Vulnerabilities

TI-2025-20770 CVE-2025-28355 · GHSA-cf79-3x47-jx24

Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery…

MEDIUM 55

Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00216 Published 2025-04-18 No fix listed CWE-352

TI-2025-21088 CVE-2025-29456 · GHSA-pmgr-28ph-jhmm

An issue in personal-management-system Personal Management System 1.4.65 allows a remote…

MEDIUM 62

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the create Notes function.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00385 Published 2025-04-17 No fix listed CWE-918

TI-2025-21087 CVE-2025-29455 · GHSA-xw3g-f28m-3q7j

An issue in personal-management-system Personal Management System 1.4.65 allows a remote…

MEDIUM 62

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Travel Ideas" function.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00385 Published 2025-04-17 No fix listed CWE-918

TI-2025-21086 CVE-2025-29454 · GHSA-8rrr-w669-26rg

An issue in personal-management-system Personal Management System 1.4.65 allows a remote…

MEDIUM 62

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Upload function.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00385 Published 2025-04-17 No fix listed CWE-918

TI-2025-21085 CVE-2025-29453 · GHSA-5vf8-pp4v-ccv9

An issue in personal-management-system Personal Management System 1.4.65 allows a remote…

MEDIUM 62

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the my-contacts-settings component.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00385 Published 2025-04-17 No fix listed CWE-918

TI-2024-19428 CVE-2024-29319 · GHSA-hx8j-p33g-vmxv

Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request…

HIGH 75

Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via uploading a SVG file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00385 Published 2024-07-05 No fix listed CWE-918

TI-2024-19427 CVE-2024-29318 · GHSA-5qj7-735j-qhqj

Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting…

LOW 24

Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting (XSS) via upload of a SVG file with embedded javascript code.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00326 Published 2024-07-05 No fix listed CWE-79

TI-2023-23517 CVE-2023-43838 · GHSA-pq44-hr9j-8673

An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows…

HIGH 69

An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00603 Published 2023-10-04 No fix listed CWE-434

Vulnerabilities

Filters