Vulnerabilities

TI-2026-05509 CVE-2026-6283 · GHSA-4qcc-v76c-xv54

Stored XSS in DivvyDrive Information Technologies' DivvyDrive

LOW 24

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00226 Published 2026-07-01 Fixed in v.4.8.3.1 CWE-79

TI-2026-04561 CVE-2026-5220 · GHSA-rr2x-7r28-45fw

Stored XSS in DivvyDrive Information Technologies' DivvyDrive

LOW 28

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00247 Published 2026-07-01 Fixed in v.4.8.3.1 CWE-79

TI-2025-13102 CVE-2025-14341 · GHSA-9439-7mjc-q3p7

Input Data Manipulation in DivvyDrive Information Technologies' DivvyDrive

LOW 35

Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Information Technologies Inc.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00221 Published 2026-05-07 Fixed in 4.8.3.2 CWE-770

TI-2026-05959 CVE-2026-6795 · GHSA-g28p-hp32-cg73

Open Redirect in DivvyDrive Information Technologies' DivvyDrive

MEDIUM 42

URL redirection to untrusted site ('open redirect') vulnerability in DivvyDrive Information Technologies Inc.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00233 Published 2026-05-07 Fixed in 4.8.3.2 CWE-601

TI-2026-05065 CVE-2026-5784 · GHSA-wj3v-9w9x-ccw9

Stored XSS in DivvyDrive Information Technologies' DivvyDrive

MEDIUM 40

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in DivvyDrive Information Technologies Inc.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00327 Published 2026-05-07 Fixed in 4.8.3.2 CWE-79

TI-2026-05265 CVE-2026-6002 · GHSA-pmh8-hhp9-qxxf

HTML Injection in DivvyDrive Information Technologies' DivvyDrive

MEDIUM 40

Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in DivvyDrive Information Technologies Inc.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00327 Published 2026-05-07 Fixed in 4.8.3.2 CWE-80

TI-2026-05072 CVE-2026-5791 · GHSA-r92j-v37g-pjf9

CSRF in DivvyDrive Information Technologies' DivvyDrive

LOW 30

Cross-Site request forgery (CSRF) vulnerability in DivvyDrive Information Technologies Inc.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0015 Published 2026-05-07 Fixed in 4.8.3.2 CWE-352

TI-2025-10968 CVE-2025-11962 · GHSA-w724-24qm-wwm3

Stored XSS in DivvyDrive Information Technologies' Digital Corporate Warehouse

LOW 34

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in DivvyDrive Information Technologies Inc.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.0027 Published 2025-11-12 Fixed in v.4.8.2.22 CWE-79

TI-2025-08277 CVE-2025-9031 · GHSA-xcmg-8x29-m9m4

Timing-Based Username Enumeration in DivvyDrive Information Technologies' DivvyDrive Web

LOW 20

Observable Timing Discrepancy vulnerability in DivvyDrive Information Technologies Inc.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00239 Published 2025-09-24 Fixed in 4.8.2.15 CWE-203

Vulnerabilities

Filters