Lucene search
+L

25 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:32 p.m.•23 views

CVE-2026-6225

The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'projectsearch' parameter in all versions up to, and including, 5.0.6 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS5.7AI score0.00379EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/14 7:16 a.m.•90 views

CVE-2026-6225

The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'projectsearch' parameter in all versions up to, and including, 5.0.6 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS0.00379EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/14 6:44 a.m.•54 views

EUVD-2026-30251

The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'projectsearch' parameter in all versions up to, and including, 5.0.6 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS5.9AI score0.00379EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/14 6:44 a.m.•82 views

CVE-2026-6225 Taskbuilder – Project Management & Task Management Tool With Kanban Board <= 5.0.6 - Authenticated (Subscriber+) Time-Based Blind SQL Injection via 'project_search' Parameter

The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'projectsearch' parameter in all versions up to, and including, 5.0.6 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS0.00379EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/14 6:44 a.m.•46 views

CVE-2026-6225

The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'projectsearch' parameter in all versions up to, and including, 5.0.6 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS5.9AI score0.00379EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/14 6:44 a.m.•39 views

CVE-2026-6225

The CVE concerns the WordPress plugin Taskbuilder – Project Management & Task Management Tool With Kanban Board . It is vulnerable to a time-based blind SQL Injection via the 'project_search' parameter in all versions up to and including 5.0.6 , caused by insufficient escaping and inadequate prep...

6.5CVSS5.7AI score0.00379EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/14 12:00 a.m.•19 views

WordPress plugin Taskbuilder SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.5CVSS5.9AI score0.00379EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/14 12:00 a.m.•31 views

PT-2026-40888

The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'project search' parameter in all versions up to, and including, 5.0.6 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS5.9AI score0.00379EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-18958

Malware in sbrugna...

4.3CVSS5.7AI score0.01216EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2020-26411

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x =13.4 to =13.5 to =13.6 to =13.4 to =13.5 to =13.6 to 13.6.2. Using ...

4.3CVSS5.1AI score0.01216EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/05/17 12:00 a.m.•27 views

GitLab 13.4 < 13.4.7 / 13.5 < 13.5.5 / 13.6 < 13.6.2 (CVE-2020-26411)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x =13.4 to =13.5 to =13.6 to =13.4 to =13.5 to =13.6 to 13.6.2. Using a specific query name for a project sear...

4.3CVSS5.2AI score0.01216EPSS
SaveExploits0References3
NVD
NVD
•added 2020/12/11 5:15 a.m.•29 views

CVE-2020-26411

A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x =13.4 to =13.5 to =13.6 to 13.6.2. Using a specific query name for a project search can cause statement timeouts that can lead to a potential DOS if abused...

4.3CVSS4.5AI score0.01216EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2020/12/11 5:15 a.m.•20 views

UBUNTU-CVE-2020-26411

A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x =13.4 to =13.5 to =13.6 to 13.6.2. Using a specific query name for a project search can cause statement timeouts that can lead to a potential DOS if abused...

4.3CVSS5.8AI score0.01216EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2020/12/11 5:15 a.m.•30 views

CVE-2020-26411

A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x =13.4 to =13.5 to =13.6 to 13.6.2. Using a specific query name for a project search can cause statement timeouts that can lead to a potential DOS if abused...

4.3CVSS5.8AI score0.01216EPSS
SaveExploits0References4
Mend
Mend
•added 2020/12/11 4:09 a.m.•4 views

CVE-2020-26411

A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x =13.4 to =13.5 to =13.6 to 13.6.2. Using a specific query name for a project search can cause statement timeouts that can lead to a potential DOS if abused...

5.3CVSS0.01216EPSS
SaveExploits0References3
CVE
CVE
•added 2020/12/11 4:09 a.m.•118 views

CVE-2020-26411

CVE-2020-26411 affects GitLab versions 13.4.x (&gt;=13.4 to =13.5 to =13.6 to

4.3CVSS4.6AI score0.01216EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2020/12/11 4:09 a.m.•72 views

CVE-2020-26411

Removed by vendor...

4.3CVSS5.8AI score0.01216EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/11 12:00 a.m.•4 views

CVE-2020-26411: Improper Resource Shutdown or Release

A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x =13.4 to =13.5 to =13.6 to 13.6.2. Using a specific query name for a project search can cause statement timeouts that can lead to a potential DOS if abused...

4.3CVSS5.7AI score0.01216EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/12/11 12:00 a.m.•12 views

PT-2020-16417 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: Gitlab versions 13.4.x through 13.4.7 Gitlab versions 13.5 through 13.5.5 Gitlab versions 13.6 through 13.6.2 Description: A potential DOS issue was discovered in Gitlab. It can be triggered by using a specific query name for a project search...

4.3CVSS4.3AI score0.01216EPSS
SaveExploits0References10
Veracode
Veracode
•added 2020/12/09 8:59 a.m.•28 views

Denial Of Service (DoS)

gitlab is vulnerable to denial of service. An attacker is able to cause a denial of service condition in the application using a specific query name for a project search which will cause statement timeouts...

4.3CVSS3.1AI score0.01216EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder