Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.3 views

The vulnerability in the virtual learning environment Moodle, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

5.5CVSS5.8AI score0.00265EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the Brickfield component in the virtual learning environment Moodle, which allows a perpetrator to influence the integrity of the protected information

The vulnerability of the Brickfield component in the Moodle virtual learning environment is related to the manipulation of cross-site requests. Exploiting this vulnerability can allow a malicious actor to influence the integrity of the protected information...

4CVSS5.2AI score0.00244EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

The vulnerability of the mod_data module in the virtual training environment Moodle, which allows a intruder to gain unauthorized access to protected information

The vulnerability of the moddata module in the virtual training environment Moodle is related to the disclosure of information through query strings. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

3.1CVSS5.4AI score0.00271EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the virtual learning environment Moodle, related to the manipulation of cross-site requests, allows a violator to influence the integrity of the protected information.

The vulnerability in the virtual learning environment Moodle is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow a malicious actor to influence the integrity of the protected information...

4CVSS5.3AI score0.00146EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

The vulnerability of the Multi-Factor Authentication component in the virtual learning environment Moodle allows a perpetrator to gain unauthorized access to protected information or execute arbitrary codes.

The vulnerability of the Multi-Factor Authentication component in the virtual learning environment Moodle is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information or execute arbitrary...

4.3CVSS5.8AI score0.00219EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the WebKit component in the Safari browser, available on iOS operating systems, macOS Sonoma, iPadOS, and tvOS, allows a hacker to execute arbitrary code.

The vulnerability of the WebKit component in the Safari browser, as well as in the iOS and macOS Sonoma operating systems, iPadOS, and tvOS, is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS7.8AI score0.00413EPSS
Exploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader Document Cloud 2017, and Adobe Acrobat Reader Document Cloud 2015 are related to memory usage after it is freed. This allows attackers to execute arbitrary code in the context of the current user.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader Document Cloud 2017, Adobe Acrobat Reader Document Cloud 2015, and Adobe Acrobat Document Cloud 2015 is related to the use of...

10CVSS8.2AI score0.12067EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the fromSetWirelessRepeat function in the microprogramming software for Tenda AC15 routers allows a hacker to induce a service failure.

The vulnerability of the fromSetWirelessRepeat function in the Tenda AC15 router’s microprogramming system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

9CVSS7.7AI score0.00818EPSS
Exploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server, related to insufficient restrictions on communication channels for specified endpoints, allows attackers to gain unauthorized access to protected information.

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to insufficient restrictions on communication channels for specified endpoints. Exploiting this vulnerability can allow a malicious actor to gain unauthorized acce...

7.6CVSS5.5AI score0.00419EPSS
Exploits0References3Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

Vulnerability of the PostgresDB._process_insert_query() function (file web/db.py), a web application creation framework by web.py, allowing attackers to execute arbitrary SQL commands

The vulnerability of the PostgresDB.processinsertquery function located in the web/db.py file of the web.py web framework is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary SQL commands using the seqname...

6.5CVSS7.1AI score0.00254EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

The vulnerability of microprogrammed software in Cisco Nexus 3000 Series and Cisco Nexus 9000 Series virtual switches arises from the failure to take measures to neutralize special elements, allowing attackers to execute arbitrary code.

The vulnerability of microprogrammed software in Cisco Nexus 3000 Series and Cisco Nexus 9000 Series switches is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code on behalf of an administrator with...

5.2CVSS6AI score0.00467EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the setScheduleCfg function in the microprogramming software for TOTOLINK X5000R allows a hacker to execute arbitrary commands.

The vulnerability of the setScheduleCfg function in TOTOLINK X5000R router microprogramming software exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by processing the recHour parameter...

9CVSS8.4AI score0.01193EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the setScheduleCfg function in the microprogramming software for TOTOLINK X5000R allows a hacker to execute arbitrary commands.

The vulnerability of the setScheduleCfg function in TOTOLINK X5000R router microprogramming software exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by manipulating the minute parameter...

