| CVE-2026-84813 |
Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions
|
9.3
Critical
|
Sep 3, 2026 |
| CVE-2026-81271 |
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions
|
8.8
High
|
Aug 27, 2026 |
| CVE-2026-66604 |
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions
|
7.1
High
|
Aug 20, 2026 |
| CVE-2026-68565 |
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions
|
6.5
Medium
|
Aug 18, 2026 |
| CVE-2026-57681 |
Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions
|
6.4
Medium
|
Jul 2, 2026 |
| CVE-2026-54831 |
Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions
|
9.3
Critical
|
Jun 26, 2026 |
| CVE-2026-39512 |
Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions
|
9.3
Critical
|
Jun 15, 2026 |
| CVE-2026-42671 |
Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control…
|
6.5
Medium
|
Jun 1, 2026 |
| CVE-2026-24549 |
Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request…
|
4.3
Medium
|
Jan 23, 2026 |
| CVE-2024-56259 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory…
|
6.5
Medium
|
Jan 2, 2025 |
| CVE-2024-50437 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory…
|
6.5
Medium
|
Oct 28, 2024 |