Lucene search
K

29 matches found

EUVD
EUVD
added 3 days ago6 views

EUVD-2026-33829

eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited only the title...

4.3CVSS5.8AI score0.00027EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 3 days ago7 views

CVE-2026-28511

eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited only the title...

4.3CVSS5.8AI score0.00027EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 3 days ago10 views

PT-2026-45660

eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user performing a numeric reference/search can return results that include resources the requesting user is not authorized to view. The exposed information is limited only the title...

4.3CVSS5.8AI score0.00027EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 9:13 a.m.6 views

CVE-2022-31007

eLabFTW is an electronic lab notebook manager for research teams. Prior to version 4.3.0, a vulnerability allows an authenticated user with an administrator role in a team to assign itself system administrator privileges within the application, or create a new system administrator account. The...

7.2CVSS6.8AI score0.13083EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.3 views

PT-2025-44056

Name of the Vulnerable Software and Affected Versions eLabFTW versions prior to 5.3.0 Description eLabFTW, an electronic lab notebook, allowed the serving of uploaded SVG files inline. Due to SVG’s support for active content, a malicious SVG file could be uploaded and executed when viewed, leadin...

6.8CVSS5.5AI score0.00029EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-19497

Malware in sbrugna...

6.8CVSS5.2AI score0.00324EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-41463

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00225EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-28276

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.04938EPSS
Exploits3References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-25264

Malicious code in bioql PyPI...

8.9CVSS6.6AI score0.00386EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:21 a.m.4 views

CVE-2023-24217

AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability...

8.8CVSS7.1AI score0.04938EPSS
Exploits3References1
OSV
OSV
added 2025/02/14 4:47 p.m.2 views

CVE-2025-25206 Incorrect input validation could allow an authenticated user to read sensitive information

eLabFTW is an open source electronic lab notebook for research labs. Prior to version 5.1.15, an incorrect input validation could allow an authenticated user to read sensitive information, including login token or other content stored in the database. This could lead to privilege escalation if...

8.3CVSS6.6AI score0.00324EPSS
Exploits0References4
CVE
CVE
added 2024/08/15 6:23 p.m.79 views

CVE-2024-25633

CVE-2024-25633 affects eLabFTW, where versions 4.4.0 up to (and not including) 5.0.0 allow regular users to create new, validated accounts within their team. If anonymous access is enabled, unauthenticated users can create accounts in any team. The issue was fixed starting with version 5.0.0 (Feb...

5.4CVSS5.5AI score0.00463EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/03/06 10:15 p.m.11 views

CVE-2023-24217

AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability...

8.8CVSS8.6AI score0.04938EPSS
Exploits3References2
OSV
OSV
added 2023/03/06 10:15 p.m.1 views

CVE-2023-24217

AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability...

8.8CVSS5.8AI score0.04938EPSS
Exploits3References2
Prion
Prion
added 2023/03/06 10:15 p.m.11 views

Arbitrary file deletion

AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability...

6.5CVSS8.6AI score0.04938EPSS
Exploits3References2Affected Software1
CNNVD
CNNVD
added 2023/03/06 12:0 a.m.2 views

AgileBio Electronic Lab Notebook 安全漏洞

AgileBio Electronic Lab Notebook is an editor from AgileBio Electronic. A security vulnerability exists in AgileBio Electronic Lab Notebook version v4.234 that stems from the presence of a local file inclusion vulnerability...

8.8CVSS7.9AI score0.04938EPSS
Exploits3References4
Vulnrichment
Vulnrichment
added 2023/03/06 12:0 a.m.8 views

CVE-2023-24217

AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability...

7.4AI score0.04938EPSS
Exploits3References2
CVE
CVE
added 2023/03/06 12:0 a.m.61 views

CVE-2023-24217

CVE-2023-24217 affects AgileBio Electronic Lab Notebook (Lab Collector) v4.234. Multiple connected sources (Exploit-DB, Red Hat, NVD, PRION, CNNVD) describe a local file inclusion vulnerability that enables an authenticated attacker to execute OS commands (RCE) on the underlying system. Exploit c...

8.8CVSS8.5AI score0.04938EPSS
Exploits3References2Affected Software1
Packet Storm
Packet Storm
added 2023/03/06 12:0 a.m.271 views

Agilebio Lab Collector 4.234 Remote Code Execution

Exploit Title: Agilebio Lab Collector Electronic Lab Notebook Remote Code Execution Date: 2023-02-28 Exploit Author: Anthony Cole Vendor Homepage: https://labcollector.com/labcollector-lims/add-ons/eln-electronic-lab-notebook/ Version: v4.234 Contact: http://twitter.com/acole76 Website:...

0.1AI score0.04938EPSS
Exploits3
CVE
CVE
added 2022/08/01 7:10 p.m.66 views

CVE-2022-31178

CVE-2022-31178 affects the eLabFTW electronic lab notebook. A vulnerability allows a logged-in user to read a template without proper authorization. Red Hat and other sources corroborate the issue and note a fix in version 4.3.4. Affected systems should upgrade to 4.3.4 or later to remediate. If ...

4.3CVSS4.4AI score0.0016EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder