| CVE-2026-84813 |
Unauthenticated SQL Injection in GeoDirectory <= 2.8.174 versions
|
9.3
Critique
|
3 sept. 2026 |
| CVE-2026-81271 |
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions
|
8.8
Élevée
|
27 août 2026 |
| CVE-2026-66604 |
Unauthenticated Cross Site Scripting (XSS) in GeoDirectory <= 2.8.173 versions
|
7.1
Élevée
|
20 août 2026 |
| CVE-2026-68565 |
Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions
|
6.5
Moyenne
|
18 août 2026 |
| CVE-2026-57681 |
Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions
|
6.4
Moyenne
|
2 juil. 2026 |
| CVE-2026-54831 |
Unauthenticated SQL Injection in GeoDirectory <= 2.8.162 versions
|
9.3
Critique
|
26 juin 2026 |
| CVE-2026-39512 |
Unauthenticated SQL Injection in GeoDirectory <= 2.8.152 versions
|
9.3
Critique
|
15 juin 2026 |
| CVE-2026-42671 |
Missing Authorization vulnerability in Paolo GeoDirectory allows Exploiting Incorrectly Configured Access Control…
|
6.5
Moyenne
|
1 juin 2026 |
| CVE-2026-24549 |
Cross-Site Request Forgery (CSRF) vulnerability in Paolo GeoDirectory geodirectory allows Cross Site Request…
|
4.3
Moyenne
|
23 janv. 2026 |
| CVE-2024-56259 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory…
|
6.5
Moyenne
|
2 janv. 2025 |
| CVE-2024-50437 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo GeoDirectory…
|
6.5
Moyenne
|
28 oct. 2024 |