625 matches found
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
Synacor Zimbra Collaboration Suite ZCS contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing...
Cross-Site Scripting (XSS)
moodle/moodle is vulnerable to Cross-Site Scripting XSS. The vulnerability exists due to a lack of sanitizing the database auto-linking filter in filter.php which allows an attacker to inject and execute malicious JavaScript into the browser...
GHSA-77JM-F3VJ-XVX2 Moodle vulnerable to Cross-site Scripting
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
Moodle vulnerable to Cross-site Scripting
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
CVE-2023-28331
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
CVE-2023-28331
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
CVE-2023-28330
Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default...
CVE-2023-28330
Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default...
CVE-2023-28330
Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default...
Cross site scripting
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
UBUNTU-CVE-2023-28330
Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default...
Design/Logic Flaw
Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default...
CVE-2023-28331 Moodle: xss risk when outputting database activity filter data
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
CVE-2023-28330
CVE-2023-28330: In Moodle, insufficient sanitizing in the backup feature enables an authenticated arbitrary file read. Access to this backup-related capability is restricted by default to teachers, managers, and admins. Connected documents corroborate a backup-file read risk and reference unpatch...
CVE-2023-28331
CVE-2023-28331 affects Moodle scenarios where the web app outputs database activity or auto-linking content. The concrete detail in the connected documents shows a root cause of an XSS risk due to insufficient sanitization in the database auto-linking filter output. This content could lead to cro...
CVE-2023-28331 Moodle: xss risk when outputting database activity filter data
Content output by the database auto-linking filter required additional sanitizing to prevent an XSS risk...
Debian: Security Advisory (DSA-5370-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-40-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-357-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...