EUVD-2024-24807

Malicious code in bioql PyPI...

EUVD-2024-24806

Malicious code in bioql PyPI...

CVE-2024-27613

Numbas editor before 7.3 mishandles reading of themes and extensions...

CVE-2024-27612

Numbas editor before 7.3 mishandles editing of themes and extensions...

CVE-2024-27612

Numbas editor before 7.3 mishandles editing of themes and extensions...

CVE-2024-27612

Numbas editor before 7.3 mishandles editing of themes and extensions...

CVE-2024-27613

Numbas editor before 7.3 mishandles reading of themes and extensions...

CVE-2024-27613

Numbas editor before 7.3 mishandles reading of themes and extensions...

Code injection

Numbas editor before 7.3 mishandles reading of themes and extensions...

Code injection

Numbas editor before 7.3 mishandles editing of themes and extensions...

CVE-2024-27612

Numbas editor before 7.3 mishandles editing of themes and extensions...

CVE-2024-27613

Numbas editor before 7.3 mishandles reading of themes and extensions...

CVE-2024-27612

Numbas editor before 7.3 mishandles editing of themes and extensions...

CVE-2024-27613

Numbas editor before 7.3 mishandles reading of themes and extensions...

CVE-2024-27612

Numbas editor prior to version 7.3 mishandles editing of themes and extensions, leading to potential remote code execution (as evidenced by public exploits for ≤7.2). Public advisories (PT-2024-21967) recommend updating to 7.3 or later to resolve the issue.

CVE-2024-27613

CVE-2024-27613 affects the Numbas editor prior to version 7.3, where the issue is a mishandling of reading themes and extensions in the editor. The CVE has a CVSS v3.1 base score of 7.3 (HIGH), with network attack vector, no privileges required, and no user interaction. Impact is described as low...

PT-2024-21967 · Unknown · Numbas Editor

Name of the Vulnerable Software and Affected Versions: Numbas editor versions prior to 7.3 Description: The issue concerns the mishandling of editing themes and extensions in the Numbas editor. Recommendations: For versions prior to 7.3, update to version 7.3 or later to resolve the issue...

PT-2024-21968 · Unknown · Numbas Editor

Name of the Vulnerable Software and Affected Versions: Numbas editor versions prior to 7.3 Description: The issue concerns the mishandling of reading themes and extensions in the Numbas editor. Recommendations: For versions prior to 7.3, update to version 7.3 or later to resolve the issue...