Browse CVEs

MEDIUM 5.4 CVE-2023-36809 Kiwi TCMS, an open source test management system allows users to upload attachments to test plans, test cases, etc. Versions of Kiwi TCMS prior to 12… Kiwi Tcms 12.5+ Fix from $1,6002023-07-05 MEDIUM 5.4 CVE-2023-33977 Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to test plans,… Kiwi Tcms after 12.3 Fix from $1,6002023-06-06 MEDIUM 5.4 CVE-2023-32686 Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to test plans,… Kiwi Tcms after 12.2 Fix from $1,6002023-05-27 HIGH 8.8 CVE-2023-30628 Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and kiwitcms/enterprise v12.2 and prior, the `changelog.yml` wor… Kiwi Tcms after 12.2 Fix from $1,9502023-04-24 CRITICAL 9.0 CVE-2023-30613 Kiwi TCMS, an open source test management system, allows users to upload attachments to test plans, test cases, etc. In versions of Kiwi TCMS prior t… Kiwi Tcms 12.2+ Fix from $2,3002023-04-24 MEDIUM 5.4 CVE-2023-27489 Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS accepts SVG files uploaded by users which could p… Kiwi Tcms 12.1+ Fix from $1,6002023-03-29 CRITICAL 9.8 CVE-2023-25156 Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt brute-force … Kiwi Tcms 12.0+ Fix from $2,3002023-02-15 MEDIUM 5.9 CVE-2023-25171 Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt denial-of-se… Kiwi Tcms 12.0+ Fix from $1,6002023-02-15 HIGH 8.8 CVE-2023-22451 Kiwi TCMS is an open source test management system. In version 11.6 and prior, when users register new accounts and/or change passwords, there is no … Kiwi Tcms 11.7+ Fix from $1,9502023-01-02 MEDIUM 5.4 CVE-2022-4105 A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickj… Kiwi Tcms 11.6+ Fix from $1,6002022-11-21