits0
Rows per page
Query Builder