Skip to content
Noroxi

gunet records

20 published records for vendor gunet.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
65%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 20
  2. 22
  3. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

20 records
  • CVE-2020-37113
    34Monitor

    GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypass

    HighCVSS 8.7No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2020-37116
    34Monitor

    GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access

    HighCVSS 8.7No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2026-24669
    31Monitor

    Open eClass Insecure Password Reset Token Reuse Enables Account Takeover

    HighCVSS 7.8No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2020-24381
    30Monitor

    GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it does

    HighCVSS 7.5No exploitEPSS 1%

    gunet · open eclass platformAug 19, 2020

  • CVE-2026-24773
    30Monitor

    Open eClass Unauthenticated IDOR Allows Access to Arbitrary User Files

    HighCVSS 7.5No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2020-37112
    28Monitor

    GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection

    HighCVSS 7.1No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2020-37115
    28Monitor

    GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage

    HighCVSS 7.1No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2026-24670
    26Monitor

    Open eClass Has Broken Access Control in Course Units Module Allows Students to Create Units

    MediumCVSS 6.5No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2026-24668
    26Monitor

    Open eClass Broken Access Control Allows Students to Add Content to Course Units

    MediumCVSS 6.5No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2026-24666
    26Monitor

    Open eClass is Vulnerable to CSRF in Teacher-Restricted Endpoints Allows Unauthorized Actions

    MediumCVSS 6.5No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2021-44266
    24Monitor

    GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter.

    MediumCVSS 6.1No exploitEPSS 1%

    gunet · open eclass platformJun 11, 2022

  • CVE-2026-24674
    24Monitor

    Open eClass is Vulnerable to Reflected Cross-Site Scripting (XSS) in Multiple Endpoints

    MediumCVSS 6.1No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2020-37114
    21Monitor

    GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure

    MediumCVSS 5.3No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2026-24664
    21Monitor

    Open eClass is Vulnerable to Username Enumeration via Login Response Discrepancies

    MediumCVSS 5.3No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2026-24673
    21Monitor

    Open eClass Has File Upload Filter Bypass via ZIP Archive Extraction

    MediumCVSS 5.3No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2026-24672
    21Monitor

    Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in User Profile Fields

    MediumCVSS 5.4No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2026-24665
    21Monitor

    Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) via Student Assignment Upload

    MediumCVSS 5.4No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2026-24667
    20Monitor

    Open eClass's Active Sessions Not Invalidated After Password Change Allow Persistent Account Access

    MediumCVSS 5.0No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2026-24671
    19Monitor

    Open eClass is Vulnerable to Stored Cross-Site Scripting (XSS) in Multiple High-Privilege User Fields

    MediumCVSS 4.8No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026

  • CVE-2026-24774
    17Monitor

    Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities

    MediumCVSS 4.3No exploitEPSS 0%

    gunet · open eclass platformFeb 3, 2026