Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
bigbluebutton bigbluebutton 2.3.0 vulnerabilities and exploits
(subscribe to this query)
187
VMScore
CVE-2022-31064
BigBlueButton is an open source web conferencing system. Users in meetings with private chat enabled are vulnerable to a cross site scripting attack in affected versions. The attack occurs when the attacker (with xss in the name) starts a chat. in the victim's client the Jav...
Bigbluebutton Bigbluebutton 2.5
Bigbluebutton Bigbluebutton
Bigbluebutton Bigbluebutton 2.3.0
Bigbluebutton Bigbluebutton 2.4.9
383
VMScore
CVE-2022-31065
BigBlueButton is an open source web conferencing system. In affected versions an attacker can embed malicious JS in their username and have it executed on the victim's client. When a user receives a private chat from the attacker (whose username contains malicious JavaScript...
Bigbluebutton Bigbluebutton 2.5
Bigbluebutton Bigbluebutton
Bigbluebutton Bigbluebutton 2.3.0
Bigbluebutton Bigbluebutton 2.4.9
NA
CVE-2023-47107
PILOS is an open source front-end for BigBlueButton servers with a built-in load balancer. The password reset component deployed within PILOS uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sen...
Thm Pilos
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
cross-site scripting
CVE-2024-5158
XML external entity
CVE-2024-4262
CVE-2024-2036
CVE-2024-4985
CVE-2024-21791
remote attackers
CVE-2023-43208
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started