Lucene search
K

8 matches found

NVD
NVD
added 2026/04/10 5:17 p.m.1 views

CVE-2026-35595

Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CanUpdate check at pkg/models/projectpermissions.go:139-148 only requires CanWrite on the new parent project when changing parentprojectid. However, Vikunja's permission model uses a recursive CTE that walks up th...

8.3CVSS0.00041EPSS
Exploits1References4
Circl
Circl
added 2026/04/09 9:45 p.m.0 views

CVE-2026-35595

creationtimestamp| type| source ---|---|--- 2026-04-09 21:45:26+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-2vq4-854f-5c72 2026-04-10 19:30:36+00:00| published-proof-of-concept| Telegram/-hUuw8aTFVWSQYPf3qEKqcT3Zmmt4K4bisrN5sFAqL07rbc 2026-04-...

8.3CVSS5.7AI score0.00041EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/02/14 12:39 a.m.7 views

CVE-2024-35595

An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file...

6.1CVSS7.8AI score0.00232EPSS
Exploits0References4
CVE
CVE
added 2024/05/24 1:33 p.m.64 views

CVE-2024-35595

CVE-2024-35595 affects Xintongda OA v2023.12.30.1 with an arbitrary file upload flaw in the File Preview function. The root cause is an upload handling weakness that can let an attacker craft a PDF to execute arbitrary code on the host. The connected PT-2024-26566 entry corroborates the affected ...

6.1CVSS8.1AI score0.00232EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/05/24 1:33 p.m.20 views

CVE-2024-35595

An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file...

7.4AI score0.00232EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/24 1:33 p.m.12 views

CVE-2024-35595

An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file...

7.8AI score0.00232EPSS
Exploits0References2
NVD
NVD
added 2021/10/20 11:17 a.m.14 views

CVE-2021-35595

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Business Interlink. Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

6.1CVSS0.00582EPSS
Exploits0References1
CVE
CVE
added 2021/10/20 10:50 a.m.47 views

CVE-2021-35595

Technical details about CVE-2021-35595 are not publicly provided in the supplied documents. Monitor for updates from Oracle and CVE databases for affected versions (8.57–8.59) and remediation.

6.1CVSS5.5AI score0.00582EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder