Maniphest Advanced Search

Advanced Search
Use Results
Edit Query
Hide Query

Priority-0 (4)

T15 Students can (still) see other student's personal information at accesuniversitat.gencat.cat
Restricted Project
Sep 17 2019, 10:22 PM
Assigned: avm99963
T12 IP address of the original poster in a forum thread revealed by API in the Google Forums Community Console
Restricted Project
Apr 22 2019, 11:03 PM
Assigned: avm99963
T7 Remote code execution and full access to database and codebase at offerplaying.com
Restricted Project
Jun 5 2019, 10:39 PM
Assigned: avm99963
T1 Students can see other student's personal information at accesuniversitat.gencat.cat
Restricted Project
Apr 28 2018, 2:25 PM
Assigned: avm99963

Priority-1 (11)

T25 Subscriptions to saved filters trigger email notifications for unauthorized threads
Restricted Project
Oct 1 2022, 7:03 PM
Assigned: avm99963
T22 XSS vulnerability in ub.edu
Restricted Project
Jul 20 2020, 11:22 PM
Assigned: avm99963
T21 IP addresses linked to the original poster of several forum threads revealed by API in the Google Forums Community Console
Restricted Project
Jul 20 2020, 11:26 PM
Assigned: avm99963
T20 XSS vulnerability in sso.ub.edu
Restricted Project
Feb 18 2020, 1:07 AM
Assigned: avm99963
T19 XSS vulnerability in ub.edu
Restricted Project
Feb 23 2020, 7:30 PM
Assigned: avm99963
T17 It is possible to buy tickets for the Alhambra for 0,01 €
Restricted Project
Nov 27 2019, 10:57 PM
Assigned: avm99963
T14 Product Experts can review off-topic requests or hide from the public any message in the Google Help Forums
Restricted Project
Aug 23 2019, 4:17 AM
Assigned: avm99963
T11 All SAE support emails are visible to the public
Restricted Project
Mar 19 2019, 6:26 PM
Assigned: avm99963
T9 Access to transcripts for other UB students
Restricted Project
Feb 27 2019, 12:17 AM
Assigned: avm99963
T8 XSS and input validation vulnerability in "Competitions" section
Restricted Project
Dec 19 2018, 12:32 AM
Assigned: avm99963
T6 Some users continue to receive email updates of some threads of a Google group after being removed from a group
Restricted Project
May 2 2018, 12:02 AM

Priority-2 (3)

T26 Missing access control in methods v2/users:search and v2/users/status:batchUpdate
Restricted Project
Jun 26 2021, 8:38 PM
Assigned: avm99963
T18 Anyone can access a whitelist of users and delete users from the whitelist
Restricted Project
Feb 4 2020, 2:13 PM
Assigned: avm99963
T13 Product Experts can create threads with the properties "closed", "sticky" or "isTrending"
Restricted Project
Aug 23 2019, 4:23 AM
Assigned: avm99963

Priority-3 (2)

T23 Avatars can be set to custom URLs and displayed in the Google Forums without using a proxy
Restricted Project
Jun 15 2021, 12:11 PM
Assigned: avm99963
T10 Error message reveals information about some internal data structure
Restricted Project
Mar 19 2019, 6:26 PM
Assigned: avm99963