| CVE-2026-49488 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OpenMeetings
|
Non notée
|
14 juil. 2026 |
| CVE-2026-33005 |
Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings
|
Non notée
|
9 avr. 2026 |
| CVE-2026-33266 |
Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings
|
Non notée
|
9 avr. 2026 |
| CVE-2026-34020 |
Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings
|
Non notée
|
9 avr. 2026 |
| CVE-2024-54676 |
Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.1.0 before 8.0.0 Description:…
|
Non notée
|
8 janv. 2025 |
| CVE-2023-28936 |
Attacker can access arbitrary recording/room Vendor: The Apache Software Foundation Versions Affected: Apache…
|
Non notée
|
12 mai 2023 |
| CVE-2023-29032 |
An attacker that has gained access to certain private information can use this to act as other user
|
Non notée
|
12 mai 2023 |
| CVE-2023-29246 |
An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache…
|
Non notée
|
12 mai 2023 |
| CVE-2023-28326 |
Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.0.0 Description:…
|
Non notée
|
28 mars 2023 |
| CVE-2021-27576 |
If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server
|
Non notée
|
15 mars 2021 |
| CVE-2018-1286 |
In Apache OpenMeetings 3.0.0 - 4.0.1, CRUD operations on privileged users are not password protected allowing an…
|
Non notée
|
28 févr. 2018 |
| CVE-2016-8736 |
Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack
|
Non notée
|
12 oct. 2017 |
| CVE-2017-7681 |
Apache OpenMeetings 1.0.0 is vulnerable to SQL injection
|
Non notée
|
14 juil. 2017 |
| CVE-2017-7680 |
Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file
|
Non notée
|
14 juil. 2017 |
| CVE-2017-7688 |
Apache OpenMeetings 1.0.0 updates user password in insecure manner
|
Non notée
|
14 juil. 2017 |
| CVE-2017-7666 |
Apache OpenMeetings 1.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks, XSS attacks, click-jacking, and…
|
Non notée
|
14 juil. 2017 |
| CVE-2017-7685 |
Apache OpenMeetings 1.0.0 responds to the following insecure HTTP methods: PUT, DELETE, HEAD, and PATCH
|
Non notée
|
14 juil. 2017 |
| CVE-2017-7684 |
Apache OpenMeetings 1.0.0 doesn't check contents of files being uploaded
|
Non notée
|
14 juil. 2017 |
| CVE-2017-7683 |
Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure
|
Non notée
|
14 juil. 2017 |
| CVE-2017-7664 |
Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0
|
Non notée
|
14 juil. 2017 |
| CVE-2017-7673 |
Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget…
|
Non notée
|
14 juil. 2017 |
| CVE-2017-7682 |
Apache OpenMeetings 3.2.0 is vulnerable to parameter manipulation attacks, as a result attacker has access to restricted…
|
Non notée
|
14 juil. 2017 |
| CVE-2017-7663 |
Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0
|
Non notée
|
14 juil. 2017 |