Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
alextselegidis/easyappointments Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network Low Risk 2.7 3 months ago 9 hours ago
alextselegidis/easyappointments Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS Low Risk 2.6 3 months ago 9 hours ago
alextselegidis/easyappointments Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync Low Risk 3.1 3 months ago 9 hours ago
alextselegidis/easyappointments Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page Medium Risk 6.0 3 months ago 3 months ago
alextselegidis/easyappointments Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure High Risk 7.1 3 months ago 3 months ago
alextselegidis/easyappointments Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypass Low Risk 3.3 3 months ago 3 months ago
alextselegidis/easyappointments alextselegidis/easyappointments is Vulnerable to CSRF Protection Bypass High Risk 8.0 9 months ago 9 months ago
alextselegidis/easyappointments Easy!Appointments SQL injection vulnerability Medium Risk 6.0 1 year ago 1 year ago
alextselegidis/easyappointments Easy!Appointments Denial of Service (DoS) Medium Risk 6.0 1 year ago 1 year ago
alextselegidis/easyappointments Remote code execution in alextselegidis/easyappointments Medium Risk 6.1 1 year ago 1 year ago
alextselegidis/easyappointments Easy!Appointments Improper Restriction of Excessive Authentication Attempts Critical 9.8 1 year ago 1 year ago
alextselegidis/easyappointments Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments Critical 9.1 4 years ago 2 years ago
alextselegidis/easyappointments Easy!Appointments Improper Access Control vulnerability Medium Risk 6.3 3 years ago 2 years ago
alextselegidis/easyappointments alextselegidis/easyappointments Session Fixation vulnerability Medium Risk 5.4 3 years ago 3 years ago
alextselegidis/easyappointments alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting Medium Risk 5.4 3 years ago 3 years ago
alextselegidis/easyappointments alextselegidis/easyappointments Improper Access Control vulnerability Medium Risk 5.4 3 years ago 3 years ago
alextselegidis/easyappointments alextselegidis/easyappointments vulnerable to Stored Cross-site Scripting Medium Risk 6.8 3 years ago 3 years ago
alextselegidis/easyappointments Code Injection in alextselegidis/easyappointments High Risk 7.3 3 years ago 3 years ago
alextselegidis/easyappointments Easy!Appointments uses hard-coded credentials Critical 9.8 3 years ago 3 years ago
alextselegidis/easyappointments Privilege escalation in easyappointments High Risk 8.8 4 years ago 3 years ago