İçeriğe atla
Noroxi

wekan project kayıtları

wekan project üreticisine ait 39 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%61,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 21
  3. 23
  4. 25
  5. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

39 kayıt
  • CVE-2026-30847
    37İzleyin

    Wekan Credential Leak via notificationUsers Publication Exposes Password Hashes and Session Tokens

    KritikCVSS 9,3İstismar yokEPSS %0

    wekan project · wekan6 Mar 2026

  • CVE-2026-30844
    37İzleyin

    Wekan Vulnerable to SSRF through Lack of Validation or Filtering in Attachment URL Loading

    KritikCVSS 9,3İstismar yokEPSS %0

    wekan project · wekan6 Mar 2026

  • CVE-2026-30843
    37İzleyin

    Wekan has Cross-Board IDOR in Custom Fields Update Endpoints

    KritikCVSS 9,3İstismar yokEPSS %0

    wekan project · wekan6 Mar 2026

  • CVE-2025-65780
    35İzleyin

    An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.

    YüksekCVSS 8,8İstismar yokEPSS %0

    wekan project · wekan15 Ara 2025

  • CVE-2026-25560
    34İzleyin

    WeKan < 8.19 LDAP Authentication Filter Injection

    YüksekCVSS 8,7İstismar yokEPSS %0

    wekan project · wekan7 Şub 2026

  • CVE-2026-30846
    34İzleyin

    Wekan Exposes All Global Webhook Integrations through globalwebhooks Publication

    YüksekCVSS 8,7İstismar yokEPSS %0

    wekan project · wekan6 Mar 2026

  • CVE-2021-3309
    33İzleyin

    packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Aut

    YüksekCVSS 8,1İstismar yokEPSS %1

    wekan project · wekan26 Oca 2021

  • CVE-2025-65778
    32İzleyin

    An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.

    YüksekCVSS 8,1İstismar yokEPSS %0

    wekan project · wekan15 Ara 2025

  • CVE-2025-65781
    32İzleyin

    An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.

    YüksekCVSS 8,2İstismar yokEPSS %0

    wekan project · wekan15 Ara 2025

  • CVE-2025-65779
    30İzleyin

    An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.

    YüksekCVSS 7,5İstismar yokEPSS %0

    wekan project · wekan15 Ara 2025

  • CVE-2026-25859
    28İzleyin

    WeKan < 8.20 Migration Functionality Insufficient Permission Checks

    YüksekCVSS 7,1İstismar yokEPSS %0

    wekan project · wekan7 Şub 2026

  • CVE-2026-25563
    28İzleyin

    WeKan < 8.19 Checklist Creation Cross-Board IDOR

    YüksekCVSS 7,1İstismar yokEPSS %0

    wekan project · wekan7 Şub 2026

  • CVE-2026-25561
    28İzleyin

    WeKan < 8.19 Attachment Upload Object Relationship Validation Bypass

    YüksekCVSS 7,1İstismar yokEPSS %0

    wekan project · wekan7 Şub 2026

  • CVE-2026-25564
    28İzleyin

    WeKan < 8.19 Checklist Deletion IDOR via Missing Relationship Validation

    YüksekCVSS 7,1İstismar yokEPSS %0

    wekan project · wekan7 Şub 2026

  • CVE-2026-25565
    28İzleyin

    WeKan < 8.19 Read-only Board Roles Can Update Cards

    YüksekCVSS 7,1İstismar yokEPSS %0

    wekan project · wekan7 Şub 2026

  • CVE-2026-25566
    28İzleyin

    WeKan < 8.19 Cross-board Card Move Without Destination Authorization

    YüksekCVSS 7,1İstismar yokEPSS %0

    wekan project · wekan7 Şub 2026

  • CVE-2026-25568
    28İzleyin

    WeKan < 8.19 allowPrivateOnly Setting Enforcement Bypass

    YüksekCVSS 7,1İstismar yokEPSS %0

    wekan project · wekan7 Şub 2026

  • CVE-2026-2207
    27İzleyin

    WeKan Activity Publication activities.js LinkedBoardActivitiesBleed information disclosure

    OrtaCVSS 6,9İstismar yokEPSS %0

    wekan project · wekan7 Şub 2026

  • CVE-2026-30845
    27İzleyin

    Wekan Exposes Sensitive Data through Lack of Field Filtering During Board Publication

    OrtaCVSS 6,9İstismar yokEPSS %0

    wekan project · wekan6 Mar 2026

  • CVE-2025-65782
    26İzleyin

    An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.

    OrtaCVSS 6,5İstismar yokEPSS %0

    wekan project · wekan15 Ara 2025

  • CVE-2018-1000549
    21İzleyin

    Wekan version 1.04.0 contains a Email / Username Enumeration vulnerability in Register' and 'Forgot your password?' pages that can result in

    OrtaCVSS 5,3İstismar yokEPSS %1

    wekan project · wekan26 Haz 2018

  • CVE-2023-28485
    21İzleyin

    A stored cross-site scripting (Stored XSS) vulnerability in file preview in WeKan before 6.75 allows remote authenticated users to inject ar

    OrtaCVSS 5,4İstismar yokEPSS %0

    wekan project · wekan26 Haz 2023

  • CVE-2021-20654
    21İzleyin

    Wekan, open source kanban board system, between version 3.12 and 4.11, is vulnerable to multiple stored cross-site scripting.

    OrtaCVSS 5,4İstismar yokEPSS %0

    wekan project · wekan10 Şub 2021

  • CVE-2023-31779
    21İzleyin

    Wekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS).

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    wekan project · wekan22 May 2023

  • CVE-2026-1963
    21İzleyin

    WeKan Attachment Storage attachments.js MoveStorageBleed access control

    OrtaCVSS 5,3İstismar yokEPSS %0

    wekan project · wekan5 Şub 2026