Lucene search
K

137 matches found

RedhatCVE
RedhatCVE
added 2026/05/21 7:57 p.m.5 views

CVE-2026-39405

Frappe Learning Management System LMS is a learning system that helps users structure their content. In versions 2.50.0 and below, a user with course editing role could upload a SCORM ZIP package to write files outside the intended directory. This issue has been resolved in version 2.50.1...

9.4CVSS5.7AI score0.00052EPSS
Exploits0References1
NVD
NVD
added 2026/05/20 8:16 p.m.7 views

CVE-2026-39405

Frappe Learning Management System LMS is a learning system that helps users structure their content. In versions 2.50.0 and below, a user with course editing role could upload a SCORM ZIP package to write files outside the intended directory. This issue has been resolved in version 2.50.1...

9.4CVSS0.00052EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/20 7:34 p.m.5 views

EUVD-2026-31177

Frappe Learning Management System LMS is a learning system that helps users structure their content. In versions 2.50.0 and below, a user with course editing role could upload a SCORM ZIP package to write files outside the intended directory. This issue has been resolved in version 2.50.1...

9.4CVSS5.7AI score0.00052EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/20 7:34 p.m.4 views

CVE-2026-39405

Frappe Learning Management System LMS is a learning system that helps users structure their content. In versions 2.50.0 and below, a user with course editing role could upload a SCORM ZIP package to write files outside the intended directory. This issue has been resolved in version 2.50.1...

9.4CVSS5.7AI score0.00052EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/05/20 7:34 p.m.6 views

CVE-2026-39405

The vulnerability CVE-2026-39405 affects Frappe LMS. In versions 2.50.0 and earlier, a user with a course editing role could upload a SCORM ZIP package that allowed writing files outside the intended directory, constituting a path traversal risk. The issue has been fixed in version 2.50.1. The av...

9.4CVSS5.7AI score0.00052EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/20 7:34 p.m.22 views

CVE-2026-39405 Frappe has Path Transversal via SCORM

Frappe Learning Management System LMS is a learning system that helps users structure their content. In versions 2.50.0 and below, a user with course editing role could upload a SCORM ZIP package to write files outside the intended directory. This issue has been resolved in version 2.50.1...

9.4CVSS0.00052EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/20 12:0 a.m.3 views

Frappe Learning Management System 路径遍历漏洞

Frappe Learning Management System is an easy-to-use open-source learning management system developed by Frappe. Versions of the Frappe Learning Management System 2.50.0 and earlier had a path traversal vulnerability, which occurred when users uploaded SCORM ZIP packages, potentially leading files...

9.4CVSS5.8AI score0.00052EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2019-6686

Malware in sbrugna...

10CVSS9.2AI score0.07863EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2011-5116

Malware in sbrugna...

7.5CVSS6.4AI score0.0048EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-6683

Malware in sbrugna...

9.8CVSS9.2AI score0.01721EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-21814

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00161EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-44866

Malicious code in bioql PyPI...

9.9CVSS8.6AI score0.00709EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-5416

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.0234EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-3479

Malicious code in bioql PyPI...

4.3CVSS6.6AI score0.00153EPSS
Exploits0References13
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-34339

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00272EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2022-35651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of user-supplied data in the SCORM track details. A remot...

6.1CVSS6AI score0.00281EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2020-10738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier unsupported versions. It was possible t...

8.8CVSS8AI score0.0234EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/07/19 12:1 a.m.3 views

CVE-2025-46102

Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model SCORM version V.5.4.3 allows a remote attacker to obtain sensitive information via the URL parameter...

5.4CVSS6.4AI score0.00161EPSS
Exploits1References1
NVD
NVD
added 2025/07/17 7:15 p.m.2 views

CVE-2025-46102

Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model SCORM version V.5.4.3 allows a remote attacker to obtain sensitive information via the URL parameter...

5.4CVSS0.00161EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/07/17 12:0 a.m.1 views

PT-2025-29946 · Beakon · Beakon Learning Management System

Name of the Vulnerable Software and Affected Versions: Beakon Software Beakon Learning Management System SCORM version V.5.4.3 Description: A Cross Site Scripting issue exists in Beakon Software Beakon Learning Management System SCORM. The issue allows a remote attacker to obtain sensitive...

5.4CVSS5.7AI score0.00161EPSS
Exploits1References8
Rows per page
Query Builder