Resumen de las últimas 20 vulnerabilidades


Ayuda Ayuda

Identificador
Título
Fabricante
Fecha

CCN-CERT-2409-35200
MSA-24-0039: IDOR in Feedback non-respondents report allows messaging arbitrary site users
Moodle
21-09-2024
CCN-CERT-2409-35201
MSA-24-0038: XSS risk when restoring malicious course backup file
Moodle
21-09-2024
CCN-CERT-2409-35202
MSA-24-0037: Site administration SQL injection via XMLDB editor
Moodle
21-09-2024
CCN-CERT-2409-35203
MSA-24-0035: CSRF risk in Feedback non-respondents report
Moodle
21-09-2024
CCN-CERT-2409-35204
MSA-24-0034: Matrix user/power level management not always working as expected with suspended user...
Moodle
21-09-2024
CCN-CERT-2409-35205
MSA-24-0033: Authorization headers preserved between "emulated redirects"
Moodle
21-09-2024
CCN-CERT-2409-35206
MSA-24-0032: IDOR in badges allows deletion of arbitrary badges
Moodle
21-09-2024
CCN-CERT-2409-35207
MSA-24-0031: Lack of access control when using external methods for Quiz overrides
Moodle
21-09-2024
CCN-CERT-2409-35208
MSA-24-0030: User information visibility control issues in gradebook reports
Moodle
21-09-2024
CCN-CERT-2409-35209
MSA-24-0029: Cache poisoning via injection into storage
Moodle
21-09-2024
CCN-CERT-2409-35210
MSA-24-0028: Admin presets export tool includes some secrets that should not be exported
Moodle
21-09-2024
CCN-CERT-2409-35211
MSA-24-0027: Arbitrary file read risk through pdfTeX
Moodle
21-09-2024
CCN-CERT-2409-35212
MSA-24-0026: Remote code execution via calculated question types
Moodle
21-09-2024
CCN-CERT-2409-35213
JavaScript “Pollykill” Vulnerability
Moodle
21-09-2024
CCN-CERT-2409-35193
Multiple Cisco Products Web-Based Management Interface Privilege Escalation Vulnerability
Cisco
20-09-2024
CCN-CERT-2409-35192
Multiple Cisco Products Web-Based Management Interface Privilege Escalation Vulnerability
Cisco
20-09-2024
CCN-CERT-2509-46333
CVE-2024-8963
IVANTI
19-09-2024
CCN-CERT-2409-35191
Cisco NX-OS Software CLI Command Injection Vulnerability
Cisco
18-09-2024
CCN-CERT-2409-35190
Multiple Cisco Products Web-Based Management Interface Privilege Escalation Vulnerability
Cisco
17-09-2024
CCN-CERT-2409-35189
Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server (regreSSHion): July 2024
Cisco
13-09-2024

Miembros de

CERT
FIRST
TF-CSIRT
EGC Group
UE
Red Nacional de SOC
Foro Nacional de Ciberseguridad
CSIRT.es
Ministerio de Defensa
CNI
CNI
CCN-CERT
CNI
CNI