3221 matches found
Moodle Information Disclosure Vulnerability (CNVD-2025-11156)
Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from an information disclosure vulnerability that stems from some hidden user profile fields being visible in...
CVE-2024-40408
Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...
CVE-2024-40590
creationtimestamp| type| source ---|---|--- 2024-11-13 14:12:43+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113476053415922211 2025-03-14 16:42:25+00:00| seen| https://t.me/cvedetector/20295 2025-03-14 16:46:11+00:00| seen|...
Cybele Software Thinfinity Workspace 安全漏洞
Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace prior to v7.0.2.113 that stems from improper...
PT-2024-28833 · Cybele · Thinfinity Workspace
Name of the Vulnerable Software and Affected Versions: Cybele Software Thinfinity Workspace versions prior to 7.0.2.113 Description: The issue is related to an access control problem in the Create Profile section, allowing attackers to create arbitrary user profiles with elevated privileges. This...
CVE-2024-40408
Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...
CVE-2024-40408
CVE-2024-40408 affects Cybele Software Thinfinity Workspace prior to v7.0.2.113, with an access control flaw in the Create Profile section that allows an attacker to create arbitrary user profiles with elevated privileges. The issue is due to improper access control on profile creation. Impact is...
CVE-2024-40408
Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...
CVE-2024-43639
creationtimestamp| type| source ---|---|--- 2024-11-12 18:26:35+00:00| seen| https://www.thezdi.com/blog/2024/11/12/the-november-2024-security-update-review 2024-11-12 19:55:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113471740875187261 2024-11-13 09:23:51+00:00| seen|...
Hitachi Energy TRO600
RISK EVALUATION Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive...
CVE-2024-50217
creationtimestamp| type| source ---|---|--- 2024-11-09 10:34:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113452546160295795 2024-11-10 08:36:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113457742729180129 2025-04-10 13:35:26+00:00| seen|...
[SECURITY] Fedora 40 Update: php-tcpdf-6.7.7-1.fc40
PHP class for generating PDF documents. no external libraries are required for the basic functions; all standard page formats, custom page formats, custom margins and units of measure; UTF-8 Unicode and Right-To-Left languages; TrueTypeUnicode, OpenTypeUnicode, TrueType, OpenType, Type1 and CID-0...
CVE-2024-49402
Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles...
CVE-2024-49407
Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles...
CVE-2024-34674
Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...
CVE-2024-34674
Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...
CVE-2024-49402
Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles...
CVE-2024-49402
Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles...
CVE-2024-49402
The CVE-2024-49402 entry concerns Samsung Dressroom. Affected software: Dressroom prior to SMR Nov-2024 Release 1. Root cause: improper input validation that enables a physical attacker to access data across multiple user profiles. Impact: cross-profile data exposure on vulnerable devices; CVSS m...