9CVSS8.4AI score0.01708EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.3 views

The vulnerability of Cisco Meraki network devices’ microprogramming software, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Cisco Meraki network devices’ microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.3CVSS5.9AI score0.00343EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the setScheduleCfg function in the microprogramming software for TOTOLINK X5000R allows a hacker to execute arbitrary commands.

The vulnerability of the setScheduleCfg function in TOTOLINK X5000R router microprogramming software exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by manipulating the switch parameter...

9CVSS8.4AI score0.01573EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the ctts_box_write function in the isomedia/box_code_base.c file of the MP4Box packaging tool of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the cttsboxwrite function in the isomedia/boxcodebase.c file of the MP4Box packaging tool for the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.5AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

The vulnerability of the gf_odf_vvc_cfg_write_bs function in the odf/descriptors.c file of the MP4Box packaging tool for the GPAC multimedia platform allows a attacker to cause a service failure.

The vulnerability of the gfodfvvccfgwritebs function in the odf/descriptors.c file of the MP4Box packaging tool for the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.5AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.3 views

The vulnerability of the DNSServer software’s microprogramming system in Wi-Fi amplifiers, subscriber terminals, DSL/Ethernet CPE routers allows a perpetrator to execute arbitrary commands.

The vulnerability of the DNSServer software, a microprogramming-based system for Wi-Fi amplifiers, subscriber terminals, Fiber ONTs, and DSL/Ethernet CPEs exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows an attacker operating remotely to...

9CVSS5.8AI score0.01128EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

The vulnerability of the zyUtilMailSend function in Wi-Fi amplifiers, subscriber terminals, DSL/Ethernet CPE routers allows a perpetrator to execute arbitrary commands.

The vulnerability of the zyUtilMailSend function in Wi-Fi amplifiers, subscriber terminals, DSL/Ethernet CPE routers exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS5.9AI score0.01052EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.4 views

The vulnerability of the NEU format. The pre-processor Simcenter Femap allows a hacker to disclose protected information or execute arbitrary code within the context of the current process.

The vulnerability of the NEU format is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or execute arbitrary code within the context of the current process...

7CVSS7.6AI score0.00187EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

The vulnerability of the Synology Router Manager operating system, related to insufficient protection of sensitive data, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Synology Router Manager operating system is related to insufficient protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.00346EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the TLS-crypt-v2 function on the software-based OpenVPN server allows a hacker to induce a service failure.

The vulnerability of the TLS-crypt-v2 function in the OpenVPN software server is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

3.7CVSS6.6AI score0.00733EPSS
Exploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.3 views

The vulnerability of the Root Access Control component of the Totolink X2000R microprogramming system allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Root Access Control component of the Totolink X2000R microprogramming system for routers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00389EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the Apache SeaTunnel data processing software lies in its authentication procedures’ deficiencies, which allow attackers to gain unauthorized access to protected information.

The vulnerability of the Apache SeaTunnel data processing platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

6.3CVSS8AI score0.01039EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.3 views

Vulnerability of the MySQL Server component: The DML mechanism of the MySQL Database Management System allows a hacker to trigger a service failure.

The vulnerability of the MySQL Server component relates to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

6.8CVSS6.4AI score0.0061EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

Vulnerability of the MySQL Server component: The MySQL Server component of the database management system allows a hacker to cause a service failure.

Vulnerability of the MySQL Server component: The MySQL Server component of the database management system is vulnerable to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

6.8CVSS6.4AI score0.0061EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

Vulnerability of the MySQL Server component: This component is part of the MySQL Database Management System, and its failure can lead to service interruptions for attackers.

The vulnerability of the MySQL Server component, which is part of the MySQL Database Management System and MySQL Cluster, involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

6.8CVSS6.8AI score0.0075EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.3 views

Vulnerability of the Server component: The MySQL Server database management system component, which allows a hacker to cause service interruptions.

Vulnerability of the MySQL Server component: The DDL system for database management of MySQL Server is vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

6.8CVSS6.3AI score0.00711EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.15 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves the improper assignment of permissions to a critical resource. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

6.8CVSS6.4AI score0.00722EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management allows a perpetrator to gain unauthorized access to add, delete, and modify data.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to access control errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to add, delete, and modify data...

