Export limit exceeded: 425865 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2019-13489

Trape through 2019-05-08 has SQL injection via the data[2] variable in core/db.py, as demonstrated by the /bs t parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Trape Project
Products
Trape
CVE-2019-13488

A cross-site scripting (XSS) vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the /register URI, because the jQuery prepend() method is used.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Trape Project
Products
Trape