Known Vulnerabilities for E-friends by Alstrasoft
Listed below are 6 of the newest known vulnerabilities associated with "E-friends" by "Alstrasoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115541 json | HumHub Community Edition 1.19.0 contains a stored cross-site scripting vulnerability in the friendship confirmation dialog. A... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-113352 json | uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absol... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-108950 json | Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler that... | Not Provided | 2026-10-12 | 2026-10-18 |
| CVE-2026-99066 json | In the Linux kernel, the following vulnerability has been resolved: can: dev: init_can_skb(): restore skb header initializat... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-98809 json | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: don't drain cmd_sync backlog on unr... | Not Provided | 2026-10-18 | 2026-10-30 |
| CVE-2026-98548 json | In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the packet on a stale-cookie e... | Not Provided | 2026-10-18 | 2026-10-24 |
| CVE-2026-80853 json | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on SN... | Not Provided | 2026-09-04 | 2026-10-19 |
| CVE-2026-72049 json | In the Linux kernel, the following vulnerability has been resolved: ieee802154: admin-gate legacy LLSEC dump operations In ... | Not Provided | 2026-08-15 | 2026-10-19 |
| CVE-2026-62979 json | jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, `middleware/handle-err... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-53675 json | BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the friends REST API that allows any authenti... | Not Provided | 2026-06-10 | 2026-10-08 |