Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

Vulnerability	Exploitation status	Fix	Provider	Affected product	Published	Severity

`CVE-2026-123512`Vikunja before 2.7.1 Sensitive Token Exposure via URL Query in Access Logs	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja	Published11/08/2026	SeverityHigh
`CVE-2026-123511`Vikunja before 2.7.1 Resource Exhaustion via CalDAV VTODO RELATED-TO Entries	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123510`Vikunja before 2.7.1 Plugin and Log Directories Not Anchored to Rootpath	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123509`Vikunja before 2.7.1 Denial of Service via Unbounded Kanban Bucket Count	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123508`Vikunja before 2.7.1 Supply Chain Risk via Unpinned xgo Release Toolchain	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123507`Vikunja 0.24.0 before 2.7.1 Denial of Service via Nil Bucket Filter	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123506`Vikunja 2.2.0 before 2.7.1 Token Scope Bypass via Project Webhook Endpoints	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123505`Vikunja before 2.7.1 World-Readable Local File Storage and SQLite Database	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123504`Vikunja 0.22.0 before 2.7.1 Webhook URL Credential Exposure to Read-Only Members	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123503`Vikunja before 2.7.1 Improper Authorization in Kanban Bucket Deletion	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123502`Vikunja before 2.7.1 Link-Share Hash Exposure via Request Path Logging	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123501`Vikunja before 2.7.1 Memory Exhaustion DoS via Unbounded Image Decodes	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123500`Vikunja before 2.7.1 Insecure Permissions on Dump Archive via vikunja dump	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123499`Vikunja veans before 2.7.1 Credential Leak via Repo-Controlled .veans.yml Server	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123498`Vikunja veans before 2.7.1 Prompt Injection via Project and Task Metadata	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123497`Vikunja veans before 2.7.1 HTTPS to HTTP Downgrade in Server Discovery	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123496`Vikunja veans before 2.7.1 Symlink Following in veans init	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123495`Vikunja 2.0.0 before 2.7.1 Login CSRF via /api/v2 Login and OIDC Callback	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123494`Vikunja before 2.7.1 Login CSRF via Migration OAuth Callbacks	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-123493`Vikunja from 2.4.0 before 2.7.1 Authentication Bypass via Bot API Tokens	Exploitation statusNot confirmed	FixYes	Providergo-vikunja	Affected productvikunja
`CVE-2026-120531`Subscribe2 – Form, Email Subscribers & Newsletters <= 10.47 - Unauthenticated Stored Cross-Site Scripting via 'data[ip]' Parameter	Exploitation statusNot confirmed	FixYes	Providerwedevs
`CVE-2026-99284`net: skbuff: propagate shared-frag marker in skb_zerocopy()	Exploitation statusNot confirmed	FixYes	ProviderLinux	Affected product
`CVE-2026-124060`TOTOLINK CA300-PoE cstecgi.cgi UploadCustomModule buffer overflow	Exploitation statusActively exploited	FixNo	ProviderTOTOLINK
`CVE-2026-99283`netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets	Exploitation statusNot confirmed	FixYes	ProviderLinux	Affected product
`CVE-2026-124059`TOTOLINK CA300-PoE cstecgi.cgi setWiFiWdsAddConfig buffer overflow	Exploitation statusActively exploited	FixNo	ProviderTOTOLINK	Affected product
`CVE-2026-124058`TOTOLINK CA300-PoE cstecgi.cgi setWiFiRepeaterConfig buffer overflow	Exploitation statusActively exploited	FixNo	ProviderTOTOLINK	Affected product
`CVE-2026-124057`TOTOLINK CA300-PoE cstecgi.cgi setWiFiMultipleConfig buffer overflow	Exploitation statusActively exploited	FixNo	ProviderTOTOLINK	Affected product
`CVE-2026-123472`WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot exploited	FixYes	ProvidereLightUp	Affected product
