CVE-2022-30597

A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field...

UBUNTU-CVE-2022-30597

A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field...

thesis.icict.fiocruz.br Cross Site Scripting vulnerability OBB-2621306

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-30105

In Belkin N300 Firmware 1.00.08, the script located at /settinghidden.asp, which is accessible before and after configuring the device, exhibits multiple remote command injection vulnerabilities. The following parameters in the form name form; list vulnerable parameters, are not properly sanitize...

Belkin N300 Firmware: Operating System Command Injection Vulnerability

Belkin N300 Firmware is firmware for Belkin's Belkin N300 router. A security vulnerability exists in Belkin N300 Firmware version 1.00.08, which stems from multiple remote command injection vulnerabilities in the script /settinghidden.asp accessible both before and after configuring the device. A...

agronomica.sc.gov.br Cross Site Scripting vulnerability OBB-2621106

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-6W93-4C4P-XV2X Plone Metadata Disclosure

uidcatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to obtain metadata about hidden objects via a crafted URL...

Moodle security vulnerabilities

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. a security vulnerability exists in Moodle, which stems from the description user field failing to hide when set to hidden. No details o...

CVE-2022-1455

The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when the premium is enabled...

CVE-2022-1455

The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when the premium is enabled...

CVE-2022-1455: Improper Neutralization of Input During Web Page Generation

The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when the premium is enabled...

produce.gob.pe Cross Site Scripting vulnerability OBB-2618597

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

versanttest.com Cross Site Scripting vulnerability OBB-2618108

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

thesaltydog.com Cross Site Scripting vulnerability OBB-2618068

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rtfhsd.org Cross Site Scripting vulnerability OBB-2617966

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

portitrans.com Cross Site Scripting vulnerability OBB-2617935

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2016-3723 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2016-3722 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2016-3725 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...

org.jenkins-ci.main:jenkins-test-harness (1.541), org.jenkins-ci.main:jenkins-war (1.541) +4 more potentially affected by CVE-2017-1000355 via org.jenkins-ci.main:jenkins-core (1.541)

org.jenkins-ci.main:jenkins-core MAVEN version 1.541 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.541 - org.jenkins-ci.main:jenkins-war 1.541 -...