Lucene search
+L

619 matches found

CNNVD
CNNVD
added 2025/11/11 12:00 a.m.10 views

FairSketch Rise Ultimate Project Manager and CRM 跨站脚本漏洞

FairSketch Rise Ultimate Project Manager and CRM is a team management and customer relationship management system from FairSketch. A cross-site scripting vulnerability exists in FairSketch Rise Ultimate Project Manager and CRM version 3.8.1, which stems from insufficient validation of user input...

5.4CVSS6.2AI score0.00163EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/03 9:19 p.m.11 views

CVE-2025-63293

FairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions. A remote authenticated user can append comments or upload attachments to tickets for which they lack view or edit authorization, due to missing authorization checks in the ticketing/commenting API...

6.5CVSS0.00351EPSS
SaveExploits1References1
CVE
CVE
added 2025/11/03 12:00 a.m.21 views

CVE-2025-63293

Product: FairSketch Rise Ultimate Project Manager & CRM 3.9.4. Vulnerability: Insecure Permissions in the ticketing/commenting API, allowing a remote authenticated user to append comments or upload attachments to tickets they should not view/edit due to missing authorization checks. Impact (per s...

6.5CVSS6.5AI score0.00351EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/11/03 12:00 a.m.11 views

FairSketch Rise Ultimate Project Manager and CRM 安全漏洞

FairSketch Rise Ultimate Project Manager and CRM is a team management and customer relationship management system from FairSketch. A security vulnerability exists in FairSketch Rise Ultimate Project Manager and CRM version 3.9.4, which stems from a lack of authorization checking in the ticket...

6.5CVSS6.7AI score0.00351EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/10/13 5:29 a.m.19 views

CVE-2025-60378

Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...

8.1CVSS7.2AI score0.01007EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/10 3:16 p.m.10 views

CVE-2025-60378

Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...

8.1CVSS5.9AI score0.01007EPSS
SaveExploits1References2
CVE
CVE
added 2025/10/10 12:00 a.m.36 views

CVE-2025-60378

CVE-2025-60378 affects RISE Ultimate Project Manager & CRM. A stored HTML injection allows authenticated users to inject arbitrary HTML into invoices and messages, with injected content rendering in emails, PDFs, and messaging/chat modules sent to clients or team members. This enables phishing, c...

8.1CVSS6.8AI score0.01007EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2025/10/10 12:00 a.m.19 views

CVE-2025-60378

Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...

0.01007EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/10/10 12:00 a.m.10 views

CVE-2025-60378

Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and messages. Injected content renders in emails, PDFs, and messaging/chat modules sent to clients or team members, enabling phishing, credential theft, and business emai...

6.8AI score0.01007EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2017-2815

Malware in sbrugna...

5.4CVSS5.5AI score0.00658EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2021-23402

Malware in sbrugna...

5.4CVSS5.5AI score0.00618EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2017-9141

Malware in sbrugna...

9.8CVSS9.4AI score0.03344EPSS
SaveExploits5References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-8572

Malware in sbrugna...

8.8CVSS8.7AI score0.00659EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2017-2816

Malware in sbrugna...

5.4CVSS5.5AI score0.00802EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2010-5182

Malware in sbrugna...

6.9CVSS6.4AI score0.00347EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2018-10146

Malware in sbrugna...

5.4CVSS5.4AI score0.01643EPSS
SaveExploits6References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-40620

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.0072EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2023-53768

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00385EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2024-51743

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00506EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2025-9774

Malicious code in bioql PyPI...

8.8CVSS9AI score0.00172EPSS
SaveExploits0References2
Rows per page
Query Builder