framasoft records

16 published records for vendor framasoft.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 12.5%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

16 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2017-1000039No exploit	Framadate version 1.0 is vulnerable to Formula Injection in the CSV Export resulting possible Information Disclosure and Code Executionframasoft · framadate · CWE-20 Pre-auth	Critical9.8	—	2.6%	Jul 17, 2017
30Monitor	CVE-2022-0133No exploit	Improper Access Control in chocobozzz/peertubeframasoft · peertube · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	1.2%	Jan 10, 2022
30Monitor	CVE-2022-0132No exploit	Server-Side Request Forgery (SSRF) in chocobozzz/peertubeframasoft · peertube · CWE-918 Pre-auth SSRF	High7.5	—	0.9%	Jan 10, 2022
30Monitor	CVE-2025-32947No exploit	PeerTube ActivityPub Crawl Infinite Loop DoSframasoft · peertube · CWE-835 Pre-auth Denial of service	High7.5	—	0.7%	Apr 15, 2025
30Monitor	CVE-2025-32948No exploit	PeerTube ActivityPub Playlist Creation Blind SSRF and DoSframasoft · peertube · CWE-843 Pre-auth SSRF Denial of service	High7.5	—	0.6%	Apr 15, 2025
26Monitor	CVE-2022-0881No exploit	Insecure Storage of Sensitive Information in chocobozzz/peertubeframasoft · peertube · CWE-922	Medium6.5	—	1.1%	Mar 9, 2022
26Monitor	CVE-2025-32944No exploit	PeerTube User Import Authenticated Persistent Denial of Serviceframasoft · peertube · CWE-248 Denial of service	Medium6.5	—	0.6%	Apr 15, 2025
26Monitor	CVE-2025-32949No exploit	PeerTube User Import Authenticated Resource Exhaustionframasoft · peertube · CWE-409 Denial of service	Medium6.5	—	0.6%	Apr 15, 2025
24Monitor	CVE-2021-3780No exploit	Cross-site Scripting (XSS) - Stored in chocobozzz/peertubeframasoft · peertube · CWE-79 Pre-auth XSS	Medium6.1	—	0.9%	Sep 15, 2021
21Monitor	CVE-2022-0508No exploit	Server-Side Request Forgery (SSRF) in chocobozzz/peertubeframasoft · peertube · CWE-918 Pre-auth SSRF	Medium5.3	—	0.9%	Feb 8, 2022
21Monitor	CVE-2022-0726No exploit	Missing Authorization in chocobozzz/peertubeframasoft · peertube · CWE-862 Broken access control (IDOR)	Medium5.4	—	0.7%	Feb 23, 2022
21Monitor	CVE-2022-0727No exploit	Improper Access Control in chocobozzz/peertubeframasoft · peertube · CWE-284 Broken access control (IDOR)	Medium5.4	—	0.7%	Feb 23, 2022
21Monitor	CVE-2025-32946No exploit	PeerTube Arbitrary Playlist Creation via ActivityPub Protocolframasoft · peertube · CWE-282 Pre-auth	Medium5.3	—	0.4%	Apr 15, 2025
17Monitor	CVE-2022-0170No exploit	Improper Access Control in chocobozzz/peertubeframasoft · peertube · CWE-284 Broken access control (IDOR)	Medium4.3	—	0.7%	Jan 11, 2022
17Monitor	CVE-2025-32943No exploit	PeerTube HLS Video Files Path Traversalframasoft · peertube · CWE-22 Path traversal	Medium4.3	—	0.5%	Apr 15, 2025
17Monitor	CVE-2025-32945No exploit	PeerTube Arbitrary Playlist Creation via REST APIframasoft · peertube · CWE-282	Medium4.3	—	0.3%	Apr 15, 2025

CVE-2017-1000039
40Plan
Framadate version 1.0 is vulnerable to Formula Injection in the CSV Export resulting possible Information Disclosure and Code Execution
CriticalCVSS 9.8No exploitEPSS 3%
- Pre-auth
framasoft · framadateJul 17, 2017
CVE-2022-0133
30Monitor
Improper Access Control in chocobozzz/peertube
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
framasoft · peertubeJan 10, 2022
CVE-2022-0132
30Monitor
Server-Side Request Forgery (SSRF) in chocobozzz/peertube
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- SSRF
framasoft · peertubeJan 10, 2022
CVE-2025-32947
30Monitor
PeerTube ActivityPub Crawl Infinite Loop DoS
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
framasoft · peertubeApr 15, 2025
CVE-2025-32948
30Monitor
PeerTube ActivityPub Playlist Creation Blind SSRF and DoS
HighCVSS 7.5No exploitEPSS 1%
framasoft · peertubeApr 15, 2025
CVE-2022-0881
26Monitor
Insecure Storage of Sensitive Information in chocobozzz/peertube
MediumCVSS 6.5No exploitEPSS 1%
framasoft · peertubeMar 9, 2022
CVE-2025-32944
26Monitor
PeerTube User Import Authenticated Persistent Denial of Service
MediumCVSS 6.5No exploitEPSS 1%
- Denial of service
framasoft · peertubeApr 15, 2025
CVE-2025-32949
26Monitor
PeerTube User Import Authenticated Resource Exhaustion
MediumCVSS 6.5No exploitEPSS 1%
- Denial of service
framasoft · peertubeApr 15, 2025
CVE-2021-3780
24Monitor
Cross-site Scripting (XSS) - Stored in chocobozzz/peertube
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
framasoft · peertubeSep 15, 2021
CVE-2022-0508
21Monitor
Server-Side Request Forgery (SSRF) in chocobozzz/peertube
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- SSRF
framasoft · peertubeFeb 8, 2022
CVE-2022-0726
21Monitor
Missing Authorization in chocobozzz/peertube
MediumCVSS 5.4No exploitEPSS 1%
- Broken access control (IDOR)
framasoft · peertubeFeb 23, 2022
CVE-2022-0727
21Monitor
Improper Access Control in chocobozzz/peertube
MediumCVSS 5.4No exploitEPSS 1%
- Broken access control (IDOR)
framasoft · peertubeFeb 23, 2022
CVE-2025-32946
21Monitor
PeerTube Arbitrary Playlist Creation via ActivityPub Protocol
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
framasoft · peertubeApr 15, 2025
CVE-2022-0170
17Monitor
Improper Access Control in chocobozzz/peertube
MediumCVSS 4.3No exploitEPSS 1%
- Broken access control (IDOR)
framasoft · peertubeJan 11, 2022
CVE-2025-32943
17Monitor
PeerTube HLS Video Files Path Traversal
MediumCVSS 4.3No exploitEPSS 1%
- Path traversal
framasoft · peertubeApr 15, 2025
CVE-2025-32945
17Monitor
PeerTube Arbitrary Playlist Creation via REST API
MediumCVSS 4.3No exploitEPSS 0%
framasoft · peertubeApr 15, 2025