Lucene search
K

50 matches found

Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.7 views

PT-2025-50871

Stored cross-site scripting vulnerabilities exist in GroupSession Free edition prior to ver5.3.0, GroupSession byCloud prior to ver5.3.3, and GroupSession ZION prior to ver5.3.2. A logged-in user can prepare a malicious page or URL, and an arbitrary script may be executed on the web browser when...

5.4CVSS6AI score0.00142EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2021-8283

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.01296EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2021-8284

Malicious code in bioql PyPI...

6.1CVSS6.7AI score0.0082EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2021-8201

Malicious code in bioql PyPI...

6.1CVSS5.7AI score0.00871EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2021-8285

Malicious code in bioql PyPI...

6.8CVSS7AI score0.01026EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 9:0 p.m.4 views

CVE-2021-20789

Open redirect vulnerability in GroupSession GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0 allows a remote attacker to redirect a us...

6.1CVSS6.7AI score0.00871EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:9 p.m.13 views

CVE-2021-20876

Path traversal vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows an attacker with an administrative privilege to obtain sensitive information stored in the hierarchy above the directory on...

6.8CVSS6.3AI score0.01026EPSS
Exploits0References1
OSV
OSV
added 2021/12/24 7:15 a.m.7 views

CVE-2021-20874

Incorrect permission assignment for critical resource vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to access arbitrary files on the server and obtain...

7.5CVSS7.3AI score0.01296EPSS
Exploits0References2
OSV
OSV
added 2021/07/30 2:15 p.m.4 views

CVE-2021-20786

Cross-site request forgery CSRF vulnerability in GroupSession GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0 allows a remote attacke...

4.3CVSS5.9AI score0.0045EPSS
Exploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/07/19 12:0 a.m.84 views

JVN#86026700: Multiple vulnerabilities in GroupSession

GroupSession provided by Japan Total System Co.,Ltd. contains multiple vulnerabilities listed below. Cross-site scripting vulnerability CWE-79 - CVE-2021-20785 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

6.1CVSS5.6AI score0.00916EPSS
Exploits0
Rows per page
Query Builder