Resumen de las últimas 20 vulnerabilidades


Ayuda Ayuda

Identificador
Título
Fabricante
Fecha

CCN-CERT-1903-26606
Better Search 2.2.2 - Unauthenticated SQL Injection
Wordpress
21-03-2019
CCN-CERT-1903-26607
WP Support Plus Responsive Ticket System <= 9.1.1 - Stored XSS
Wordpress
21-03-2019
CCN-CERT-1903-26608
Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004
Drupal
21-03-2019
CCN-CERT-1903-26609
DSA-4409 neutron - security update
Debian
21-03-2019
CCN-CERT-2507-38442
CVE-2018-19498
ATLASSIAN
21-03-2019
CCN-CERT-2507-43762
CVE-2019-5885
MATRIX SYNAPSE
21-03-2019
CCN-CERT-1903-26578
DSA-4408 liblivemedia - security update
Debian
20-03-2019
CCN-CERT-1903-26579
MSA-19-0006: Users could elevate their role when accessing the LTI tool on a provider site
Moodle
20-03-2019
CCN-CERT-1903-26580
MSA-19-0005: Logged in users could view all calendar events
Moodle
20-03-2019
CCN-CERT-1903-26581
MSA-19-0004: "Log in as" functionality exposed to JavaScript risk on other users Dashboards...
Moodle
20-03-2019
CCN-CERT-1903-26582
MSA-19-0003: User full name is not escaped in the un-linked userpix page
Moodle
20-03-2019
CCN-CERT-1903-26583
MSA-19-0002: Blind SSRF Risk in /badges/mybackpack.php
Moodle
20-03-2019
CCN-CERT-1903-26584
MSA-19-0001: Manage groups capability is missing XSS risk flag
Moodle
20-03-2019
CCN-CERT-1903-26585
MSA-18-0020: Login CSRF vulnerability in login form
Moodle
20-03-2019
CCN-CERT-1903-26586
MSA-18-0019: Boost theme - blog search GET parameter insufficiently filtered
Moodle
20-03-2019
CCN-CERT-1903-26587
MSA-18-0018: QuickForm library remote code vulnerability (upstream)
Moodle
20-03-2019
CCN-CERT-1903-26588
MSA-18-0017: Moodle XML import of ddwtos could lead to intentional remote code execution
Moodle
20-03-2019
CCN-CERT-1903-26589
MSA-19-0009: get_with_capability_join/get_users_by_capability not aware of context freezing
Moodle
20-03-2019
CCN-CERT-1903-26590
MSA-19-0008: Secure layout contained an insecure link in Boost theme
Moodle
20-03-2019
CCN-CERT-1903-26591
MSA-19-0007: Stored HTML in assignment submission comments allowed links to be opened directly
Moodle
20-03-2019

Miembros de

CERT
FIRST
TF-CSIRT
EGC Group
UE
Red Nacional de SOC
Foro Nacional de Ciberseguridad
CSIRT.es
Ministerio de Defensa
CNI
CNI
CCN-CERT
CNI
CNI