CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

202 matches found

RedhatCVE•added 2026/01/09 10:17 a.m.•7 views

CVE-2019-18933

In Zulip Server versions from 1.7.0 to before 2.0.7, a bug in the new user signup process meant that users who registered their account using social authentication e.g., GitHub or Google SSO in an organization that also allows password authentication could have their personal API key stolen by an...

9.8CVSS7.2AI score0.00431EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 9:55 a.m.•6 views

CVE-2020-12759

Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook...

6.1CVSS5.8AI score0.00359EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 9:52 a.m.•8 views

CVE-2020-10935

Zulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover...

5.4CVSS5.8AI score0.00302EPSS

Exploits1References1

RedhatCVE•added 2026/01/09 9:13 a.m.•4 views

CVE-2022-31134

Zulip is an open-source team collaboration tool. Zulip Server versions 2.1.0 above have a user interface tool, accessible only to server owners and server administrators, which provides a way to download a "public data" export. While this export is only accessible to administrators, in many...

4.9CVSS6.8AI score0.00401EPSS

Exploits0References1

RedhatCVE•added 2026/01/07 9:30 a.m.•5 views

CVE-2019-16216

Zulip server before 2.0.5 incompletely validated the MIME types of uploaded files. A user who is logged into the server could upload files of certain types to mount a stored cross-site scripting attack on other logged-in users. On a Zulip server using the default local uploads backend, the attack...

5.4CVSS6AI score0.00254EPSS

Exploits0References1