126 matches found
CVE-2026-82582
An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature...
CVE-2026-81635
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...
CVE-2026-82582
An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature...
CVE-2026-82582
An authorization bypass vulnerability in SHIRASAGI groupware allows an attacker with low privileges to retrieve files from the shared file feature by manipulating a user-controlled key. The root cause is the reliance on a user-supplied key for access control in the shared file module, enabling un...
EUVD-2026-75272
An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature...
CVE-2026-81635
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...
CVE-2026-81635
SHIRASAGI by Security Science is affected by a cross-site scripting (XSS) vulnerability that may allow an attacker to execute arbitrary script in the web browser of a user who accesses a website using the product. The CNA (JPCERT) assigns a MEDIUM severity (CVSS 3.0 base score 5.4; CVSS 4.0 base ...
EUVD-2026-75271
A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...
EUVD-2020-26768
Malware in sbrugna...
EUVD-2019-15577
Malware in sbrugna...
EUVD-2023-26590
Malicious code in bioql PyPI...
EUVD-2022-46497
Malicious code in bioql PyPI...
EUVD-2023-40441
Malicious code in bioql PyPI...
EUVD-2023-42368
Malicious code in bioql PyPI...
EUVD-2023-43171
Malicious code in bioql PyPI...
EUVD-2023-26588
Malicious code in bioql PyPI...
EUVD-2022-46479
Malicious code in bioql PyPI...
EUVD-2022-33823
Malicious code in bioql PyPI...
CVE-2023-22427
Stored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and earlier versions allows a remote attacker with an administrative privilege to inject an arbitrary script...
CVE-2023-41889
SHIRASAGI is a Content Management System. Prior to version 1.18.0, SHIRASAGI is vulnerable to a Post-Unicode normalization issue. This happens when a logical validation or a security check is performed before a Unicode normalization. The Unicode character equivalent of a character would resurface...