Riasztások
12 Feb 2025
NA - CVE-2025-26363 - A CWE-306 "Missing Authentication for Critical...
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enable an...
12 Feb 2025
NA - CVE-2025-26364 - A CWE-306 "Missing Authentication for Critical...
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to disable...
12 Feb 2025
NA - CVE-2025-26365 - A CWE-306 "Missing Authentication for Critical...
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enable...
12 Feb 2025
NA - CVE-2025-26366 - A CWE-306 "Missing Authentication for Critical...
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to disable...
12 Feb 2025
NA - CVE-2025-26367 - A CWE-862 "Missing Authorization" in...
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to create arbitrary...
12 Feb 2025
NA - CVE-2025-26368 - A CWE-862 "Missing Authorization" in...
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove user groups...
12 Feb 2025
NA - CVE-2025-26369 - A CWE-862 "Missing Authorization" in...
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to add privileges to...
12 Feb 2025
NA - CVE-2025-26370 - A CWE-862 "Missing Authorization" in...
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove privileges...
12 Feb 2025
NA - CVE-2025-26371 - A CWE-862 "Missing Authorization" in...
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to add users to...
12 Feb 2025
NA - CVE-2025-26372 - A CWE-862 "Missing Authorization" in...
A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove users from...