Alerte

Registru de divulgare

Probleme de securitate descoperite de AI Penetration Tester nostru în cel mai auditat cod din lume, divulgate responsabil către mentenanți.

Critică6

Ridicată20

Moderată56

Scăzută3

85 entries

Proiect	CVE-uri	Vulnerabilitate	Severitate	CVSS	Publicat
dnnsoftware/Dnn.Platform	GHSA-hxc3-xv8x-w2g3	Portal administrator remote code execution	Ridicată	8.0	25/08/2026
dnnsoftware/Dnn.Platform	GHSA-fpr5-67pq-3hf5	User registration approval authorization bypass	Critică	9.6	25/08/2026
dnnsoftware/Dnn.Platform	GHSA-r4c4-vmqp-vxf2	Unauthorized likes on private journal posts	Moderată	4.3	25/08/2026
dnnsoftware/Dnn.Platform	GHSA-56m6-r25g-78x6	Content approval workflow bypass	Ridicată	7.1	25/08/2026
dnnsoftware/Dnn.Platform	GHSA-4q79-2m2q-gw8w	GroupEdit postback tampering lets one group owner update another group	Moderată	4.3	25/08/2026
dnnsoftware/Dnn.Platform	GHSA-hqgc-qj63-mx24	Permission precedence flaw in module permissions	Moderată	6.9	25/08/2026
dnnsoftware/Dnn.Platform	GHSA-hmwm-c2hx-wmxh	Server-Side request forgery in journal module	Moderată	4.3	25/08/2026
dnnsoftware/Dnn.Platform	GHSA-74j7-h73j-qmc9	Unauthorized file metadata disclosure in restricted folders	Moderată	5.3	25/08/2026
dnnsoftware/Dnn.Platform	GHSA-38xj-rgg3-5cjj	Stored XSS potentially leading to host privilege escalation	Ridicată	7.6	25/08/2026
dnnsoftware/Dnn.Platform	GHSA-86mr-4mmw-j9g2	Unauthorized comments on private journal posts	Moderată	4.3	25/08/2026
Budibase/budibase	GHSA-pmpg-2mxq-6xwr	Budibase: NoSQL injection in MongoDB integration: collection dump, $where JS exec, cross-collection pivot, arbitrary update/delete	Ridicată	7.1	24/07/2026
Admidio/admidio	CVE-2026-53760	Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests	Moderată	5.2	09/07/2026
froxlor/froxlor	GHSA-mr9h-45p9-fg8h	Froxlor: Authenticated customers can read other customers' allowed sender aliases	Moderată	4.3	02/07/2026
Budibase/budibase	CVE-2026-48153	Budibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadata	Ridicată	8.5	22/06/2026
Budibase/budibase	CVE-2026-48150	Budibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assign	Critică	9.0	12/06/2026
frangoteam/FUXA	CVE-2026-47721	FUXA's scheduler API missing admin check enables operator-to-admin escalation via scheduled device actions	Moderată	6.3	08/06/2026
frangoteam/FUXA	CVE-2026-47720	FUXA has SQL Injection in its TDengine DAQ connector via backslash bypass of escapeTdString	Moderată	5.3	08/06/2026
frangoteam/FUXA	CVE-2026-47719	FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading	Ridicată	8.2	08/06/2026
remix-run/react-router	CVE-2026-42342	React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint	Ridicată	7.5	03/06/2026
getkirby/kirby	CVE-2026-44176	Kirby CMS's `pages.access` permission is not checked during rendering of page drafts	Moderată	6.0	26/05/2026
openziti/zrok	CVE-2026-45576	zrok copy writes attacker-controlled WebDAV paths outside the destination root	Ridicată	8.3	19/05/2026
openziti/zrok	CVE-2026-45568	rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths	Critică	9.9	19/05/2026
WeblateOrg/weblate	CVE-2026-45106	Weblate: Stored HTML injection in editor search preview	Moderată	4.6	15/05/2026
pyload/pyload	CVE-2026-45348	pyLoad is vulnerable to stored XSS in Downloads view via unsanitized link URL in packages.js template literal	Ridicată	8.7	14/05/2026
lin-snow/Ech0	GHSA-fpw6-hrg5-q5x5	ech0's acess tokens with expiry=never cannot be revoked: logout panics, delete does not blacklist JTI	Ridicată	7.4	07/05/2026

Show

Page 1 of 4

Ce CVE-uri s-ar putea ascunde în proiectul tău?Ce CVE-uri s-ar putea ascunde în proiectul tău?

Folosește tu însuți cel mai bun AI Penetration Tester din lume pentru a-ți scana aplicația și a descoperi toate problemele de securitate

Începe un pentest Contactează-ne