Scoold: Open Redirect in getBackToUrl() allows phishing via domain-prefix startsWith bypass
cve-program ·
Vendor product: scoold
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
cve-program ·
Vendor product: scoold
cve-program ·
Vendor product: MessagePack-CSharp
cve-program ·
https://github.com: pfSense CE
cve-program ·
https://github.com: pfSense CE
cve-program ·
https://github.com: pfSense CE
cve-program ·
https://github.com: pfSense CE
cve-program ·
https://wordpress.org/plugins: strong-testimonials
cve-program ·
https://wordpress.org/plugins: elex-bulk-edit-products-prices-attributes-for-woocommerce-basic
cve-program ·
Vendor product: github.com/rancher/steve
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: Matrimonial System
cve-program ·
https://github.com: adplug
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: runwasi
cve-program ·
Vendor product: GYM-One
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
https://github.com: catdoc
cve-program ·
Vendor product: Firefox · Vendor product: Thunderbird
cve-program ·
Vendor product: joserfc
cve-program ·
Vendor product: http-server
cve-program ·
https://github.com: libxmp
cve-program ·
https://github.com: pfSense CE
cve-program ·
https://github.com: pfSense CE
cve-program ·
https://github.com: pfSense CE
cve-program ·
https://github.com: libinstpatch
cve-program ·
Vendor product: dolibarr
cve-program ·
https://github.com/gdraheim/zziplib: zziplib
cve-program ·
https://github.com: fluidsynth
cve-program ·
https://github.com: assimp
cve-program ·
https://github.com/Yeraze/ytnef: ytnef
cve-program ·
https://github.com: libfsapfs
cve-program ·
https://github.com/netsurf-browser/libnsbmp: libnsbmp
cve-program ·
https://github.com/ansilove/libansilove: libansilove
cve-program ·
https://github.com: pfSense CE
cve-program ·
https://github.com: game-music-emu
cve-program ·
https://github.com/EarthScope/libmseed: libmseed
cve-program ·
https://github.com: WildMIDI
cve-program ·
Vendor product: libredesk
cve-program ·
https://github.com: libsidplayfp
cve-program ·
https://github.com: OpenJPH
cve-program ·
https://github.com/sezero/libtimidity: libtimidity
cve-program ·
Vendor product: RE190 v5 · Vendor product: RE200 v5 · Vendor product: RE205 v4
cve-program ·
https://catalog.redhat.com/software/containers/: busybox-main
cve-program ·
https://github.com: libADLMIDI
cve-program ·
Vendor product: SageMaker Python SDK
cve-program ·
https://github.com: libmikmod
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.