linkace kayıtları
linkace üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %64,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-918 Server-Side Request Forgery (SSRF)4
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-285 Improper Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2026-33953İstismar yok | LinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAcelinkace · linkace · CWE-918 | Yüksek8,5 | — | %0,3 | 27 Mar 2026 |
34İzleyin | CVE-2026-27458İstismar yok | LinkAce: Stored XSS in Atom Feed via CDATA Escape in List Descriptionlinkace · linkace · CWE-80 | Yüksek8,7 | — | %0,3 | 21 Şub 2026 |
34İzleyin | CVE-2025-62722İstismar yok | LinkAce: Stored XSS Vulnerability in Link Title Field Through Social Media Sharing Featurelinkace · linkace · CWE-79 | Yüksek8,7 | — | %0,2 | 4 Kas 2025 |
33İzleyin | CVE-2025-53838İstismar yok | LinkAce has a Stored One Click XSS vulnerabilitylinkace · linkace · CWE-79 | Yüksek8,4 | — | %0,3 | 8 Eyl 2025 |
30İzleyin | CVE-2024-56508İstismar yok | File Upload Vulnerability Leading to XSS in LinkAce v1.15.5linkace · linkace · CWE-434 | Yüksek7,6 | — | %0,4 | 27 Ara 2024 |
29İzleyin | CVE-2025-59424Kavram kanıtı | LinkAce Vulnerable to Stored XSS on the Audit Pagelinkace · linkace · CWE-79 | Yüksek7,3 | — | %0,3 | 18 Eyl 2025 |
28İzleyin | CVE-2025-62720İstismar yok | LinkAce: Data Exfiltration via Export Functions Allow Access to All Users' Private Linkslinkace · linkace · CWE-200 | Yüksek7,1 | — | %0,4 | 4 Kas 2025 |
28İzleyin | CVE-2025-62721İstismar yok | LinkAce: Authorization Bypass Allows Unauthorized Access to All Private Links, Lists, and Tagslinkace · linkace · CWE-200 | Yüksek7,1 | — | %0,4 | 4 Kas 2025 |
26İzleyin | CVE-2026-33954İstismar yok | LinkAce discloses private notesto unauthorized authenticated users via the web link detail pagelinkace · linkace · CWE-285 | Orta6,5 | — | %0,4 | 27 Mar 2026 |
26İzleyin | CVE-2026-30953İstismar yok | LinkAce affected by SSRF via link creation: NoPrivateIpRule not applied to LinkStoreRequestlinkace · linkace · CWE-918 | Orta6,5 | — | %0,4 | 10 Mar 2026 |
21İzleyin | CVE-2024-56507İstismar yok | Reflected Cross-Site Scripting (XSS) Vulnerability in LinkAcelinkace · linkace · CWE-79 | Orta5,4 | — | %0,3 | 27 Ara 2024 |
21İzleyin | CVE-2026-30954İstismar yok | LinkAce has a Cross-User Tag/List Attachment IDOR in processTaxonomy()linkace · linkace · CWE-639 | Orta5,3 | — | %0,3 | 10 Mar 2026 |
20İzleyin | CVE-2026-35516İstismar yok | LinkAce has SSRF via CheckLinksCommand - Link URL Update Bypasses laravel-html-meta Protectionlinkace · linkace · CWE-918 | Orta5,0 | — | %0,3 | 7 Nis 2026 |
9İzleyin | CVE-2025-62719İstismar yok | LinkAce: Limited Server-Side Request Forgery (SSRF) in Keyword Fetching Functionalitylinkace · linkace · CWE-918 | Düşük2,3 | — | %0,3 | 4 Kas 2025 |
- CVE-2026-3395334İzleyin
LinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAce
YüksekCVSS 8,5İstismar yokEPSS %0linkace · linkace27 Mar 2026
- CVE-2026-2745834İzleyin
LinkAce: Stored XSS in Atom Feed via CDATA Escape in List Description
YüksekCVSS 8,7İstismar yokEPSS %0linkace · linkace21 Şub 2026
- CVE-2025-6272234İzleyin
LinkAce: Stored XSS Vulnerability in Link Title Field Through Social Media Sharing Feature
YüksekCVSS 8,7İstismar yokEPSS %0linkace · linkace4 Kas 2025
- CVE-2025-5383833İzleyin
LinkAce has a Stored One Click XSS vulnerability
YüksekCVSS 8,4İstismar yokEPSS %0linkace · linkace8 Eyl 2025
- CVE-2024-5650830İzleyin
File Upload Vulnerability Leading to XSS in LinkAce v1.15.5
YüksekCVSS 7,6İstismar yokEPSS %0linkace · linkace27 Ara 2024
- CVE-2025-5942429İzleyin
LinkAce Vulnerable to Stored XSS on the Audit Page
YüksekCVSS 7,3Kavram kanıtıEPSS %0linkace · linkace18 Eyl 2025
- CVE-2025-6272028İzleyin
LinkAce: Data Exfiltration via Export Functions Allow Access to All Users' Private Links
YüksekCVSS 7,1İstismar yokEPSS %0linkace · linkace4 Kas 2025
- CVE-2025-6272128İzleyin
LinkAce: Authorization Bypass Allows Unauthorized Access to All Private Links, Lists, and Tags
YüksekCVSS 7,1İstismar yokEPSS %0linkace · linkace4 Kas 2025
- CVE-2026-3395426İzleyin
LinkAce discloses private notesto unauthorized authenticated users via the web link detail page
OrtaCVSS 6,5İstismar yokEPSS %0linkace · linkace27 Mar 2026
- CVE-2026-3095326İzleyin
LinkAce affected by SSRF via link creation: NoPrivateIpRule not applied to LinkStoreRequest
OrtaCVSS 6,5İstismar yokEPSS %0linkace · linkace10 Mar 2026
- CVE-2024-5650721İzleyin
Reflected Cross-Site Scripting (XSS) Vulnerability in LinkAce
OrtaCVSS 5,4İstismar yokEPSS %0linkace · linkace27 Ara 2024
- CVE-2026-3095421İzleyin
LinkAce has a Cross-User Tag/List Attachment IDOR in processTaxonomy()
OrtaCVSS 5,3İstismar yokEPSS %0linkace · linkace10 Mar 2026
- CVE-2026-3551620İzleyin
LinkAce has SSRF via CheckLinksCommand - Link URL Update Bypasses laravel-html-meta Protection
OrtaCVSS 5,0İstismar yokEPSS %0linkace · linkace7 Nis 2026
- CVE-2025-627199İzleyin
LinkAce: Limited Server-Side Request Forgery (SSRF) in Keyword Fetching Functionality
DüşükCVSS 2,3İstismar yokEPSS %0linkace · linkace4 Kas 2025