Riasztások
2025. Feb. 12.
NA - CVE-2025-26355 - A CWE-35 "Path Traversal" in...
A CWE-35 "Path Traversal" in maxtime/api/database/database.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to delete sensitive files via crafted...
2025. Feb. 12.
NA - CVE-2025-26356 - A CWE-35 "Path Traversal" in...
A CWE-35 "Path Traversal" in maxtime/api/database/database.lua (setActive endpoint) in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to overwrite...
2025. Feb. 12.
NA - CVE-2025-26357 - A CWE-35 "Path Traversal" in...
A CWE-35 "Path Traversal" in maxtime/api/database/database.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted...
2025. Feb. 12.
NA - CVE-2025-26358 - A CWE-20 "Improper Input Validation" in...
A CWE-20 "Improper Input Validation" in ldbMT.so in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to modify system configuration via crafted HTTP...
2025. Feb. 12.
NA - CVE-2025-26359 - A CWE-306 "Missing Authentication for Critical...
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to reset...
2025. Feb. 12.
NA - CVE-2025-26360 - A CWE-306 "Missing Authentication for Critical...
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/persistance/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to...
2025. Feb. 12.
NA - CVE-2025-26361 - A CWE-306 "Missing Authentication for Critical...
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to factory...
2025. Feb. 12.
NA - CVE-2025-26362 - A CWE-306 "Missing Authentication for Critical...
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to set an...
2025. Feb. 12.
NA - CVE-2025-26363 - A CWE-306 "Missing Authentication for Critical...
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enable an...
2025. Feb. 12.
NA - CVE-2025-26364 - A CWE-306 "Missing Authentication for Critical...
A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to disable...