RE
Vendor
Reviewboard
15
CVEs
0
On KEV
0
New 30D
Products
RB9.8
Review Board
Reviewboard
8 CVEs0 on KEV0 new
RE8.8
Reviewboard
Reviewboard
4 CVEs0 on KEV0 new
DJ9.8
Djblets
Reviewboard
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-31330 | RB Review Board Reviewboard | 5.4 | May 11 | A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and 4.0 RC1 and earlier |
| CVE-2013-4796 | RE Reviewboard Reviewboard | 8.8 | Dec 27 | ReviewBoard 1.6.17 allows code execution by attaching PHP scripts to review request |
| CVE-2013-4411 | RE Reviewboard Reviewboard | 4.3 | Dec 3 | Review Board: URL processing gives unauthorized users access to review lists |
| CVE-2013-4410 | RE Reviewboard Reviewboard | 7.5 | Dec 2 | ReviewBoard: has an access-control problem in REST API |
| CVE-2013-4409 | DJ Djblets Reviewboard | 9.8 | Nov 4 | An eval() vulnerability exists in Python Software Foundation Djblets 0.7.21 and Beanbag Review Board before 1.7.15 when parsing JSON requests |
| CVE-2014-5028 | RB Review Board Reviewboard | 6.5 | Mar 29 | The Original File and Patched File resources in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allow remote authenticated users to bypass intended access restrictions and… |
| CVE-2014-5027 | RB Review Board Reviewboard | – | Jul 25 | Cross-site scripting (XSS) vulnerability in Review Board 1.7.x before 1.7.27 and 2.0.x before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via a query… |
| CVE-2014-3995 | DJ Djblets Reviewboard | – | Jun 16 | Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject… |
| CVE-2014-3994 | DJ Djblets Reviewboard | – | Jun 16 | Cross-site scripting (XSS) vulnerability in util/templatetags/djblets_js.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django, as used in Review Board, allows remote… |
| CVE-2013-4795 | RB Review Board Reviewboard | – | Apr 11 | Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script… |
| CVE-2013-4519 | RB Review Board Reviewboard | – | Nov 19 | Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via… |
| CVE-2013-2209 | RB Review Board Reviewboard | – | Jul 31 | Cross-site scripting (XSS) vulnerability in the auto-complete widget in htdocs/media/rb/js/reviews.js in Review Board 1.6.x before 1.6.17 and 1.7.x before 1.7.10 allows remote… |
| CVE-2011-4312 | RB Review Board Reviewboard | – | Nov 24 | Multiple cross-site scripting (XSS) vulnerabilities in the commenting system in Review Board before 1.5.7 and 1.6.x before 1.6.3 allow remote attackers to inject arbitrary web… |