10 matches found
CVE-2026-107045
Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 versionCode 62 allows unauthorized attackers to arbitrarily read another's Nostr event database...
EUVD-2026-113268
Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 versionCode 62 allows unauthorized attackers to arbitrarily read another's Nostr event database...
CVE-2026-107045
The Citrine application (v3.1.0, versionCode 62) contains a vulnerability in the CitrineContentProvider component due to insecure permissions . This flaw allows an unauthorized attacker to arbitrarily read another user's Nostr event database . No specific remediation or exploit details are provid...
EUVD-2008-2520
Malware in sbrugna...
CVE-2008-2525
Cross-site scripting XSS vulnerability in the Event Database aka rlmpeventdb extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Event Database aka rlmpeventdb extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-2525
CVE-2008-2525 affects the Event Database (rlmp_eventdb) extension for TYPO3, with versions before 1.1.2 vulnerable to cross-site scripting (XSS). The vulnerability is remote and allows injection of arbitrary web script or HTML via unspecified vectors; the underlying root cause is not detailed in ...
CVE-2008-2525
Cross-site scripting XSS vulnerability in the Event Database aka rlmpeventdb extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-2525: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Event Database aka rlmpeventdb extension before 1.1.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross Site Scripting vulnerability in extension Event Database (rlmp_eventdb)
It has been discovered that the extension Event Database rlmpeventdb is susceptible to Cross Site Scripting XSS attacks. Component Type: Third party extension. This extension is not part of the TYPO3 default installation. Affected Versions: Version 1.1.1 and below Vulnerability Type: Cross Site...