Archive
16 August 2022
Vulnerabilities first published on this day (UTC), newest first.
166 results · Feed
-
Unscored —
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help miti…
-
High 8.8
Moodle Incorrect Authorization vulnerability
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.
-
Unscored —
A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Term…
-
Unscored —
Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered r…
-
Unscored —
A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack othe…
-
Medium 4.3CVE-2022-2846 Public exploit
Calendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Creation to Stored XSS
The Calendar Event Multi View WordPress plugin before 1.4.07 does not have any authorisation and CSRF checks in place when creating an event, and is also lacking sanitisation as well as escaping in some of the event fields. This could allow unauthenticated at…