Approved changes feed: RSS · Atom
cpe:2.3:a:portabilis:i-diario:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Portabilis (3ad0129f-523a-5bbd-ad68-3ed5611fd12b) |
|---|---|
| Product | I Diario (262073b9-49c6-5283-8a31-abff13334237) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/portabilis/i-diario |
purl2cpe | 2026-06-01 10:14:44.124922 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9109 |
vulnerable | 2026-06-08 07:45:21.705928 |
Portabilis i-Diario Password Recovery Endpoint email observable response discrepancy
LOW (3.7)
A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitation appears to be difficult. The exploit has been released to the public and may be exploited.
Published: 2025-08-18T06:02:06.571Z
Updated: 2025-08-18T15:34:02.189Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9108 |
vulnerable | 2026-06-08 07:45:21.705574 |
Portabilis i-Diario Login Page ui layer
MEDIUM (4.3)
Affected is an unknown function of the component Login Page. The manipulation leads to improper restriction of rendered ui layers. It is possible to launch the attack remotely.
Published: 2025-08-18T05:32:05.169Z
Updated: 2025-08-18T15:36:38.735Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9107 |
vulnerable | 2026-06-08 07:45:21.705122 |
Portabilis i-Diario search_autocomplete cross site scripting
MEDIUM (4.3)
A vulnerability was determined in Portabilis i-Diario up to 1.5.0. This impacts an unknown function of the file /alunos/search_autocomplete. Executing manipulation of the argument q can lead to cross site scripting. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-08-18T05:02:05.171Z
Updated: 2025-08-18T12:47:54.073Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9106 |
vulnerable | 2026-06-08 07:45:21.704757 |
Portabilis i-Diario Informações Adicionais /planos-de-ensino-por-disciplina cross site scripting
LOW (3.5)
A vulnerability was found in Portabilis i-Diario up to 1.5.0. This affects an unknown function of the file /planos-de-ensino-por-disciplina/ of the component Informações Adicionais Page. Performing manipulation of the argument Parecer/Conteúdos/Objetivos results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-08-18T04:32:05.832Z
Updated: 2025-08-18T12:48:44.562Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9105 |
vulnerable | 2026-06-08 07:45:21.704371 |
Portabilis i-Diario Informações Adicionais /planos-de-ensino-por-areas-de-conhecimento cross site scripting
LOW (3.5)
A vulnerability has been found in Portabilis i-Diario up to 1.5.0. The impacted element is an unknown function of the file /planos-de-ensino-por-areas-de-conhecimento/ of the component Informações Adicionais Page. Such manipulation of the argument Parecer/Conteúdos/Objetivos leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-08-18T04:02:05.133Z
Updated: 2025-08-18T12:51:23.251Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9104 |
vulnerable | 2026-06-08 07:45:21.703946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8920 |
vulnerable | 2026-06-08 07:45:21.447714 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8919 |
vulnerable | 2026-06-08 07:45:21.447352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8788 |
vulnerable | 2026-06-08 07:45:21.147182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8787 |
vulnerable | 2026-06-08 07:45:21.146806 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8786 |
vulnerable | 2026-06-08 07:45:21.146415 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8511 |
vulnerable | 2026-06-08 07:45:20.663363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7872 |
vulnerable | 2026-06-08 07:45:18.431868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7871 |
vulnerable | 2026-06-08 07:45:18.431332 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7870 |
vulnerable | 2026-06-08 07:45:18.429754 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.