Lucene search
+L

8 matches found

NVD
NVD
•added 2026/04/10 5:17 p.m.•15 views

CVE-2026-35595

Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, the CanUpdate check at pkg/models/projectpermissions.go:139-148 only requires CanWrite on the new parent project when changing parentprojectid. However, Vikunja's permission model uses a recursive CTE that walks up th...

8.3CVSS0.00463EPSS
SaveExploits1References4
Circl
Circl
•added 2026/04/09 9:45 p.m.•17 views

CVE-2026-35595

creationtimestamp| type| source ---|---|--- 2026-04-09 21:45:26+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-2vq4-854f-5c72 2026-04-10 19:30:36+00:00| published-proof-of-concept| Telegram/-hUuw8aTFVWSQYPf3qEKqcT3Zmmt4K4bisrN5sFAqL07rbc 2026-04-...

8.3CVSS8.1AI score0.00463EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/02/14 12:39 a.m.•29 views

CVE-2024-35595

An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file...

6.1CVSS7.8AI score0.00362EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/05/24 1:33 p.m.•21 views

CVE-2024-35595

An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file...

7.8AI score0.00362EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/05/24 1:33 p.m.•54 views

CVE-2024-35595

An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to execute arbitrary code via uploading a crafted PDF file...

7.4AI score0.00362EPSS
SaveExploits0References2
CVE
CVE
•added 2024/05/24 1:33 p.m.•92 views

CVE-2024-35595

The Xintongda OA (collaborative office OA system) version v2023.12.30.1 contains an arbitrary file upload vulnerability within its File Preview function. An attacker can exploit this by uploading a specially crafted PDF file to achieve arbitrary code execution . To mitigate this risk, it is recom...

6.1CVSS8.1AI score0.00362EPSS
SaveExploits0References2
NVD
NVD
•added 2021/10/20 11:17 a.m.•29 views

CVE-2021-35595

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Business Interlink. Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

6.1CVSS0.00823EPSS
SaveExploits0References1
CVE
CVE
•added 2021/10/20 10:50 a.m.•72 views

CVE-2021-35595

Technical details about CVE-2021-35595 are not publicly provided in the supplied documents. Monitor for updates from Oracle and CVE databases for affected versions (8.57–8.59) and remediation.

6.1CVSS5.5AI score0.00823EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder