Skip to main content

Thm

4 CVEs vendor

Monthly

CVE-2026-22800 Jan 12, 23:15 LOW PATCH Monitor

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. Prior to 4.10.0, Cross-Site Request Forgery (CSRF) vulnerability exists in an administrative API endpoint responsible for terminating all active video conferences on a single server. [CVSS 2.4 LOW]

CSRF Pilos Thm
NVD GitHub
CVSS 3.1
2.4
EPSS
0.0%
CVE-2023-47107 Nov 08, 16:15 HIGH This Week

PILOS is an open source front-end for BigBlueButton servers with a built-in load balancer. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Pilos Thm
NVD GitHub
CVSS 3.1
8.8
EPSS
0.6%
CVE-2023-37468 Jul 13, 21:15 MEDIUM PATCH This Month

Feedbacksystem is a personalized feedback system for students using artificial intelligence. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Feedbacksystem Thm
NVD GitHub
CVSS 3.1
5.5
EPSS
0.2%
CVE-2023-27485 Mar 07, 19:15 MEDIUM PATCH This Month

thmmniii/fbs-core is an open source feedback system for students. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Incorrect Authorization vulnerability could allow attackers to bypass authorization checks to access restricted resources.

Authentication Bypass Feedbacksystem Thm
NVD GitHub
CVSS 3.1
4.3
EPSS
0.5%
EPSS 0% CVSS 2.4
LOW PATCH Monitor

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton. Prior to 4.10.0, Cross-Site Request Forgery (CSRF) vulnerability exists in an administrative API endpoint responsible for terminating all active video conferences on a single server. [CVSS 2.4 LOW]

CSRF Pilos Thm
NVD GitHub
EPSS 1% CVSS 8.8
HIGH This Week

PILOS is an open source front-end for BigBlueButton servers with a built-in load balancer. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Pilos Thm
NVD GitHub
EPSS 0% CVSS 5.5
MEDIUM PATCH This Month

Feedbacksystem is a personalized feedback system for students using artificial intelligence. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Feedbacksystem Thm
NVD GitHub
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

thmmniii/fbs-core is an open source feedback system for students. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Incorrect Authorization vulnerability could allow attackers to bypass authorization checks to access restricted resources.

Authentication Bypass Feedbacksystem Thm
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy