← Back

Avolvesoftware

avolvesoftware

4 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Projectdox
projectdox
4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-5132
1Avolvesoftware
1Projectdox
Nov 21, 2024
Mar 27, 2018
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses.
CVE-2014-5131
1Avolvesoftware
1Projectdox
Nov 21, 2024
Mar 27, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Avolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive information by leveraging ciphertext reuse.
CVE-2014-5130
1Avolvesoftware
1Projectdox
Nov 21, 2024
Mar 27, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Avolve Software ProjectDox 8.1 allows remote authenticated users to obtain sensitive information from other users via vectors involving a direct access token.
CVE-2014-5129
1Avolvesoftware
1Projectdox
May 6, 2026
Sep 11, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Avolve Software ProjectDox 8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.