Filters
Versions
2.4-alpha1
6
2.4-alpha2
6
2.2.0
5
2.4-beta1
5
2.4-beta2
5
2.4-beta3
5
2.4-beta4
5
2.4-rc1
4
2.4-rc3
4
2.4-rc4
4
2.4-rc5
4
2.4
3
2.2.28
2
2.3.0
2
2.4.9
2
2.5-alpha1
2
2.5-alpha2
2
2.5-alpha3
2
2.5-alpha4
2
2.5-alpha5
2
2.5-alpha6
2
2.5-beta1
2
2.5-beta2
2
2.5-rc.1
2
2.5-rc.2
2
2.5-rc.3
2
2.5-rc.4
2
2.7.0-alpha1
2
2.7.0-alpha2
2
2.7.0-alpha3
2
2.7.0-beta1
2
2.7.0-beta2
2
2.2.29
1
2.4-rc2
1
2.4-rc6
1
2.4-rc7
1
2.4.7
1
2.5.18
1
2.6.0
1
2.6.0-alpha1
1
2.6.0-alpha2
1
2.6.0-alpha3
1
2.6.0-alpha4
1
2.7.0-beta3
1
Bigbluebutton BigbluebuttonBigBlueButton Blind SSRF When Uploading Presentation (mitigation bypass)
5.6
First published (updated )
Bigbluebutton BigbluebuttonBigBlueButton Stored Cross-site Scripting vulnerability at Guest Lobby
6.3
First published (updated )
Bigbluebutton BigbluebuttonBigBlueButton Path Traversal – Reading Certain File Extensions
5.3
First published (updated )
Bigbluebutton BigbluebuttonBlind SSRF When Uploading Presentation in BigBlueButton
6.5
First published (updated )
Bigbluebutton BigbluebuttonImproper access control to polling votes
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Bigbluebutton BigbluebuttonBigBlueButton contains Response leaks in anonymous polls
5.7
First published (updated )
Bigbluebutton BigbluebuttonBigBlueButton subject to Ineffective user bans
4.3
First published (updated )
Bigbluebutton BigbluebuttonBigBlueButton contains DoS via failed authToken validation
4.3
First published (updated )
Bigbluebutton BigbluebuttonCross site scripting in username that will trigger by sending chat
6.5
First published (updated )
Bigbluebutton BigbluebuttonCross site scripting vulnerability for private chat in bigbluebutton
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Bigbluebutton BigbluebuttonLimited data exposure for shared external videos in BigBlueButton
5.3
First published (updated )
Bigbluebutton BigbluebuttonImproper access control for pencil annotations in BigBlueButton
4.3
First published (updated )
Bigbluebutton BigbluebuttonGrace period for lock settings in public/private chats in BigBlueButton
4.3
First published (updated )
Bigbluebutton BigbluebuttonImproper access control for breakout rooms in BigBlue Button
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Bigbluebutton BigbluebuttonExposure of messages in BigBlueButton public chats
6.5
First published (updated )
Bigbluebutton BigbluebuttonAn issue was discovered in BigBlueButton through 2.2.29. A brute-force attack may occur because an u…
4.3
First published (updated )
Bigbluebutton BigbluebuttonIn BigBlueButton before 2.2.29, a user can vote more than once in a single poll.
4.3
First published (updated )
Bigbluebutton Bigbluebuttonweb/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitiza…
5.3
First published (updated )
Bigbluebutton BigbluebuttonBigBlueButton before 2.3 does not implement LibreOffice sandboxing. This might make it easier for re…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Bigbluebutton BigbluebuttonIn BigBlueButton before 2.2.28 (or earlier), the client-side Mute button only signifies that the ser…
6.5
First published (updated )
Bigbluebutton BigbluebuttonBigBlueButton through 2.2.28 records a video meeting despite the deactivation of video recording in …
5.3
First published (updated )
Bigbluebutton BigbluebuttonBigBlueButton before 2.2.28 (or earlier) does not set the secure flag for the session cookie in an h…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.