Show filters
33 Total Results
Displaying 1-10 of 33
Sort by:
Attacker Value
Unknown
CVE-2024-45412
Disclosure Date: September 10, 2024 (last updated February 26, 2025)
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Remote user-controlled data tags can reach a Unicode normalization with a compatibility form NFKD. Under Windows, such normalization is costly in resources and may lead to denial of service with attacks such as One Million Unicode payload. This can get worse with the use of special Unicode characters like U+2100 (℀), or U+2105 (℅) which could lead the payload size to be tripled. Versions prior to 2.1.11 are affected by this vulnerability. The patch is included in 2.1.11.
0
Attacker Value
Unknown
CVE-2023-49508
Disclosure Date: February 16, 2024 (last updated February 26, 2025)
Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php component.
0
Attacker Value
Unknown
CVE-2022-3002
Disclosure Date: October 06, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
0
Attacker Value
Unknown
CVE-2022-3005
Disclosure Date: September 20, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
0
Attacker Value
Unknown
CVE-2022-3004
Disclosure Date: September 20, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
0
Attacker Value
Unknown
CVE-2022-3000
Disclosure Date: September 20, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
0
Attacker Value
Unknown
CVE-2022-2924
Disclosure Date: September 20, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3.
0
Attacker Value
Unknown
CVE-2022-2829
Disclosure Date: August 23, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
0
Attacker Value
Unknown
CVE-2022-2890
Disclosure Date: August 22, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
0
Attacker Value
Unknown
CVE-2022-1340
Disclosure Date: August 22, 2022 (last updated February 24, 2025)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
0
