Known Vulnerabilities for Sme Server by Koozali
Listed below are 1 of the newest known vulnerabilities associated with "Sme Server" by "Koozali".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-120210 json | FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outsi... | Not Provided | 2026-10-31 | 2026-10-31 |
| CVE-2026-120019 json | The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versi... | Not Provided | 2026-10-31 | 2026-10-31 |
| CVE-2026-119977 json | WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessib... | Not Provided | 2026-10-31 | 2026-10-31 |
| CVE-2026-119762 json | Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contains an unauthenticated denial of serv... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119761 json | Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scripting vulnerability that allows unauthe... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119713 json | Paperclip 2026.403.0 before 2026.416.0 contains a remote code execution vulnerability that allows agent API key holders to se... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119712 json | PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows atta... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119709 json | Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata POST h... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119703 json | xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerability in WebSocketServer._handle_auth that allow... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119652 json | HuLa-Server through 3.0.7 contains an insecure direct object reference vulnerability in FriendController.friendList that allo... | Not Provided | 2026-10-30 | 2026-10-30 |