CVE-2026-7699 Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection

A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.checkSqlInjection of the file StrUtils.java. Performing a manipulation of the argument filtersfields results in sql injection. The attack is possible to be carried out remotely. The...

BIT-MOODLE-2020-14322

In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yuicombo needed to limit the amount of files it can load to help mitigate the risk of denial of service...

CVE-2022-44617 affecting package libXpm for versions less than 3.5.17-1

CVE-2022-44617 affecting package libXpm for versions less than 3.5.17-1. An upgraded version of the package is available that resolves this issue...

UBUNTU-CVE-2020-14321

In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course...

Joomlatools DOCman 跨站脚本漏洞

Joomlatools DOCman is Joomlatools' Documentation and Download Manager extension for Joomla! A security vulnerability exists in Joomlatools DOCman 3.5.13, which originates from cross-site scripting in the image upload feature...

CVE-2020-25630

A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which could lead to a denial of service risk. This affects versions 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported...

GLSA-201710-15 : GnuTLS: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201710-15 GnuTLS: Denial of Service A NULL pointer dereference while decoding a status response TLS extension with valid contents was discovered in GnuTLS. Impact : A remote attacker could possibly cause a Denial of Service...

[ASA-201706-12] gnutls: denial of service

Arch Linux Security Advisory ASA-201706-12 ========================================== Severity: Medium Date : 2017-06-13 CVE-ID : CVE-2017-7507 Package : gnutls Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-294 Summary ======= The package gnutls before version...