LIVEBOX Collaboration vDesk Cross-Site Scripting Vulnerability

LIVEBOX Collaboration vDesk is an application from LIVEBOX, Inc. A cross-site scripting vulnerability exists in LIVEBOX Collaboration vDesk v031 and earlier versions, which stems from a cross-site scripting vulnerability in the title and /dashboard/reminders parameters of the...

PT-2024-11693 · Unknown · Livebox Collaboration Vdesk

Name of the Vulnerable Software and Affected Versions: LIVEBOX Collaboration vDesk versions through v031 Description: A basic XSS issue exists under the "/api/v1/vdeskintegration/todo/createorupdate" endpoint via the title parameter and "/dashboard/reminders". A remote user, authenticated to the...

CVE-2023-49809 Todo plugin gets crashed and disabled by member

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with null request body to that endpoint and make it crash. After a few repetitions, the plugin is disabled...

Malicious code in todo-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc3036374d0687be9d2c3ce1a73b73181d87ad3e1a67d8368bb460150148c5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8606 Malicious code in todo-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc3036374d0687be9d2c3ce1a73b73181d87ad3e1a67d8368bb460150148c5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Information Disclosure

gitlab is vulnerable to Information Disclosure. The vulnerability exists due to the lack of permission checks in the library, which allows guest users to read a todo targeting an inaccessible note...

CVE-2023-32221

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation...

CVE-2023-32221

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation...

Privilege escalation

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation...

CVE-2023-32221 EaseUS Todo Backup may allow local privilege escalation

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation...

CVE-2023-32221

CVE-2023-32221 affects EaseUS Todo Backup version 20220111.390. The vulnerability arises from an installation-time omission that may allow a local attacker to escalate privileges. Reports in connected sources corroborate a local-privilege-escalation impact. Remediation suggested by PT-2023-23668 ...

CVE-2023-32221 EaseUS Todo Backup may allow local privilege escalation

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation...

EaseUS Todo Backup 安全漏洞

EaseUS Todo Backup is a free data backup software from EaseUS. A security vulnerability exists in EaseUS Todo Backup version 20220111.390. A local attacker can exploit the vulnerability to elevate privileges...

PT-2023-23668 · Easeus · Easeus Todo Backup

Name of the Vulnerable Software and Affected Versions: EaseUS Todo Backup version 20220111.390 Description: The issue is related to an omission during the installation process of EaseUS Todo Backup, which may allow a local attacker to perform privilege escalation. Recommendations: For EaseUS Todo...

CVE-2023-32221

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation...

CVE-2022-4590

A vulnerability was found in mschaef toto up to 1.4.20. It has been classified as problematic. This affects an unknown part of the component Todo List Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.21 is able to...

CVE-2022-4590 mschaef toto Todo List cross site scripting

A vulnerability was found in mschaef toto up to 1.4.20. It has been classified as problematic. This affects an unknown part of the component Todo List Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.21 is able to...

PT-2022-27676 · Unknown · Mschaef Toto

Name of the Vulnerable Software and Affected Versions: mschaef toto versions up to 1.4.20 Description: A vulnerability was found in the Todo List Handler component, which can be exploited remotely. The manipulation leads to cross-site scripting. It is recommended to upgrade the affected component...

CVE-2022-4590 mschaef toto Todo List cross site scripting

A vulnerability was found in mschaef toto up to 1.4.20. It has been classified as problematic. This affects an unknown part of the component Todo List Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.21 is able to...

UBUNTU-CVE-2022-3330

It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions from 15.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1...