PE
Vendor
Personal-management-system
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-28355 | PM Personal Management System Personal-management-system | 4.7 | Apr 18 | Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the… |
| CVE-2025-29456 | PM Personal Management System Personal-management-system | 6.5 | Apr 17 | An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the create Notes function |
| CVE-2025-29453 | PM Personal Management System Personal-management-system | 6.5 | Apr 17 | An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the my-contacts-settings component |
| CVE-2025-29455 | PM Personal Management System Personal-management-system | 6.5 | Apr 17 | An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Travel Ideas" function |
| CVE-2025-29454 | PM Personal Management System Personal-management-system | 6.5 | Apr 17 | An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Upload function |
| CVE-2024-29319 | PM Personal Management System Personal-management-system | 9.8 | Jul 5 | Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via uploading a SVG file |
| CVE-2024-29318 | PM Personal Management System Personal-management-system | 5.4 | Jul 5 | Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting (XSS) via upload of a SVG file with embedded javascript code |
| CVE-2023-43838 | PM Personal Management System Personal-management-system | 7.8 | Oct 4 | An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's… |
