Advisories · Technology
TrueConf Server.
Every CVE that names TrueConf Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
Incorrect default permissions in TrueConf Server
- TrueConf Server
- Broken access control
- CVSS 9.5 CriticalCritical · KEV, CVSS 9+KEV
Code injection in TrueConf Server
- TrueConf Server
- Code injection
- CVSS 9.3 CriticalCritical · KEV, CVSS 9+KEV
Missing authentication in TrueConf Server
- TrueConf Server
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
SQL injection in TrueConf Server
- TrueConf Server
- SQL injection
- CVSS 8.8 High
SQL injection in TrueConf Server
- TrueConf Server
- SQL injection
- CVSS 4.3 Medium
TrueConf Server cross-site request forgery
- TrueConf Server
- Cross-site request forgery (CSRF)
- CVSS 3.5 Low
TrueConf Server change-lang redirect
- TrueConf Server
- Open redirect
- CVSS 3.5 Low
TrueConf Server DOM cross site scripting
- TrueConf Server
- Cross-site scripting (XSS)
- CVSS 3.5 Low
TrueConf Server group DOM cross site scripting
- TrueConf Server
- Cross-site scripting (XSS)
- CVSS 3.5 Low
TrueConf Server Reflected cross site scripting
- TrueConf Server
- Cross-site scripting (XSS)
- CVSS 3.5 Low
TrueConf Server Reflected cross site scripting
- TrueConf Server
- Cross-site scripting (XSS)
- CVSS 3.5 Low
TrueConf Server Reflected cross site scripting
- TrueConf Server
- Cross-site scripting (XSS)
- CVSS 3.5 Low
TrueConf Server Stored cross site scripting
- TrueConf Server
- Cross-site scripting (XSS)