32 matches found
PT-2019-11615
Name of the Vulnerable Software and Affected Versions: foreman-tasks versions prior to 0.15.7 Description: An authentication bypass issue was found, allowing an unauthenticated user to view task details through the web UI or API if they can discover or guess the UUID of the task. Recommendations:...
Realization Concerto Critical Chain Planner SQL Injection Vulnerability
Realization Concerto Critical Chain Planner CCPM is a project management software package. A SQL injection vulnerability exists in the taskupdt/taskdetails.aspx web page in Realization CCPM version 5.10.8071. The vulnerability stems from a database-based application that lacks validation of...
CVE-2019-13027
Realization Concerto Critical Chain Planner aka CCPM 5.10.8071 has SQL Injection in at least in the taskupdt/taskdetails.aspx webpage via the projectname parameter...
Akiee Cross-Site Scripting Vulnerability
Akiee is a cross-platform Markdown-based task manager. A cross-site scripting vulnerability exists in the 'details' of tasks in Akiee version 0.0.3. A remote attacker can exploit this vulnerability to execute arbitrary code by tricking a user into opening a specially crafted liveflow.md file...
CVE-2018-1000543
Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution. This attack appear to be exploitable via The attacker tricks the victim into opening a...
PT-2018-9439
Name of the Vulnerable Software and Affected Versions Akiee version 0.0.3 Description The issue is related to a XSS vulnerability that can lead to code execution. This is due to the lack of validation in the "Details" of a task, which can result in XSS and subsequently allow for arbitrary code...
CVE-2016-5943
IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properties, via unspecified vectors...
CVE-2016-5943
IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properties, via unspecified vectors...
CVE-2016-5943: Improper Access Control
IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properties, via unspecified vectors...
PT-2016-6727
Name of the Vulnerable Software and Affected Versions IBM Spectrum Control formerly Tivoli Storage Productivity Center versions 5.2.x before 5.2.11 Description The issue allows remote authenticated users to bypass intended access restrictions. This enables them to read task details or edit...
