Resumen de las últimas 20 vulnerabilidades


Ayuda Ayuda

Identificador
Título
Fabricante
Fecha

CCN-CERT-2408-35120
MSA-24-0035: CSRF risk in Feedback non-respondents report
Moodle
20-08-2024
CCN-CERT-2408-35121
MSA-24-0034: Matrix user/power level management not always working as expected with suspended user...
Moodle
20-08-2024
CCN-CERT-2408-35122
MSA-24-0041: LFI vulnerability when restoring malformed block backups
Moodle
20-08-2024
CCN-CERT-2408-35123
MSA-24-0040: Reflected XSS via H5P error message
Moodle
20-08-2024
CCN-CERT-2408-35124
MSA-24-0039: IDOR in Feedback non-respondents report allows messaging arbitrary site users
Moodle
20-08-2024
CCN-CERT-2408-35125
MSA-24-0038: XSS risk when restoring malicious course backup file
Moodle
20-08-2024
CCN-CERT-2408-35126
MSA-24-0037: Site administration SQL injection via XMLDB editor
Moodle
20-08-2024
CCN-CERT-2408-35127
MSA-24-0036: Can create global glossary without being admin
Moodle
20-08-2024
CCN-CERT-2408-35128
MSA-24-0033: Authorization headers preserved between "emulated redirects"
Moodle
20-08-2024
CCN-CERT-2408-35129
MSA-24-0032: IDOR in badges allows deletion of arbitrary badges
Moodle
20-08-2024
CCN-CERT-2408-35130
MSA-24-0031: Lack of access control when using external methods for Quiz overrides
Moodle
20-08-2024
CCN-CERT-2408-35131
MSA-24-0030: User information visibility control issues in gradebook reports
Moodle
20-08-2024
CCN-CERT-2408-35132
MSA-24-0029: Cache poisoning via injection into storage
Moodle
20-08-2024
CCN-CERT-2408-35133
MSA-24-0028: Admin presets export tool includes some secrets that should not be exported
Moodle
20-08-2024
CCN-CERT-2408-35134
MSA-24-0027: Arbitrary file read risk through pdfTeX
Moodle
20-08-2024
CCN-CERT-2408-35135
MSA-24-0026: Remote code execution via calculated question types
Moodle
20-08-2024
CCN-CERT-2408-35136
RADIUS Protocol Spoofing Vulnerability (Blast-RADIUS): July 2024
Cisco
20-08-2024
CCN-CERT-2408-35116
Cisco Finesse Web-Based Management Interface Vulnerabilities
Cisco
19-08-2024
CCN-CERT-2408-35117
Cisco Nexus Dashboard Fabric Controller Plug and Play Arbitrary File Read Vulnerability
Cisco
19-08-2024
CCN-CERT-2408-35118
Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability
Cisco
19-08-2024

Miembros de

CERT
FIRST
TF-CSIRT
EGC Group
UE
Red Nacional de SOC
Foro Nacional de Ciberseguridad
CSIRT.es
Ministerio de Defensa
CNI
CNI
CCN-CERT
CNI
CNI