Vince The Vulnerability Information And Coordination Environment
Approved changes feed: RSS · Atom
cpe:2.3:a:cert/cc:vince_-_the_vulnerability_information_and_coordination_environment:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cert/Cc (aac4cca4-7ea6-5fd3-b45a-07513e58b290) |
|---|---|
| Product | Vince The Vulnerability Information And Coordination Environment (cc6e9c89-fb07-59a9-8233-e0d1e0a29b12) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-40257 |
vulnerable | 2026-06-08 05:48:24.394677 |
An HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.4
An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via a crafted email with HTML content in the Subject field.
Published: 2022-10-10T00:00:00.000Z
Updated: 2024-08-03T12:14:39.964Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40248 |
vulnerable | 2026-06-08 05:48:24.383125 |
An HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.4
An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4. An authenticated attacker can inject arbitrary HTML via form using the "Product Affected" field.
Published: 2022-10-10T00:00:00.000Z
Updated: 2024-08-03T12:14:39.964Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40238 |
vulnerable | 2026-06-08 05:48:24.373716 |
A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5
A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5. An authenticated attacker can inject arbitrary pickle object as part of a user's profile. This can lead to code execution on the server when the user's profile is accessed.
Published: 2022-10-26T15:15:45.247Z
Updated: 2025-05-07T13:31:41.213Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25799 |
vulnerable | 2026-06-08 05:41:49.485951 |
An open redirect vulnerability exists in CERT/CC VINCE software prior to version 1.50.0
An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.50.0. An attacker could send a link that has a specially crafted URL and convince the user to click the link. When an authenticated user clicks the link, the authenticated user's browser could be redirected to a malicious site that is designed to impersonate a legitimate website. The attacker could trick the user and potentially acquire sensitive information such as the user's credentials.
Published: 2022-08-16T22:00:15.993Z
Updated: 2024-09-17T02:06:51.198Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.