Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (47 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-109118 1 Ikus-soft 1 Rdiffweb 2026-10-17 4.6 Medium
Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to a path outside the repository being operated on, via a percent-encoded traversal sequence (%2e%2e) in the request path, because the containment check uses a string prefix comparison (startswith) instead of a filesystem path boundary check. The target must be a sibling path whose name begins with the repository path, and the user already hold permissions on it; the issue can mislead a user into operating on, or deleting, data other than the repository displayed
CVE-2026-109119 1 Ikus-soft 1 Rdiffweb 2026-10-17 8.8 High
Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in Rdiffweb allows authenticated users to elevate their privileges to administrator by modifying the role parameter in a POST request.
CVE-2025-67796 1 Ikus-soft 1 Rdiffweb 2026-05-05 8.1 High
IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authenticated subject and the targeted user/tenant, so crafted requests can read or modify other users data and, in some cases, perform privileged actions. This issue may enable cross-tenant access. Fixed in version 2.10.6.
CVE-2022-3251 1 Ikus-soft 1 Minarca 2025-05-28 5.3 Medium
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/minarca prior to 4.2.2.
CVE-2022-3250 1 Ikus-soft 1 Rdiffweb 2025-05-28 5.3 Medium
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.
CVE-2022-3233 1 Ikus-soft 1 Rdiffweb 2025-05-23 4.3 Medium
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.
CVE-2022-3268 1 Ikus-soft 1 Minarca 2025-05-23 9.8 Critical
Weak Password Requirements in GitHub repository ikus060/minarca prior to 4.2.2.
CVE-2022-3267 1 Ikus-soft 1 Rdiffweb 2025-05-23 4.3 Medium
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.
CVE-2022-3274 1 Ikus-soft 1 Rdiffweb 2025-05-22 3.5 Low
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.
CVE-2022-3269 1 Ikus-soft 1 Rdiffweb 2025-05-22 9.8 Critical
Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7.
CVE-2022-3295 1 Ikus-soft 1 Rdiffweb 2025-05-21 7.5 High
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3290 1 Ikus-soft 1 Rdiffweb 2025-05-21 7.5 High
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3301 1 Ikus-soft 1 Rdiffweb 2025-05-21 2.4 Low
Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3272 1 Ikus-soft 1 Rdiffweb 2025-05-21 7.5 High
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3298 1 Ikus-soft 1 Rdiffweb 2025-05-21 7.5 High
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3292 1 Ikus-soft 1 Rdiffweb 2025-05-21 4.6 Medium
Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3326 1 Ikus-soft 1 Rdiffweb 2025-05-20 4.3 Medium
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.
CVE-2022-3364 1 Ikus-soft 1 Rdiffweb 2025-05-20 7.5 High
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.
CVE-2022-3371 1 Ikus-soft 1 Rdiffweb 2025-05-20 7.5 High
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.
CVE-2022-3456 1 Ikus-soft 1 Rdiffweb 2025-05-15 9.8 Critical
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.