CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 05/06/2023 |
| CVE-2023-33968 | MEDIUM5.4 | Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to a missing access control vulnerability that allows a user with low privileges to create or transfer tasks to any project within the software, even if they have not been invited or the proj | 05/06/2023 |
| CVE-2023-33956 | MEDIUM6.5 | Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to an Insecure direct object reference (IDOR) vulnerability present in the application's URL parameter. This vulnerability enables any user to read files uploaded by any other user, regardles | 05/06/2023 |
| CVE-2023-32685 | MEDIUM5.4 | Kanboard is project management software that focuses on the Kanban methodology. Due to improper handling of elements under the `contentEditable` element, maliciously crafted clipboard content can inject arbitrary HTML tags into the DOM. A low-privileged attacker with permission to attach a document on a vulnerable Kanb | 30/05/2023 |
| CVE-2019-7324 | MEDIUM6.1 | app/Core/Paginator.php in Kanboard before 1.2.8 has XSS in pagination sorting. | 04/02/2019 |
| CVE-2017-15212 | MEDIUM4.3 | In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private project of another user. | 11/10/2017 |
| CVE-2017-15211 | MEDIUM4.3 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of another user. | 11/10/2017 |
| CVE-2017-15210 | MEDIUM4.3 | In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private project of another user. | 11/10/2017 |
| CVE-2017-15209 | MEDIUM4.3 | In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user. | 11/10/2017 |
| CVE-2017-15208 | MEDIUM4.3 | In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private project of another user. | 11/10/2017 |
| CVE-2017-15207 | MEDIUM4.3 | In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another user. | 11/10/2017 |
| CVE-2017-15206 | MEDIUM4.3 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of another user. | 11/10/2017 |
| CVE-2017-15205 | MEDIUM4.3 | In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project of another user. | 11/10/2017 |
| CVE-2017-15204 | MEDIUM4.3 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project of another user. | 11/10/2017 |
| CVE-2017-15203 | MEDIUM4.3 | In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of another user. | 11/10/2017 |
| CVE-2017-15202 | MEDIUM4.3 | In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another user. | 11/10/2017 |
| CVE-2017-15201 | MEDIUM4.3 | In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another user. | 11/10/2017 |
| CVE-2017-15200 | MEDIUM4.3 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user. | 11/10/2017 |