Lucene search
+L

7 matches found

EUVD
EUVD
•added 2026/10/16 12:31 a.m.•10 views

EUVD-2026-102490

ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users to read and overwrite other users' comments by supplying an arbitrary actionID. Attackers can iterate sequential action ids to modify comments on bugs, stories, tasks, and...

5.4CVSS6AI score0.00239EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/15 9:43 p.m.•3 views

CVE-2026-111346 ZenTao PMS through 22.6 Authorization Bypass via action::editComment

ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users to read and overwrite other users' comments by supplying an arbitrary actionID. Attackers can iterate sequential action ids to modify comments on bugs, stories, tasks, and...

5.3CVSS6AI score
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2006-1786

Malware in sbrugna...

2.6CVSS6.4AI score0.12123EPSS
SaveExploits3References10
NVD
NVD
•added 2006/04/13 10:02 p.m.•36 views

CVE-2006-1786

Cross-site scripting XSS vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web script or HTML via 1 the actionID parameter in ads-readerext and 2 the op parameter in AlterCast. NOTE: it is not clear whether the vendor advisory addresses...

2.6CVSS5.7AI score0.12123EPSS
SaveExploits3References9
Prion
Prion
•added 2006/04/13 10:02 p.m.•41 views

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web script or HTML via 1 the actionID parameter in ads-readerext and 2 the op parameter in AlterCast. NOTE: it is not clear whether the vendor advisory addresses...

2.6CVSS6AI score0.12123EPSS
SaveExploits3References9Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/13 12:00 a.m.•11 views

CVE-2006-1786: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web script or HTML via 1 the actionID parameter in ads-readerext and 2 the op parameter in AlterCast. NOTE: it is not clear whether the vendor advisory addresses...

2.6CVSS5.9AI score0.12123EPSS
SaveExploits3References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/13 12:00 a.m.•14 views

CVE-2006-1627: Undefined Security Weakness

Adobe Document Server for Reader Extensions 6.0 does not provide proper access control, which allows remote authenticated users to perform privileged actions by modifying the 1 actionID and 2 pageID parameters. NOTE: due to an error during reservation, this identifier was inadvertently associated...

7.5CVSS5.9AI score0.04263EPSS
SaveExploits0References1
Rows per page
Query Builder