Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0ProjectSend 2.0.0 before 2.7.0 contains a path validation flaw in OrphanFileScanner::isOrphan() that allows staff with import_orphans permission to treat tracked files as orphans.Open the advisoryOct 18, 2026
- High7.6ProjectSend 2.5.0 before 2.7.0 contains an unverified password change vulnerability in PasswordController::update() that lets sessions of Social-provisioned accounts s…Open the advisoryOct 18, 2026
- High8.6ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability that allows restricted API token holders to change the token owner's credentials via P…Open the advisoryOct 18, 2026
- Medium5.1Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input in t…Check if you run itEPSS 0.20%May 10, 2026
- Low2.1A security flaw has been discovered in ProjectSend r2002.Check if you run itEPSS 0.23%Apr 6, 2026
- Low2.9A flaw has been found in projectsend up to r1945.Check if you run itEPSS 0.46%Mar 12, 2026
- Low2.0A vulnerability was detected in projectsend up to r1945.Check if you run itEPSS 0.65%Mar 12, 2026
- Medium5.3A security vulnerability has been detected in projectsend up to r1945.Check if you run itEPSS 0.38%Mar 12, 2026
- Critical9.8ProjectSend Improper Authentication VulnerabilityPatch nowKEVEPSS 91.85%Nov 26, 2024
9 records · page 1 of 1
PreviousNext