`CVE-2026-119522`WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerability	Exploitation statusNot exploited	FixYes	ProviderThemeGrill	Affected product
`CVE-2026-123461`WordPress FOX plugin <= 1.5.6 - Broken Access Control vulnerability	Exploitation statusNot exploited	FixYes	ProviderPluginUs.Net	Affected productFOX
`CVE-2026-120836`WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Broken Access Control vulnerability	Exploitation statusNot exploited	FixYes	ProvidereLightUp	Affected product
`CVE-2026-124258`WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerability	Exploitation statusNot exploited	FixYes	ProviderThemeGrill	Affected product
`CVE-2026-123992`DataEase SVG StaticResourceServer.java StaticResourceServer.validateSvgContent cross site scripting	Exploitation statusNot confirmed	FixYes	Provider-	Affected productDataEase
`CVE-2026-123991`DataEase Authentication Filter WhitelistUtils.java WhitelistUtils.endsWithAny unrestricted upload	Exploitation statusNot confirmed	FixYes	Provider-	Affected productDataEase
`CVE-2026-123990`DataEase Chart Data ExtWhere2Str.java ExtWhere2Str.extWhere2sqlOjb sql injection	Exploitation statusNot confirmed	FixYes	Provider-	Affected productDataEase
`CVE-2026-123989`ESEngine DeepSeek-Reasonix Build Script Execution build.rs loadGitStatus permission	Exploitation statusNot confirmed	FixYes	ProviderESEngine	Affected product
`CVE-2026-124318`Treeio through 2.0 Insecure Deserialization RCE via Admin-Editable Pickle Fields	Exploitation statusNot confirmed	FixYes	Providertreeio	Affected producttreeio
`CVE-2026-124317`libexpat through 2.10.0 Out-of-Bounds Read via unknown_toUtf8 and unknown_toUtf16	Exploitation statusNot confirmed	FixYes	Providerlibexpat	Affected productlibexpat
`CVE-2026-124316`Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_material_requests	Exploitation statusNot confirmed	FixYes	Providerfrappe	Affected product
`CVE-2026-124315`Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_bom_items	Exploitation statusNot confirmed	FixYes	Providerfrappe	Affected product
`CVE-2026-124314`Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_open_activities	Exploitation statusNot confirmed	FixYes	Providerfrappe	Affected product
`CVE-2026-124313`Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_payments_for_doc	Exploitation statusNot confirmed	FixYes	Providerfrappe	Affected product
`CVE-2026-124312`Fraunhofer HHI VVdeC through 3.2.1 Heap Out-of-Bounds Read via CodingStructure::getColInfo	Exploitation statusNot confirmed	FixYes	Providerfraunhoferhhi	Affected product
`CVE-2026-124311`Fraunhofer HHI VVdeC through 3.2.1 NULL Pointer Dereference via InterPrediction::xPredInterBlk	Exploitation statusNot confirmed	FixYes	Providerfraunhoferhhi	Affected product
`CVE-2026-124310`Fraunhofer HHI VVdeC before 3.2.1 Out-of-Bounds Read via Slice::getRefPic	Exploitation statusNot confirmed	FixYes	Providerfraunhoferhhi	Affected productvvdec
`CVE-2026-124309`Fraunhofer HHI VVdeC before 3.2.1 Heap Out-of-Bounds Read via SEIReader::xParseSEIScalableNesting	Exploitation statusNot confirmed	FixYes	Providerfraunhoferhhi	Affected product
`CVE-2026-124308`Fraunhofer HHI VVdeC before 3.2.1 Use-After-Free via DecLibRecon::createSubPicRefBufs	Exploitation statusNot confirmed	FixYes	Providerfraunhoferhhi	Affected product
`CVE-2026-124307`Fraunhofer HHI VVdeC before 3.2.1 Heap Use-After-Free via ALF APS Redefinition	Exploitation statusNot confirmed	FixYes	Providerfraunhoferhhi	Affected product
`CVE-2026-99282`net/sched: sch_teql: fix use-after-free on lower qdisc drop	Exploitation statusNot confirmed	FixYes	ProviderLinux	Affected product
`CVE-2026-99281`tun: Require CAP_NET_ADMIN to attach to an ownerless device	Exploitation statusNot confirmed	FixYes	ProviderLinux	Affected product

421,264 Results | Page 5 of 8,426

Vulnerability Database

Vulnerabilities

Top 5 providers by vulnerabilities (90 days)

Run an in-depth assessment with complete web risk management

Explore more resources from CyStack

Website security reports

CyStack research

Filters

Cybersecurity knowledge