Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Priority LOW 34

"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00309 Published 2021-02-23 Fixed in 4.2.13, 6.4.3 CWE-269
Priority LOW 29

The WOPI API integration for Vereign Collabora CODE through 4.2.2 does not properly restrict delivery of JavaScript to a victim's browser, and lacks proper MIME type access control, which could lead to XSS that steals ac…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00866 Published 2020-07-21 No fix listed CWE-79