Medium
CVSS: 6.5
Tanium addressed an uncontrolled resource consumption vulnerability in Tanium Server.
Medium
CVSS: 4.3
Tanium addressed an improper access controls vulnerability in Tanium Server.
Medium
CVSS: 5.4
An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens…
High
CVSS: 7.3
A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via crafted Display Name.
High
CVSS: 8.7
A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813. The injected payload is stored via the meeting_room parameter and executed w…