EUVD-2021-2494

Malware in sbrugna...

EUVD-2020-0413

Malware in sbrugna...

EUVD-2022-43961

Malicious code in bioql PyPI...

EUVD-2022-0605

Malicious code in bioql PyPI...

EUVD-2022-3579

Malicious code in bioql PyPI...

CVE-2024-36676

Incorrect access control in BookStack before v24.05.1 allows attackers to confirm existing system users and perform targeted notification email DoS via public facing forms...

CVE-2022-40690

Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary script...

CVE-2021-3915

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2021-3944

bookstack is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3916

bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2021-3906

bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2021-3874

bookstack is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2021-3768

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4119

bookstack is vulnerable to Improper Access Control...

CVE-2021-3758

bookstack is vulnerable to Server-Side Request Forgery SSRF...

CVE-2021-4194

bookstack is vulnerable to Improper Access Control...

CVE-2021-4026

bookstack is vulnerable to Improper Access Control...

CVE-2021-3767

bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2020-11055

In BookStack greater than or equal to 0.18.0 and less than 0.29.2, there is an XSS vulnerability in comment creation. A user with permission to create comments could POST HTML directly to the system to be saved in a comment, which would then be executed/displayed to others users viewing the...

CVE-2017-1000462

BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result in disruption of service and execution of javascript code...