Vulnerabilities (CVE)

Filtered by CWE-273
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-37839 1 Apache 1 Superset 2022-07-14 4.0 MEDIUM 4.3 MEDIUM
Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics.
CVE-2021-3982 1 Gnome 1 Gnome-shell 2022-05-11 2.1 LOW 5.5 MEDIUM
Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege permissions, may take advantage of the way CAP_SYS_NICE is currently implemented and eventually load code to increase its process scheduler priority leading to possible DoS of other services running in the same machine.
CVE-2019-14879 1 Moodle 1 Moodle 2020-03-31 5.5 MEDIUM 5.4 MEDIUM
A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the associated capabilities were not being revoked (where applicable).