mcgill records
11 published records for vendor mcgill.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 81.8%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-639 Authorization Bypass Through User-Controlled Key2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-552 Files or Directories Accessible to External Parties2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2026-26984No exploit | LORIS media module vulnerable to remote code executionmcgill · loris · CWE-22 | High8.8 | — | 0.7% | Feb 25, 2026 |
34Monitor | CVE-2026-35446No exploit | LORIS has a path traversal in FilesDownloadHandlermcgill · loris · CWE-552 | High8.6 | — | 0.2% | Apr 8, 2026 |
30Monitor | CVE-2026-34392No exploit | LORIS has a path traversal in static routermcgill · loris · CWE-552 | High7.5 | — | 0.2% | Apr 8, 2026 |
30Monitor | CVE-2026-33350No exploit | LORIS has a SQL injection in MRI feedback popupmcgill · loris · CWE-89 | High7.5 | — | 0.2% | Apr 8, 2026 |
26Monitor | CVE-2026-26985No exploit | LORIS vulnerable to path traversal in electrophysiology_browsermcgill · loris · CWE-22 | Medium6.5 | — | 0.3% | Feb 25, 2026 |
26Monitor | CVE-2026-34985No exploit | LORIS has incorrect access checks in media modulemcgill · loris · CWE-639 | Medium6.5 | — | 0.2% | Apr 8, 2026 |
26Monitor | CVE-2026-35165No exploit | LORIS has incorrect access checks in document_repositorymcgill · loris · CWE-639 | Medium6.5 | — | 0.1% | Apr 8, 2026 |
24Monitor | CVE-2026-39985No exploit | LORIS has an open redirect field on loginmcgill · loris · CWE-601 | Medium6.1 | — | 0.2% | Apr 9, 2026 |
21Monitor | CVE-2026-35403No exploit | LORIS has potential cross-site scripting in survey_accounts modulemcgill · loris · CWE-79 | Medium5.4 | — | 0.1% | Apr 8, 2026 |
21Monitor | CVE-2026-35169No exploit | LORIS has potential cross-site scripting in help_editor modulemcgill · loris · CWE-79 | Medium5.4 | — | 0.1% | Apr 8, 2026 |
17Monitor | CVE-2026-35400No exploit | LORIS incorrectly trusts user input in publication modulemcgill · loris · CWE-59 | Medium4.3 | — | 0.2% | Apr 8, 2026 |
- CVE-2026-2698435Monitor
LORIS media module vulnerable to remote code execution
HighCVSS 8.8No exploitEPSS 0%mcgill · lorisFeb 25, 2026
- CVE-2026-3544634Monitor
LORIS has a path traversal in FilesDownloadHandler
HighCVSS 8.6No exploitEPSS 0%mcgill · lorisApr 8, 2026
- CVE-2026-3439230Monitor
LORIS has a path traversal in static router
HighCVSS 7.5No exploitEPSS 0%mcgill · lorisApr 8, 2026
- CVE-2026-3335030Monitor
LORIS has a SQL injection in MRI feedback popup
HighCVSS 7.5No exploitEPSS 0%mcgill · lorisApr 8, 2026
- CVE-2026-2698526Monitor
LORIS vulnerable to path traversal in electrophysiology_browser
MediumCVSS 6.5No exploitEPSS 0%mcgill · lorisFeb 25, 2026
- CVE-2026-3498526Monitor
LORIS has incorrect access checks in media module
MediumCVSS 6.5No exploitEPSS 0%mcgill · lorisApr 8, 2026
- CVE-2026-3516526Monitor
LORIS has incorrect access checks in document_repository
MediumCVSS 6.5No exploitEPSS 0%mcgill · lorisApr 8, 2026
- CVE-2026-3998524Monitor
LORIS has an open redirect field on login
MediumCVSS 6.1No exploitEPSS 0%mcgill · lorisApr 9, 2026
- CVE-2026-3540321Monitor
LORIS has potential cross-site scripting in survey_accounts module
MediumCVSS 5.4No exploitEPSS 0%mcgill · lorisApr 8, 2026
- CVE-2026-3516921Monitor
LORIS has potential cross-site scripting in help_editor module
MediumCVSS 5.4No exploitEPSS 0%mcgill · lorisApr 8, 2026
- CVE-2026-3540017Monitor
LORIS incorrectly trusts user input in publication module
MediumCVSS 4.3No exploitEPSS 0%mcgill · lorisApr 8, 2026