BigBlueButton is an open-source virtual classroom designed to help teachers teach and learners learn. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Privilege Escalation
NVD
GitHub
CVSS 3.1
3.7
EPSS
0.5%
Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. Rated low severity (CVSS 3.6). No vendor patch available.
Information Disclosure
NVD
GitHub
CVSS 3.1
3.6
EPSS
0.1%
Kavita is a cross platform reading server. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
RCE
XSS
NVD
GitHub
CVSS 3.1
3.5
EPSS
0.5%
In Helix ALM versions prior to 2024.2.0, a local command injection was identified. Rated low severity (CVSS 2.0). No vendor patch available.
Code Injection
Command Injection
RCE
NVD
CVSS 4.0
2.0
EPSS
0.6%