Lucene search
+L

426 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2019-0124

Malware in sbrugna...

6.1CVSS6.1AI score0.01568EPSS
Exploits1References11
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-38143

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00441EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-40070

Malicious code in bioql PyPI...

6.4CVSS6.5AI score0.00371EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2022-3443

Malicious code in bioql PyPI...

5.5CVSS6.3AI score0.02322EPSS
Exploits0References12
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-0158

Malicious code in bioql PyPI...

5.4CVSS6.3AI score0.00286EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.13 views

EUVD-2025-21265

Malicious code in bioql PyPI...

6.4CVSS6.3AI score0.00184EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-53865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates devel and responsive. CVE-2025-53865 Note that Nessus relies on...

6.4CVSS5.4AI score0.00184EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2024-39124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundup before 2.4.0, classhelpers generic.help.html allow XSS. CVE-2024-39124 Note that Nessus relies on the presence of the package as reported by the...

6.1CVSS5.5AI score0.00289EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-39125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header. CVE-2024-39125 Note that Nessus relies on the presence of the package as reporte...

5.4CVSS5.4AI score0.00286EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-39126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents. CVE-2024-39126 Note that Nessus relies on the presence of the package as reported...

5.4CVSS5.3AI score0.00324EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/07/15 12:21 a.m.9 views

CVE-2025-53865

In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates devel and responsive...

6.4CVSS6.3AI score0.00184EPSS
Exploits0References1
OSV
OSV
added 2025/07/13 9:30 p.m.10 views

GHSA-QXH9-QMF2-RHWC Roundup is vulnerable to XSS through interactions between URLs and issue tracker templates

In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates devel and responsive...

6.4CVSS5.5AI score0.00184EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2025/07/13 9:30 p.m.15 views

Roundup is vulnerable to XSS through interactions between URLs and issue tracker templates

In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates devel and responsive...

6.4CVSS5.7AI score0.00184EPSS
Exploits0References7Affected Software1
PyPA
PyPA
added 2025/07/13 8:15 p.m.11 views

PYSEC-2025-69

In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates devel and responsive...

6.4CVSS6.5AI score0.00184EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2025/07/13 8:15 p.m.11 views

CVE-2025-53865

In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates devel and responsive...

6.4CVSS0.00184EPSS
Exploits0References2
Snyk
Snyk
added 2025/07/13 8:15 p.m.6 views

Cross-site Scripting (XSS)

Overview roundup is a simple-to-use and -install issue-tracking system with command-line, web and e-mail interfaces. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the interaction between URLs and issue tracker templates. An attacker can execute arbitrary scripts...

6.4CVSS5.4AI score0.00184EPSS
Exploits0References2
OSV
OSV
added 2025/07/13 8:15 p.m.12 views

PYSEC-2025-69

In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates devel and responsive...

6.4CVSS6.2AI score0.00184EPSS
Exploits0References3
OSV
OSV
added 2025/07/13 8:15 p.m.6 views

UBUNTU-CVE-2025-53865

In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates devel and responsive...

6.4CVSS5.8AI score0.00184EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/07/13 12:0 a.m.6 views

Roundup 跨站脚本漏洞

Roundup is an open source command line, web and email issue tracking system from Roundup. The system provides bug tracking, customer help desk and issue management. A cross-site scripting vulnerability exists in versions prior to Roundup 2.5.0, which stems from improper URL and template...

6.4CVSS5.9AI score0.00184EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/07/13 12:0 a.m.5 views

CVE-2025-53865

In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates devel and responsive...

6.4CVSS5.9AI score0.00184EPSS
Exploits0References2
Rows per page
Query Builder