Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Savignano Component: S-notify Clear all filters
TI-2024-15739 CVE-2024-23735 · GHSA-23r4-x5xc-qw4f

Cross Site Scripting (XSS) vulnerability in in the S/MIME certificate upload…

Priority LOW 27

Cross Site Scripting (XSS) vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate user data via speciall…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00213 Published 2024-04-10 No fix listed CWE-79
TI-2024-15738 CVE-2024-23734 · GHSA-6cq5-38vf-h3g2

Cross Site Request Forgery vulnerability in in the upload functionality of the User…

Priority LOW 23

Cross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages in savignano S/Notify before 2.0.1 for Bitbucket allow attackers to replace S/MIME certificate or PGP keys for arbitrary u…

CVSS 3.1MEDIUM 5.2 Network High privileges User interaction EPSS 0.0014 Published 2024-04-10 No fix listed CWE-352