Skip to content
Noroxi

nocodb records

30 published records for vendor nocodb.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
83.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

30 records
  • CVE-2022-2063
    35Monitor

    Improper Privilege Management in nocodb/nocodb

    HighCVSS 8.8No exploitEPSS 1%

    nocodb · nocodbJun 13, 2022

  • CVE-2022-2064
    35Monitor

    Insufficient Session Expiration in nocodb/nocodb

    HighCVSS 8.8No exploitEPSS 1%

    nocodb · nocodbJun 13, 2022

  • CVE-2026-24769
    34Monitor

    NocoDB Vulnerable to Stored Cross-Site Scripting via SVG upload

    HighCVSS 8.5No exploitEPSS 0%

    nocodb · nocodbJan 28, 2026

  • CVE-2023-35843
    33Monitor

    NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to access arbitrary files on

    HighCVSS 7.5Proof of conceptEPSS 9%

    nocodb · nocodbJun 19, 2023

  • CVE-2022-22121
    32Monitor

    NocoDB - CSV Injection in User Management

    HighCVSS 8.0No exploitEPSS 1%

    nocodb · nocodbJan 10, 2022

  • CVE-2022-2339
    31Monitor

    Server-Side Request Forgery (SSRF) in nocodb/nocodb

    HighCVSS 7.5No exploitEPSS 2%

    nocodb · nocodbJul 7, 2022

  • CVE-2022-2062
    30Monitor

    Generation of Error Message Containing Sensitive Information in nocodb/nocodb

    HighCVSS 7.5No exploitEPSS 1%

    nocodb · nocodbJun 13, 2022

  • CVE-2023-49781
    30Monitor

    NocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vue

    HighCVSS 7.6No exploitEPSS 1%

    nocodb · nocodbMay 14, 2024

  • CVE-2022-3423
    27Monitor

    Allocation of Resources Without Limits or Throttling in nocodb/nocodb

    MediumCVSS 6.5No exploitEPSS 2%

    nocodb · nocodbOct 7, 2022

  • CVE-2023-5104
    26Monitor

    Improper Input Validation in nocodb/nocodb

    MediumCVSS 6.5No exploitEPSS 1%

    nocodb · nocodbSep 21, 2023

  • CVE-2023-50718
    26Monitor

    NocoDB SQL Injection vulnerability

    MediumCVSS 6.5No exploitEPSS 1%

    nocodb · nocodbMay 14, 2024

  • CVE-2026-24767
    25Monitor

    NocoDB has Blind SSRF via Unvalidated HEAD Request in uploadViaURL Functionality

    MediumCVSS 6.4No exploitEPSS 0%

    nocodb · nocodbJan 28, 2026

  • CVE-2025-27506
    24Monitor

    NocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password Page

    MediumCVSS 6.1Proof of conceptEPSS 1%

    nocodb · nocodbMar 6, 2025

  • CVE-2026-28399
    24Monitor

    NocoDB: SQL Injection via DATEADD Formula

    MediumCVSS 6.2No exploitEPSS 1%

    nocodb · nocodbMar 2, 2026

  • CVE-2026-24768
    22Monitor

    NocoDB has Unvalidated Redirect in Login Flow via continueAfterSignIn Parameter

    MediumCVSS 5.7No exploitEPSS 0%

    nocodb · nocodbJan 28, 2026

  • CVE-2022-22120
    21Monitor

    NocoDB - Observable Discrepancy in the password-reset feature

    MediumCVSS 5.3No exploitEPSS 1%

    nocodb · nocodbJan 10, 2022

  • CVE-2022-2022
    21Monitor

    Cross-site Scripting (XSS) - Stored in nocodb/nocodb

    MediumCVSS 5.4No exploitEPSS 1%

    nocodb · nocodbJun 7, 2022

  • CVE-2022-2079
    21Monitor

    Cross-site Scripting (XSS) - Stored in nocodb/nocodb

    MediumCVSS 5.4No exploitEPSS 1%

    nocodb · nocodbJun 14, 2022

  • CVE-2023-50717
    21Monitor

    NocoDB Allows Preview of File with Dangerous Content

    MediumCVSS 5.4No exploitEPSS 1%

    nocodb · nocodbMay 14, 2024

  • CVE-2026-28359
    21Monitor

    NocoDB: Stored Cross-Site Scripting via Rich Text Field

    MediumCVSS 5.3No exploitEPSS 0%

    nocodb · nocodbMar 2, 2026

  • CVE-2026-28398
    21Monitor

    NocoDB: Stored Cross-Site Scripting via Comments and Rich Text Cells

    MediumCVSS 5.3No exploitEPSS 0%

    nocodb · nocodbMar 2, 2026

  • CVE-2026-28357
    21Monitor

    NocoDB: Stored Cross-Site Scripting via Formula Cell

    MediumCVSS 5.3No exploitEPSS 0%

    nocodb · nocodbMar 2, 2026

  • CVE-2026-28401
    21Monitor

    NocoDB: Stored Cross-Site Scripting via Rich Text Cells

    MediumCVSS 5.3No exploitEPSS 0%

    nocodb · nocodbMar 2, 2026

  • CVE-2026-28397
    21Monitor

    NocoDB: Stored Cross-Site Scripting via Comments

    MediumCVSS 5.3No exploitEPSS 0%

    nocodb · nocodbMar 2, 2026

  • CVE-2023-43794
    19Monitor

    SQL Injection in nocodb

    MediumCVSS 4.9No exploitEPSS 1%

    nocodb · nocodbOct 17, 2023