Lucene search
+L

9 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2021-8668

Malicious code in bioql PyPI...

6.8CVSS5.7AI score0.00886EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/05/22 9:31 p.m.•19 views

CVE-2021-21319

Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript code can be stored to be displayed later on self subscription page. The self subscription feature can be disabled as a workaround this is the default state...

6.8CVSS6.7AI score0.00886EPSS
SaveExploits0References1
OSV
OSV
•added 2021/10/25 4:15 p.m.•23 views

CVE-2021-21319

Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript code can be stored to be displayed later on self subscription page. The self subscription feature can be disabled as a workaround this is the default state...

5.4CVSS6.8AI score
SaveExploits0References5
Prion
Prion
•added 2021/10/25 4:15 p.m.•25 views

Session fixation

Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript code can be stored to be displayed later on self subscription page. The self subscription feature can be disabled as a workaround this is the default state...

3.5CVSS5.5AI score0.00886EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2021/10/25 4:15 p.m.•30 views

UBUNTU-CVE-2021-21319

Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript code can be stored to be displayed later on self subscription page. The self subscription feature can be disabled as a workaround this is the default state...

6.8CVSS6.1AI score0.00886EPSS
SaveExploits0References2
Mend
Mend
•added 2021/10/25 4:00 p.m.•2 views

CVE-2021-21319

Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript code can be stored to be displayed later on self subscription page. The self subscription feature can be disabled as a workaround this is the default state...

8.2CVSS0.00886EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/10/25 12:00 a.m.•6 views

PT-2021-14416

Name of the Vulnerable Software and Affected Versions Galette versions prior to 0.9.5 Description Galette is a membership management web application geared towards non-profit organizations. In affected versions, malicious javascript code can be stored to be displayed later on the self-subscriptio...

6.8CVSS0.00886EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/25 12:00 a.m.•5 views

CVE-2021-21319: Improper Neutralization of Input During Web Page Generation

Galette is a membership management web application geared towards non profit organizations. In versions prior to 0.9.5, malicious javascript code can be stored to be displayed later on self subscription page. The self subscription feature can be disabled as a workaround this is the default state...

6.8CVSS5.7AI score0.00886EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/10/25 12:00 a.m.•19 views

Galette 跨站脚本漏洞

Galette is open source a membership management web application for non-profit organizations. Galette suffers from a cross-site scripting vulnerability in versions prior to 0.9.5 that stems from a lack of checksum filtering of user-supplied and output data. An attacker could store malicious...

6.8CVSS5.3AI score0.00886EPSS
SaveExploits0References6
Rows per page
Query Builder