Vulnerability index

Browse CVEs

10 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Kiwi Tcms MEDIUM 5.4
CVE-2023-36809

Kiwi TCMS, an open source test management system allows users to upload attachments to test plans, test cases, etc. Versions of Kiwi TCMS prior to 12…

Fix: 12.5+
Fix from $1,600 2023-07-05
Kiwi Tcms MEDIUM 5.4
CVE-2023-33977

Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to test plans,…

Fix: after 12.3
Fix from $1,600 2023-06-06
Kiwi Tcms MEDIUM 5.4
CVE-2023-32686

Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to test plans,…

Fix: after 12.2
Fix from $1,600 2023-05-27
Kiwi Tcms HIGH 8.8
CVE-2023-30628

Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and kiwitcms/enterprise v12.2 and prior, the `changelog.yml` wor…

Fix: after 12.2
Fix from $1,950 2023-04-24
Kiwi Tcms CRITICAL 9.0
CVE-2023-30613

Kiwi TCMS, an open source test management system, allows users to upload attachments to test plans, test cases, etc. In versions of Kiwi TCMS prior t…

Fix: 12.2+
Fix from $2,300 2023-04-24
Kiwi Tcms MEDIUM 5.4
CVE-2023-27489

Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS accepts SVG files uploaded by users which could p…

Fix: 12.1+
Fix from $1,600 2023-03-29
Kiwi Tcms CRITICAL 9.8
CVE-2023-25156

Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt brute-force …

Fix: 12.0+
Fix from $2,300 2023-02-15
Kiwi Tcms MEDIUM 5.9
CVE-2023-25171

Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt denial-of-se…

Fix: 12.0+
Fix from $1,600 2023-02-15
Kiwi Tcms HIGH 8.8
CVE-2023-22451

Kiwi TCMS is an open source test management system. In version 11.6 and prior, when users register new accounts and/or change passwords, there is no …

Fix: 11.7+
Fix from $1,950 2023-01-02
Kiwi Tcms MEDIUM 5.4
CVE-2022-4105

A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickj…

Fix: 11.6+
Fix from $1,600 2022-11-21