Resumen de las últimas 20 vulnerabilidades


Ayuda Ayuda

Identificador
Título
Fabricante
Fecha

CCN-CERT-2310-34762
MSA-23-0034: Students could see other students in "Only see own membership" groups
Moodle
18-10-2023
CCN-CERT-2310-34763
MSA-23-0033: XSS risk when using CSV grade import method
Moodle
18-10-2023
CCN-CERT-2310-34764
MSA-23-0032: Authenticated remote code execution risk in IMSCP
Moodle
18-10-2023
CCN-CERT-2310-34765
MSA-23-0031: Authenticated remote code execution risk in Lesson
Moodle
18-10-2023
CCN-CERT-2509-46230
CVE-2023-35084
IVANTI
18-10-2023
CCN-CERT-2310-34748
Cisco IOS XE Software Web UI Privilege Escalation Vulnerability
Cisco
17-10-2023
CCN-CERT-2310-34749
HTTP/2 Rapid Reset Attack Affecting Cisco Products: October 2023
Cisco
17-10-2023
CCN-CERT-2310-34731
MSA-23-0030: Quiz sequential navigation bypass possible
Moodle
15-10-2023
CCN-CERT-2310-34732
MSA-23-0029: Competency framework tools are not restricted as intended
Moodle
15-10-2023
CCN-CERT-2310-34733
MSA-23-0028: Open redirect risk on admin view all policies page
Moodle
15-10-2023
CCN-CERT-2310-34734
MSA-23-0027: JQuery UI library upgraded to 1.13.2 (upstream)
Moodle
15-10-2023
CCN-CERT-2310-34735
MSA-23-0026: IDOR in message processor fragments allows fetching of other users data
Moodle
15-10-2023
CCN-CERT-2310-34736
MSA-23-0025: phpCAS library upgraded to 1.6.0 (upstream)
Moodle
15-10-2023
CCN-CERT-2310-34737
MSA-23-0024: Private course participant data available from external grade report method
Moodle
15-10-2023
CCN-CERT-2310-34738
MSA-23-0023: Stored self-XSS escalated to stored XSS via OAuth 2 login
Moodle
15-10-2023
CCN-CERT-2310-34739
MSA-23-0022: SQL injection risk in grader report sorting
Moodle
15-10-2023
CCN-CERT-2310-34740
MSA-23-0021: Some block permissions on Dashboard not respected
Moodle
15-10-2023
CCN-CERT-2310-34741
MSA-23-0020: Remote code execution risk when parsing malformed file repository reference
Moodle
15-10-2023
CCN-CERT-2310-34742
MSA-23-0019: Proxy bypass risk due to insufficient validation
Moodle
15-10-2023
CCN-CERT-2310-34743
MSA-23-0018: SSRF risk due to insufficient check on the cURL blocked hosts list
Moodle
15-10-2023

Miembros de

CERT
FIRST
TF-CSIRT
EGC Group
UE
Red Nacional de SOC
Foro Nacional de Ciberseguridad
CSIRT.es
Ministerio de Defensa
CNI
CNI
CCN-CERT
CNI
CNI