2897571 matches found
CVE-2026-64971 Reflected XSS in ATutor
ATutor is vulnerable to Reflected XSS in restore functionality. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. Product is no longer actively supported and the vulnerabilities have not been fixed. Only version...
EUVD-2026-63369
ATutor is vulnerable to Server-Side request forgery in import functionalities. An authenticated administrator can make the server request arbitrary internal HTTP endpoints, cloud metadata services, or local files via file:// if the PHP environment permits URL wrappers. Product is no longer active...
CVE-2026-64967 Path Traversal in ATutor
A path traversal vulnerability in ATutor's error log viewer allows an attacker with administrative privileges to access arbitrary files outside the intended logs directory. This can lead to unauthorized access to sensitive files and other resources accessible to the web server process. Product is...
CVE-2026-64966
ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor privileges can upload and extract a specially crafted ZIP archive, causing files to be written outside the intended extraction directory. This allows an attacker to place a...
MINI-W8WX-FP32-V88C
Bulletin has no description...
MINI-5F5Q-2HVR-HP5J
Bulletin has no description...
ROOT-OS-DEBIAN-11-CVE-2023-25193 CVE-2023-25193 in harfbuzz - Patched by Root
Root has patched CVE-2023-25193 in the harfbuzz package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-22693 CVE-2026-22693 in harfbuzz - Patched by Root
Root has patched CVE-2026-22693 in the harfbuzz package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2022-33068 CVE-2022-33068 in harfbuzz - Patched by Root
Root has patched CVE-2022-33068 in the harfbuzz package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-66680
creationtimestamp| type| source ---|---|--- 2026-08-20 13:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjfa2bm4a23 2026-08-20 14:08:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjgb7z6ij2u...
ROOT-OS-DEBIAN-11-CVE-2021-33560 CVE-2021-33560 in libgcrypt20 - Patched by Root
Root has patched CVE-2021-33560 in the libgcrypt20 package for Root:Debian:11. Multiple fixed versions available...
MINI-Q4XC-9W7X-M3GP
Bulletin has no description...
MINI-78J4-2M23-XQ2F
Bulletin has no description...
MINI-65F5-39VJ-8H5M
Bulletin has no description...
MINI-JJ92-4894-4P6Q
Bulletin has no description...
ROOT-APP-NPM-CVE-2025-32031 CVE-2025-32031 in @apollo/gateway - Patched by Root
Root has patched CVE-2025-32031 in the @apollo/gateway package for Root:npm. Multiple fixed versions available...