Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-1920

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.00935EPSS
Exploits2References7
RedhatCVE
RedhatCVE
added 2025/06/11 12:6 a.m.3 views

CVE-2025-45055

Silverpeas 6.4.2 contains a stored cross-site scripting XSS vulnerability in the event management module. An authenticated user can upload a malicious SVG file as an event attachment, which, when viewed by an administrator, executes embedded JavaScript in the admin's session. This allows attacker...

5.4CVSS5.3AI score0.00261EPSS
Exploits1References1
NVD
NVD
added 2025/06/09 4:15 p.m.5 views

CVE-2025-45055

Silverpeas 6.4.2 contains a stored cross-site scripting XSS vulnerability in the event management module. An authenticated user can upload a malicious SVG file as an event attachment, which, when viewed by an administrator, executes embedded JavaScript in the admin's session. This allows attacker...

5.4CVSS0.00261EPSS
Exploits1References2
CVE
CVE
added 2025/06/09 12:0 a.m.40 views

CVE-2025-45055

Silverpeas 6.4.2 is affected in the Event Management module by a stored XSS flaw: an authenticated user can upload a malicious SVG as an event attachment, and when an administrator views it, embedded JavaScript can run in the admin session. This stems from insufficient sanitization of SVG files a...

5.4CVSS5.9AI score0.00261EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/06/09 12:0 a.m.3 views

PT-2025-24500 · Unknown · Silverpeas

Name of the Vulnerable Software and Affected Versions: Silverpeas version 6.4.2 Description: The issue is a stored cross-site scripting XSS vulnerability in the event management module. An authenticated user can upload a malicious SVG file as an event attachment, which, when viewed by an...

5.4CVSS5.3AI score0.00261EPSS
Exploits1References7
GithubExploit
GithubExploit
added 2025/04/14 10:51 a.m.114 views

Exploit for CVE-2025-46047

CVE-2025-46047 Silverpeas -u Example...

7.2AI score0.00331EPSS
Exploits3
Cvelist
Cvelist
added 2025/01/03 12:0 a.m.13 views

CVE-2024-48814

SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewType parameter of the findbywhereclause function...

0.00523EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/01/03 12:0 a.m.7 views

CVE-2024-48814

SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewType parameter of the findbywhereclause function...

7.7AI score0.00523EPSS
Exploits1References3
OSV
OSV
added 2024/08/16 7:15 p.m.6 views

CVE-2024-42849

An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function...

6.5CVSS7.3AI score0.01261EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/08/16 12:0 a.m.15 views

CVE-2024-42849

An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function...

7.1AI score0.01261EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/08/16 12:0 a.m.2 views

Silverpeas 安全漏洞

Silverpeas is a suite of open source business collaboration platforms from Silverpeas Open Source. The platform includes applications for project management, blogs, forums, and document management. A security vulnerability exists in Silverpeas v6.4.2 and earlier versions that stems from a problem...

9.8CVSS6.5AI score0.015EPSS
Exploits1References3
Rows per page
Query Builder