Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

composer/moodle/moodleMoodle uses the same key for QR login and auto-login

Risk 41
Severity
6.5
Weak Encryption
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two.

1 / 2
Source: MITRE
First published (updated )
CVE-2024-38277

composer/moodle/moodleMoodle CSRF risks due to misuse of confirm_sesskey

Risk 80
Severity
8.8
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Incorrect CSRF token checks resulted in multiple CSRF risks.

1 / 2
Source: GitHub
First published (updated )
CVE-2024-38276

composer/moodle/moodleMoodle stored XSS via calendar's event title when deleting the event

Risk 39
Severity
6.1
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt.

1 / 2
Source: NVD
First published (updated )
CVE-2024-38274

composer/moodle/moodleMoodle BigBlueButton web service leaks meeting joining information

Risk 36
Severity
5.4
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Insufficient capability checks meant it was possible for users to gain access to BigBlueButton join URLs they did not have permission to access.

1 / 2
Source: MITRE
First published (updated )
CVE-2024-38273

PHP PHPPHP is vulnerable to the Marvin Attack

Risk 38
Severity
5.9
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

PHP is vulnerable to the Marvin Attack

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-2408

Microsoft Edge (Chromium-based)Use after free in Dawn

Risk 57
Severity
8.8
EPSS
0.04%
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-6293 Use after free in Dawn

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-6293

PHP PHPPHP-CGI OS Command Injection Vulnerability

Risk 99
Severity
9.8
Exploited
EPSS
96.68%
Command Injection, OS Command Injection
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Argument Injection in PHP-CGI

1 / 5
Source: Microsoft
First published (updated )
CVE-2024-4577

PHP PHPFilter bypass in filter_var (FILTER_VALIDATE_URL)

Risk 20
Severity
5.3
EPSS
0.08%
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Filter bypass in filtervar (FILTERVALIDATEURL)

1 / 6
Source: Microsoft
First published (updated )
CVE-2024-5458

PHP PHPCommand injection via array-ish $command parameter of proc_open() (bypass CVE-2024-1874 fix)

Risk 59
Severity
8.8
EPSS
0.44%
OS Command Injection, Command Injection
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Command injection via array-ish $command parameter of procopen() (bypass CVE-2024-1874 fix)

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-5585

Microsoft Edge (Chromium-based)Chrome Browser Security Fixes339877167 High Out of bounds write in Streams API330759272 High CVE-2024-5274 Type Confusion in V8

Risk 57
Severity
8.8
EPSS
0.04%
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-5499 Out of bounds write in Streams API

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-5499

Microsoft Edge (Chromium-based)High Out of bounds memory access in Browser UI344608204 High CVE-2024-6100 Type Confusion in V8High CVE-2024-36971 Linux Kernel Vulnerability

Risk 57
Severity
8.8
EPSS
0.04%
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-5497 Out of bounds memory access in Keyboard Inputs

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-5497

Microsoft Edge (Chromium-based)Chrome Browser Security Fixes339877165 High Heap buffer overflow in WebRTC338929744 High CVE-2024-5496 Use after free in Media Session

Risk 57
Severity
8.8
EPSS
0.04%
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-5493 Heap buffer overflow in WebRTC

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-5493

Microsoft Edge (Chromium-based)Inappropriate implementation in Dawn

Risk 57
Severity
8.8
EPSS
0.05%
Code Injection
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-5834 Inappropriate implementation in Dawn

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-5834

Microsoft Edge (Chromium-based)Type Confusion in V8

Risk 57
Severity
8.8
EPSS
0.05%
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-5830 Type Confusion in V8

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-5830

Microsoft Edge (Chromium-based)Type Confusion in V8

Risk 57
Severity
8.8
EPSS
0.05%
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-5833 Type Confusion in V8

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-5833

Microsoft Edge (Chromium-based)Type Confusion in V8

Risk 57
Severity
8.8
EPSS
0.05%
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-5838 Type Confusion in V8

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-5838

Microsoft Edge (Chromium-based)Use after free in Dawn

Risk 57
Severity
8.8
EPSS
0.04%
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-6292 Use after free in Dawn

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-6292

Microsoft Edge (Chromium-based)Type Confusion in V8

Risk 57
Severity
8.8
EPSS
0.05%
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-5837 Type Confusion in V8

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-5837

Microsoft Edge (Chromium-based)Use after free in Dawn

Risk 57
Severity
8.8
EPSS
0.04%
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-6290 Use after free in Dawn

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-6290

Microsoft Edge (Chromium-based)Chrome Browser Security Fixes338908243 High Type Confusion in V8339877165 Critical CVE-2024-5274 Type Confusion in V8

Risk 57
Severity
8.8
EPSS
0.04%
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Chromium: CVE-2024-5158 Type Confusion in V8

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-5158

Microsoft Edge (Chromium-based)Heap buffer overflow in Tab Groups

Risk 57
Severity
8.8
EPSS
0.05%
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-5835 Heap buffer overflow in Tab Groups

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-5835

Microsoft Edge (Chromium-based)Inappropriate Implementation in DevTools

Risk 57
Severity
8.8
EPSS
0.05%
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-5836 Inappropriate Implementation in DevTools

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-5836

Microsoft cbl2 kernel 5.15.186.1-1btrfs: make sure that WRITTEN is set on all metadata blocks

Risk 52
Severity
7.8
EPSS
0.04%
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

btrfs: make sure that WRITTEN is set on all metadata blocks

1 / 5
Source: Microsoft
First published (updated )
CVE-2024-35949

Microsoft Edge (Chromium-based)Google Chromium V8 Type Confusion Vulnerability

Risk 61
Severity
9.6
EPSS
0.35%
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Chromium: CVE-2024-5274 Type Confusion in V8

1 / 4
Source: Microsoft
First published (updated )
CVE-2024-5274

Linux Linux kerneldyndbg: fix old BUG_ON in >control parser

Risk 25
Severity
5.5
EPSS
0.04%
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

In the Linux kernel, the following vulnerability has been resolved:

dyndbg: fix old BUGON in >control parser

Fix a BUGON from 2009. Even if it looks "unreachable" (I didn't really look), lets make sure by removing it, doing prerr and return -EINVAL instead.

1 / 5
Source: NVD
First published (updated )
CVE-2024-35947

Microsoft Edge (Chromium-based)Use after free in PDFium

Risk 57
Severity
8.8
EPSS
0.05%
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-5847 Use after free in PDFium

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-5847

Microsoft Edge (Chromium-based)Use after free in PDFium

Risk 57
Severity
8.8
EPSS
0.05%
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-5846 Use after free in PDFium

1 / 3
Source: Microsoft
First published (updated )
CVE-2024-5846

Microsoft Edge (Chromium-based)Chrome Browser Security Fixes339458194 High Out of bounds write in V8340221135 High CVE-2024-4947 Type Confusion in V8

Risk 59
Severity
8.8
EPSS
0.27%
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2024-4761 Out of bounds write in V8

1 / 4
Source: Microsoft
First published (updated )
CVE-2024-4761

Wireshark WiresharkUse After Free in editcap

Risk 23
Severity
5.5
EPSS
0.04%
Use After Free
AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

Use after free issue in editcap could cause denial of service via crafted capture file

First published (updated )
CVE-2024-4855

Wireshark WiresharkLoop with Unreachable Exit Condition ('Infinite Loop') in Wireshark

Risk 31
Severity
7.5
EPSS
0.04%
AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H

MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file

First published (updated )
CVE-2024-4854

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203