PT-2026-60543

BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web checksum validation could be bypassed when a presentationUploadExternalUrl parameter was supplied to API request handling in CreateMeeting.java and ValidationService.java, allowing a user to send valid requests to some...

CVE-2026-27128

Craft is a content management system CMS. In versions 4.5.0-RC1 through 4.16.18 and 5.0.0-RC1 through 5.8.22, a Time-of-Check-Time-of-Use TOCTOU race condition exists in Craft CMS’s token validation service for tokens that explicitly set a limited usage. The "getTokenRoute" method reads a token’s...

de.richtercloud:jsf-validation-service (1.0) potentially affected by CVE-2025-15104 via nu.validator:validator (18.11.5)

nu.validator:validator MAVEN version 18.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on nu.validator:validator and may be impacted: - de.richtercloud:jsf-validation-service 1.0 Source cves: CVE-2025-15104 Source advisory: OSV:GHSA-FCCG-7W3P-W66F...

de.richtercloud:jsf-validation-service (>=1.3, <=1.4), de.richtercloud:selenium-tools (>=1.5, <=1.6) potentially affected by CVE-2025-15104 via nu.validator:validator (20.3.16)

nu.validator:validator MAVEN version 20.3.16 is affected by a known vulnerability. The following packages have a transitive dependency on nu.validator:validator and may be impacted: - de.richtercloud:jsf-validation-service =1.3, =1.5, =1.6 Source cves: CVE-2025-15104 Source advisory:...

com.cognifide.aet:jobs (>=2.0.0-rc2, <=3.2.2), com.cognifide.aet:w3chtml5validator (>=2.0.0-rc2, <=3.2.2) +3 more potentially affected by CVE-2025-15104 via nu.validator:validator (>=15.3.28, <=26.10.12)

nu.validator:validator MAVEN version =15.3.28, =2.0.0-rc2, =2.0.0-rc2, =1.0, =1.0, =0.0.1, =1.0.0 Source cves: CVE-2025-15104 Source advisory: SNYK:JAVA-NUVALIDATOR-15010790...

EUVD-2020-2646

Malware in sbrugna...

WSO2's Input Validation Management Service contains Observable Discrepancy when Multi-Attribute Login is enabled

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

Malicious code in ms-validationservice (npm)

The package ms-validationservice was found to contain malicious code...

CVE-2023-24482

A vulnerability has been identified in COMOS V10.2 All versions, COMOS V10.3.3.1 All versions V10.3.3.1.45, COMOS V10.3.3.2 All versions V10.3.3.2.33, COMOS V10.3.3.3 All versions V10.3.3.3.9, COMOS V10.3.3.4 All versions V10.3.3.4.6, COMOS V10.4.0.0 All versions V10.4.0.0.31, COMOS V10.4.1.0 All...

CVE-2022-29499

The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA 400, and Virtual SA...

CVE-2023-24482

A vulnerability has been identified in COMOS V10.2 All versions, COMOS V10.3.3.1 All versions V10.3.3.1.45, COMOS V10.3.3.2 All versions V10.3.3.2.33, COMOS V10.3.3.3 All versions V10.3.3.3.9, COMOS V10.3.3.4 All versions V10.3.3.4.6, COMOS V10.4.0.0 All versions V10.4.0.0.31, COMOS V10.4.1.0 All...

CVE-2023-24482

A vulnerability has been identified in COMOS V10.2 All versions, COMOS V10.3.3.1 All versions V10.3.3.1.45, COMOS V10.3.3.2 All versions V10.3.3.2.33, COMOS V10.3.3.3 All versions V10.3.3.3.9, COMOS V10.3.3.4 All versions V10.3.3.4.6, COMOS V10.4.0.0 All versions V10.4.0.0.31, COMOS V10.4.1.0 All...

CVE-2023-24482: Buffer Copy without Checking Size of Input

A vulnerability has been identified in COMOS V10.2 All versions, COMOS V10.3.3.1 All versions V10.3.3.1.45, COMOS V10.3.3.2 All versions V10.3.3.2.33, COMOS V10.3.3.3 All versions V10.3.3.3.9, COMOS V10.3.3.4 All versions V10.3.3.4.6, COMOS V10.4.0.0 All versions V10.4.0.0.31, COMOS V10.4.1.0 All...

PT-2023-1387

Name of the Vulnerable Software and Affected Versions COMOS V10.2 All versions COMOS V10.3.3.1 versions prior to V10.3.3.1.45 COMOS V10.3.3.2 versions prior to V10.3.3.2.33 COMOS V10.3.3.3 versions prior to V10.3.3.3.9 COMOS V10.3.3.4 versions prior to V10.3.3.4.6 COMOS V10.4.0.0 versions prior t...

DEBIAN-CVE-2021-40874

An issue was discovered in LemonLDAP::NG aka lemonldap-ng 2.0.13. When using the RESTServer plug-in to operate a REST password validation service for another LemonLDAP::NG instance, for example and using the Kerberos authentication method combined with another method with the Combination...

UBUNTU-CVE-2021-40874

An issue was discovered in LemonLDAP::NG aka lemonldap-ng 2.0.13. When using the RESTServer plug-in to operate a REST password validation service for another LemonLDAP::NG instance, for example and using the Kerberos authentication method combined with another method with the Combination...

Update 17.9 for Microsoft Dynamics 365 Business Central 2020 Release Wave 2 (Application Build 17.9.28504, Platform Build 17.0.28458)

Update 17.9 for Microsoft Dynamics 365 Business Central 2020 Release Wave 2 Application Build 17.9.28504, Platform Build 17.0.28458 Applies To Dynamics 365 Business Central on-premises 2020 release wave 2, version 17 Overview This update replaces previously released updates. You should always...

Unspecified Vulnerability in Foxit Reader and PhantomPDF (CNVD-2020-32081)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the CAS service in Foxit Reader prior to version 9.7.2 and PhantomPDF prior to version 9.7.2, which stems from the program not limiting the number of failed login...

CVE-2020-10184

The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a denial of service, aka SQL injection. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP validation service...

CVE-2020-10184

The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a denial of service, aka SQL injection. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP validation service...