Search vulnerabilities

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,959

CVE-2024-30246

Tuleap deleting or moving an artifact can delete values from unrelated artifacts

Tuleap is an Open Source Suite to improve management of software developments and collaboration. A malicious user could exploit this issue on purpose to delete information on the instance or possibly gain access to restricted artifacts. It is however not possible to control exactly which information is deleted. Information from theDate, File, Float, Int, List, OpenList, Text, and Permissions on artifact (this one can lead to the disclosure of restricted information) fields can be impacted. This vulnerability is fixed in Tuleap Community Edition version 15.7.99.6 and Tuleap Enterprise Edition 15.7-2, 15.6-5, 15.5-6, 15.4-8, 15.3-6, 15.2-5, 15.1-9, 15.0-9, and 14.12-6.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Enalean
Products
Tuleap
CVE-2023-48082

Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate.

CVSS 3.1 · 9.1 Critical EPSS 1.5% KEV · Not listed
Vendors
Nagios
Products
Nagios Xi Xi
CVE-2025-27094

Tuleap allows default values to be cleared from field configuration

Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-reset certain field configurations, leading to potential information loss. The display time attribute for the date field, the size attribute for the multiselectbox field, the default value, number of rows, and columns attributes for the text field, and the default value, size, and max characters attributes for the string field configurations are lost when added as criteria in a saved report. Additionally, in Tuleap Community Edition versions 16.4.99.1739806825 to 16.4.99.1739877910, this issue could be exploited to prevent access to tracker data by triggering a crash. This vulnerability has been fixed in Tuleap Community Edition 16.4.99.1739877910 and Tuleap Enterprise Edition 16.3-9 and 16.4-4.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Enalean
Products
Tuleap
CVE-2025-27099

Tuleap allows XSS via the tracker names used in the semantic timeframe deletion message

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-site scripting (XSS) via the tracker names used in the semantic timeframe deletion message. A tracker administrator with a semantic timeframe used by other trackers could use this vulnerability to force other tracker administrators to execute uncontrolled code. This vulnerability is fixed in Tuleap Community Edition 16.4.99.1740067916 and Tuleap Enterprise Edition 16.4-5 and 16.3-10.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Enalean
Products
Tuleap
CVE-2023-24881

Microsoft Teams Information Disclosure Vulnerability

Microsoft Teams Information Disclosure Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Microsoft
Products
Teams
CVE-2023-28290

Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability

Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability

CVSS 3.1 · 5.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Microsoft
Products
Remote Desktop App
CVE-2023-29350

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Microsoft
Products
Edge Chromium
CVE-2023-29354

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

CVSS 3.1 · 4.7 Medium EPSS 1.4% KEV · Not listed
Vendors
Microsoft
Products
Edge Chromium
CVE-2023-29343

SysInternals Sysmon for Windows Elevation of Privilege Vulnerability

SysInternals Sysmon for Windows Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Microsoft
Products
Windows Sysmon