Search
Search Results (3 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2021-3309 | 1 Wekan Project | 1 Wekan | 2024-11-21 | 8.1 High |
| packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store, | ||||
| CVE-2021-20654 | 1 Wekan Project | 1 Wekan | 2024-11-21 | 5.4 Medium |
| Wekan, open source kanban board system, between version 3.12 and 4.11, is vulnerable to multiple stored cross-site scripting. This is named 'Fieldbleed' in the vendor's site. | ||||
| CVE-2018-1000549 | 1 Wekan Project | 1 Wekan | 2024-11-21 | N/A |
| Wekan version 1.04.0 contains a Email / Username Enumeration vulnerability in Register' and 'Forgot your password?' pages that can result in A remote attacker could perform a brute force attack to obtain valid usernames and email addresses.. This attack appear to be exploitable via HTTP Request. | ||||
Page 1 of 1.