5.5CVSS7.2AI score0.0029EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system allows a malicious actor to gain unauthorized access to modify, add, or delete data.

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to modify, add, or delete data...

6.4CVSS7.2AI score0.00333EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.3 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves the improper assignment of permissions to a critical resource. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

6.8CVSS6.4AI score0.00722EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the JSE component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to influence the confidentiality and integrity of protected information.

The vulnerability of the JSE component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker to influence the confidentiality and integri...

7.4CVSS6.5AI score0.00749EPSS
Exploits0References6Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.3 views

The vulnerability of the nfsd component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nfsd component in the Linux operating system is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00207EPSS
Exploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.3 views

The vulnerability of DRM/STI components in Linux kernel allows a perpetrator to trigger a service failure.

The vulnerability of DRM/STI components in Linux kernel relates to the assignment of the NULL pointer in the stihqvdpatomiccheck function. Exploiting this vulnerability can allow an attacker to trigger a service failure...

5.5CVSS6.7AI score0.00203EPSS
Exploits0References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

The vulnerability of DRM/STI components in Linux kernel allows a perpetrator to trigger a service failure.

The vulnerability of DRM/STI components in Linux kernel relates to the assignment of the NULL pointer in the sticursoratomiccheck function. Exploiting this vulnerability can allow an attacker to trigger a service failure...

5.5CVSS6.7AI score0.00203EPSS
Exploits0References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the Linux operating system’s kernel quota component, which allows a hacker to trigger a service failure

The vulnerability of the Linux kernel’s quota component is related to improper blocking of resources in the dquotwritebackdquots function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00209EPSS
Exploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

Vulnerability of components of Linux operating system’s kernel’s net/sched module, allowing a hacker to cause a service failure

The vulnerability of the net/sched components in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.3AI score0.00255EPSS
Exploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

The vulnerability of the btrfs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the btrfs component in Linux operating systems is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00203EPSS
Exploits0References15Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

The vulnerability of the Linux operating system’s crypto kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s crypto kernel component is related to improper validation of input data in the caamqiinit function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00208EPSS
Exploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the Linux operating system’s kernel PCI component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel PCI component is related to a memory leak in the resetmethodstore function. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00208EPSS
Exploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

The vulnerability of the octeontx2-pf component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the octeontx2-pf component in the Linux operating system’s kernel is related to resource management errors in the cn10kallocleafprofile function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00203EPSS
Exploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the octeontx2-pf component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the octeontx2-pf component in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00208EPSS
Exploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

The vulnerability of the mfd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mfd component in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00228EPSS
Exploits0References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.4 views

The vulnerability of the Linux operating system’s kernel component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel Ionic component is related to a memory leak in the ioniclifregister function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00245EPSS
Exploits0References13Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.2 views

The vulnerability of the virtual learning environment web service Moodle allows a perpetrator to gain unauthorized access to user data.

The vulnerability of the Moodle virtual learning environment’s web service is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to user data...

4.3CVSS5.5AI score0.0029EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the virtual learning environment Moodle, related to deficiencies in authentication mechanisms, allows a intruder to gain unauthorized access to user data.

The vulnerability of the virtual learning environment Moodle is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to user data...

4.3CVSS5.5AI score0.00257EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.3 views

The vulnerability of the course_can_delete_section() function in the virtual learning environment Moodle, which allows a violator to increase their privileges

The vulnerability of the coursecandeletesection function in the virtual learning environment Moodle is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

4.3CVSS5.5AI score0.00262EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.1 views

The vulnerability of the EQUELLA repository in the virtual learning environment Moodle, which allows a perpetrator to execute arbitrary code.

The vulnerability of the EQUELLA repository in the virtual learning environment Moodle is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.0081EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.3 views

The vulnerability of Dropbox’s repository in the virtual learning environment Moodle allows a perpetrator to execute arbitrary code.

The vulnerability of Dropbox’s virtual learning environment Moodle is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

4.3CVSS8AI score0.00766EPSS
Exploits0References4Affected Software2
Total number of security vulnerabilities74701