PatchTheCVEeventum project vulnerabilities
Recent CVEs affecting eventum project products. 12 tracked.
eventum project has 12 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 10. Most recent: 2019-09-05. Highest priority: CVE-2014-1632 (score 62/100).
- CVE-2018-16761 MEDIUM 6.1 UPGRADE Eventum before 3.4.0 has an open redirect vulnerability.
- CVE-2018-12628 HIGH 8.8 UPGRADE An issue was discovered in Eventum 3.5.0
- CVE-2018-12627 MEDIUM 6.1 UPGRADE An issue was discovered in Eventum 3.5.0
- CVE-2018-12626 MEDIUM 6.1 UPGRADE An issue was discovered in Eventum 3.5.0
- CVE-2018-12625 MEDIUM 6.1 UPGRADE An issue was discovered in Eventum 3.5.0
- CVE-2018-12624 MEDIUM 6.1 DOWNGRADE An issue was discovered in Eventum 3.5.0
- CVE-2018-12623 MEDIUM 6.1 UPGRADE An issue was discovered in Eventum 3.5.0
- CVE-2018-12622 MEDIUM 6.1 UPGRADE An issue was discovered in Eventum 3.5.0
- CVE-2018-12621 MEDIUM 6.1 DOWNGRADE An issue was discovered in Eventum 3.5.0
- CVE-2018-11569 CRITICAL 9.8 UPGRADE Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data
- CVE-2014-1632 HIGH 8.1 UPGRADE htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP cod
- CVE-2014-1631 HIGH 7.5 UPGRADE Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.p
FAQ
How do I fix eventum project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is eventum project being exploited right now?
None of the tracked eventum project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which eventum project CVE should I patch first?
CVE-2014-1632 currently ranks highest (62/100): htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP cod.