Lucene search
+L

147 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-32512

Malicious code in bioql PyPI...

4.3CVSS6.6AI score0.00222EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-35481

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00333EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2024-32514

Malicious code in bioql PyPI...

4.3CVSS6.6AI score0.00224EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-13346

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00419EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-19853

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00317EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-36740

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00277EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-29272

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00203EPSS
Exploits0References1
NVD
NVD
added 2025/09/09 2:15 a.m.21 views

CVE-2025-10117

A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetchtasks.php of the component Add New Task. Executing manipulation with the input alert'XSS' can lead to cross site scripting. The attack can be executed remotely. The...

5.4CVSS0.00289EPSS
Exploits1References5
OSV
OSV
added 2025/09/09 2:15 a.m.5 views

CVE-2025-10117

A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetchtasks.php of the component Add New Task. Executing manipulation with the input alert'XSS' can lead to cross site scripting. The attack can be executed remotely. The...

5.4CVSS4.2AI score0.00289EPSS
Exploits1References5
CVE
CVE
added 2025/09/09 1:2 a.m.21 views

CVE-2025-10117

CVE-2025-10117 affects SourceCodester Simple To-Do List System 1.0. The vulnerability is in the Add New Task workflow, specifically the /fetch_tasks.php function, where input manipulation (e.g., ) can trigger a cross-site scripting attack. It is exploitable remotely and the exploit has been publi...

5.4CVSS3.9AI score0.00289EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/09 1:2 a.m.1 views

CVE-2025-10117 SourceCodester Simple To-Do List System Add New Task fetch_tasks.php cross site scripting

A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetchtasks.php of the component Add New Task. Executing manipulation with the input alert'XSS' can lead to cross site scripting. The attack can be executed remotely. The...

5.1CVSS5.4AI score0.00289EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/09/09 12:0 a.m.4 views

SourceCodester Simple To-Do List System 代码注入漏洞

SourceCodester Simple To-Do List System is SourceCodester open source a simple to-do list system . A code injection vulnerability exists in SourceCodester Simple To-Do List System version 1.0, which originates from a cross-site scripting attack due to incorrect manipulation of the file...

5.4CVSS4.8AI score0.00289EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.5 views

PT-2025-36539

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple To-Do List System version 1.0 Description: A weakness exists in SourceCodester Simple To-Do List System that allows for cross site scripting. The issue is located in the /fetch tasks.php file, within the Add New Task...

5.4CVSS3.5AI score0.00289EPSS
Exploits1References8
Microsoft KB
Microsoft KB
added 2025/05/28 12:0 a.m.11 views

May 28, 2025—KB5058499 (OS Build 26100.4202) Preview

None None...

6.1AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 10:14 a.m.9 views

CVE-2024-31376

Cross-Site Request Forgery CSRF vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through = 1.3.1...

4.3CVSS5.9AI score0.00203EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:58 a.m.8 views

CVE-2024-27703

Cross Site Scripting vulnerability in Leantime 3.0.6 allows a remote attacker to execute arbitrary code via the to-do title parameter...

5.4CVSS7.3AI score0.00542EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:35 a.m.16 views

CVE-2024-22292

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Delower WP To Do allows Stored XSS.This issue affects WP To Do: from n/a through 1.2.8...

6.5CVSS6.7AI score0.00317EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:10 a.m.8 views

CVE-2024-3947

The WP To Do plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.0. This is due to missing or incorrect nonce validation on the wptodosettings function. This makes it possible for unauthenticated attackers to modify the plugin's settings via ...

4.3CVSS5.8AI score0.00224EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:10 a.m.6 views

CVE-2024-3945

The WP To Do plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.0. This is due to missing or incorrect nonce validation on the wptodomanage function. This makes it possible for unauthenticated attackers to add new todo items via a forged...

4.3CVSS5.8AI score0.00222EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:48 a.m.6 views

CVE-2024-31402

Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker to delete the data of Shared To-Dos...

4.3CVSS6.6AI score0.00305EPSS
Exploits0References1
Rows per page
Query Builder