Skip to content
OpenAdvisories

Archive

9 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /9 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Low 3.3
    CVE-2023-5543

    Moodle: duplicating a bigbluebutton activity assigns the same meeting id

    When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.

    moodle Web / CMS Ubuntu
  • Low 3.3
    CVE-2023-5551

    Moodle: forum summary report shows students from other groups when in separate groups mode

    Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Low 3.3
    CVE-2023-5549

    Moodle: insufficient capability checks when updating the parent of a course category

    Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Low 3.3
    CVE-2023-5548

    Moodle: cache poisoning risk with endpoint revision numbers

    Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Low 3.3
    CVE-2023-5547

    Moodle: xss risk when previewing data in course upload tool

    The course upload preview contained an XSS risk for users uploading unsafe data.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Low 3.3
    CVE-2023-5545

    Moodle: auto-populated h5p author name causes a potential information leak

    H5P metadata automatically populated the author with the user's username, which could be sensitive information.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Low 3.3
    CVE-2023-5542

    Moodle: students can view other users in "only see own membership" groups

    Students in "Only see own membership" groups could see other students in the group, which should be hidden.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Low 3.3
    CVE-2023-5541

    Moodle: xss risk when using csv grade import method

    The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Low —
    GHSA-72fp-w44g-625q

    Signing DynamoDB Sets when using the AWS Database Encryption SDK.

    ### Impact This advisory addresses an issue when a DynamoDB Set attribute is marked as SIGN_ONLY in the AWS Database Encryption SDK (DB-ESDK) for DynamoDB. This also includes when a Set is part of a List or a Map. DB-ESDK for DynamoDB supports `SIGN_ONLY` and…

    software.amazon.cryptography:aws-database-encryption-sdk-dynamodb Maven
  • Low 3.3
    CVE-2023-47615

    A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BG…

    Telit Cinterion EHS8 EHS6 PDS8
  • Low 2.4
    CVE-2023-47616

    A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Tel…

    Telit Cinterion EHS6 EHS8 PDS8