İçeriğe atla
Noroxi

humhub kayıtları

humhub üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%44,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21
  3. 22
  4. 24
  5. 25
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2017-20028
    39İzleyin

    HumHub privileges management

    KritikCVSS 9,8İstismar yokEPSS %0

    humhub · humhub9 Haz 2022

  • CVE-2025-54790
    36İzleyin

    Files: Potential for SQL Injection through File Browse and List Operations

    KritikCVSS 9,2İstismar yokEPSS %0

    humhub · files1 Ağu 2025

  • CVE-2014-9528
    31İzleyin

    SQL injection vulnerability in the actionIndex function in protected/modules_core/notification/controllers/ListController.php in HumHub 0.10

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    humhub · humhub6 Oca 2015

  • CVE-2025-64442
    28İzleyin

    HumHub is vulnerable to XSS through its Meta Search component

    YüksekCVSS 7,1İstismar yokEPSS %0

    humhub · humhub7 Kas 2025

  • CVE-2024-52043
    27İzleyin

    User enumeration in HubHub

    OrtaCVSS 6,9İstismar yokEPSS %0

    humhub · humhub6 Kas 2024

  • CVE-2026-29048
    27İzleyin

    HumHub: XSS in Button component

    OrtaCVSS 6,9İstismar yokEPSS %0

    humhub · humhub6 Mar 2026

  • CVE-2026-29052
    27İzleyin

    HumHub Calendar Module: Stored XSS in Event Types

    OrtaCVSS 6,9İstismar yokEPSS %0

    humhub · calendar5 Mar 2026

  • CVE-2022-24865
    26İzleyin

    Improper access control in humhub

    OrtaCVSS 6,5İstismar yokEPSS %1

    humhub · humhub20 Nis 2022

  • CVE-2021-43847
    26İzleyin

    Authorization Bypass in Space Invite in HumHub

    OrtaCVSS 6,5İstismar yokEPSS %1

    humhub · humhub20 Ara 2021

  • CVE-2019-11564
    25İzleyin

    A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a /protected/

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    humhub · humhub8 May 2019

  • CVE-2019-9094
    24İzleyin

    A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Community Edition.

    OrtaCVSS 6,1İstismar yokEPSS %0

    humhub · humhub21 Mar 2019

  • CVE-2019-9093
    24İzleyin

    A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edition.

    OrtaCVSS 6,1İstismar yokEPSS %0

    humhub · humhub21 Mar 2019

  • CVE-2017-20026
    24İzleyin

    HumHub Reflected cross site scriting

    OrtaCVSS 6,1İstismar yokEPSS %0

    humhub · humhub9 Haz 2022

  • CVE-2017-20027
    24İzleyin

    HumHub DOM cross site scriting

    OrtaCVSS 6,1İstismar yokEPSS %0

    humhub · humhub9 Haz 2022

  • CVE-2019-12743
    21İzleyin

    HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (includin

    OrtaCVSS 5,3İstismar yokEPSS %1

    humhub · social network kit29 Tem 2019

  • CVE-2016-1229
    21İzleyin

    Cross-site scripting (XSS) vulnerability in HumHub 0.20.0-beta.1 through 0.20.1 and 1.0.0-beta before 1.0.0-beta.3 allows remote authenticat

    OrtaCVSS 5,4İstismar yokEPSS %1

    humhub · humhub4 Haz 2016

  • CVE-2025-54789
    20İzleyin

    Files is Vulnerable to Reflected Self-XSS through its File Move Functionality

    OrtaCVSS 5,1İstismar yokEPSS %0

    humhub · files1 Ağu 2025

  • CVE-2022-31133
    19İzleyin

    Cross site scripting in HumHub

    OrtaCVSS 4,8İstismar yokEPSS %0

    humhub · humhub7 Tem 2022