Lucene search
+L

6 matches found

Cvelist
Cvelist
added 2026/02/24 1:2 a.m.29 views

CVE-2026-3050 horilla-opensource horilla Leads global.js cross site scripting

A flaw has been found in horilla-opensource horilla up to 1.0.2. Impacted is an unknown function of the file static/assets/js/global.js of the component Leads Module. This manipulation of the argument Notes causes cross site scripting. The attack is possible to be carried out remotely. The exploi...

5.1CVSS0.00216EPSS
SaveExploits1References6
EUVD
EUVD
added 2026/02/24 12:32 a.m.10 views

EUVD-2026-7457

A vulnerability was detected in horilla-opensource horilla up to 1.0.2. This issue affects the function get of the file horillagenerics/globalsearch.py of the component Query Parameter Handler. The manipulation of the argument prevurl results in open redirect. The attack can be executed remotely...

5.3CVSS4.7AI score0.00377EPSS
SaveExploits1References6
Snyk
Snyk
added 2025/12/12 9:31 p.m.3 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the Objects module. An authenticated attacker with Instance Administrator privileges can execute arbitrary code by submitting specially crafted Groovy scripts through Object Actions or Validations. Remediation...

7.5CVSS7.3AI score0.00389EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/06 6:15 p.m.2 views

DEBIAN-CVE-2021-43784

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a serialization system for specifying the relevant container configuration to the C portion of the code responsible for the based namespace setup of container...

5CVSS6.7AI score0.01677EPSS
SaveExploits1References1
Snyk
Snyk
added 2020/02/25 1:19 p.m.3 views

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview chumper/zipper is a little neat helper for the ZipArchive methods with handy functions. Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip. ZIP Path traversal is possible during extraction due to no validation and sanitization of...

7.7CVSS7.7AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2017/12/13 12:0 a.m.4 views

PT-2017-12914 · Bouncy Castle +1 · Bouncycastle Tls +1

Name of the Vulnerable Software and Affected Versions: BouncyCastle TLS versions prior to 1.0.3 Description: The issue provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated, allowing an attacker to recover the private key from a vulnerable applicatio...

9.8CVSS6.4AI score0.24282EPSS
SaveExploits1References76
Rows per page
Query Builder