CVE-2026-104047

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...

CVE-2026-104047

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...

PT-2026-107173

Name of the Vulnerable Software and Affected Versions SSSD affected versions not specified Description When configured to use Microsoft Entra ID, SSSD fails to properly sanitize search inputs before incorporating them into directory query filters. A local user can exploit this by submitting a...

CVE-2026-104047: Improper Neutralization of Delimiters

A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user can exploit this vulnerability by submitting a crafted lookup request, manipulating the query logic to cause...

Wikipedia Access Control Vulnerability

Wikipedia is a multilingual online encyclopedia platform operated by the Wikipedia Corporation. Version 12.0 of Wikipedia has a security vulnerability related to access control. This vulnerability arises from the search function’s improper handling of excessively large inputs, which may allow...

EUVD-2022-5798

Malicious code in bioql PyPI...

GHSA-XHFX-RM8Q-C3XV Moodle Vulnerable to Reflected Cross-site Scripting

It was found in Moodle before version 4.0.0-beta that some search inputs were vulnerable to reflected Cross-site Scripting XSS due to insufficient escaping of search queries...

Cross site scripting

It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries...

UBUNTU-CVE-2021-20183

It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries...

CVE-2021-20183

It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries...

CVE-2021-20183: Improper Neutralization of Input During Web Page Generation

It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries...