Approved changes feed: RSS · Atom
cpe:2.3:a:cert:vince:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Cert (31f635ea-d58c-56ac-ba2e-e9d8e97eee44) |
|---|---|
| Product | Vince (bfea5275-bea9-5c5a-9089-3f7af318d45d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/certcc/vince |
purl2cpe | 2026-06-01 10:12:18.393104 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9953 |
vulnerable | 2026-06-08 07:00:28.969010 |
Potential DoS Vulnerability in CERT VINCE Software Before Version 3.0.8
A potential denial-of-service (DoS) vulnerability exists in CERT VINCE software versions prior to 3.0.8. An authenticated administrative user can inject an arbitrary pickle object into a user’s profile, which may lead to a DoS condition when the profile is accessed. While the Django server restricts unpickling to prevent server crashes, this vulnerability could still disrupt operations.
Published: 2024-10-14T21:19:26.517Z
Updated: 2025-03-20T18:58:47.620Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10469 |
vulnerable | 2026-06-08 06:23:46.682252 |
CERT/CC VINCE versions before 3.0.9 allows authenticated user to access User Management view.
VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users.
Published: 2024-10-28T15:38:29.062Z
Updated: 2025-08-25T22:10:00.825Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40257 |
vulnerable | 2026-06-08 05:48:24.394716 |
An HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.4
An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via a crafted email with HTML content in the Subject field.
Published: 2022-10-10T00:00:00.000Z
Updated: 2024-08-03T12:14:39.964Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40248 |
vulnerable | 2026-06-08 05:48:24.383171 |
An HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.4
An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via form using the "Product Affected" field.
Published: 2022-10-10T00:00:00.000Z
Updated: 2024-08-03T12:14:39.964Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40238 |
vulnerable | 2026-06-08 05:48:24.374482 |
A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5
A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5. An authenticated attacker can inject arbitrary pickle object as part of a user's profile. This can lead to code execution on the server when the user's profile is accessed.
Published: 2022-10-26T15:15:45.247Z
Updated: 2025-05-07T13:31:41.213Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25799 |
vulnerable | 2026-06-08 05:41:49.486630 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.