CE
Vendor
CERN
20
CVEs
0
On KEV
0
New 30D
Products
IN8.8
Indico
CERN
11 CVEs0 on KEV0 new
RU8.8
Rucio
Cern
8 CVEs0 on KEV0 new
RO8.8
Root
Cern
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-29090 | RU Rucio Cern | 8.8 | May 6 | Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database |
| CVE-2026-29080 | RU Rucio Cern | 8.8 | May 6 | Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API |
| CVE-2026-33046 | IN Indico Cern | 8.8 | Mar 23 | Indico discloses local files resulting in Remote Code Execution through LaTeX injection |
| CVE-2026-28352 | IN Indico Cern | 6.5 | Feb 27 | Indico missing access check in event series management API |
| CVE-2026-25736 | RU Rucio Cern | 4.8 | Feb 25 | Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute |
| CVE-2026-25735 | RU Rucio Cern | 4.8 | Feb 25 | Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name |
| CVE-2026-25734 | RU Rucio Cern | 4.8 | Feb 25 | Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata |
| CVE-2026-25733 | RU Rucio Cern | 5.4 | Feb 25 | Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function |
| CVE-2026-25138 | RU Rucio Cern | 5.3 | Feb 25 | Rucio WebUI has Username Enumeration via Login Error Message |
| CVE-2026-25136 | RU Rucio Cern | 6.1 | Feb 25 | Rucio WebUI has a Reflected Cross-site Scripting Vulnerability |
| CVE-2026-25739 | IN Indico Cern | 5.4 | Feb 19 | Indico affected by Cross-Site-Scripting via material uploads |
| CVE-2026-25738 | IN Indico Cern | 4.3 | Feb 19 | Indico has Server-Side Request Forgery (SSRF) in multiple places |
| CVE-2025-59035 | IN Indico Cern | 5.4 | Sep 10 | Indico vulnerable to Cross-Site Scripting via LaTeX math code |
| CVE-2025-59034 | IN Indico Cern | 4.3 | Sep 10 | Indico may disclose unauthorized user details access via legacy API |
| CVE-2025-53640 | IN Indico Cern | 6.5 | Jul 14 | Indico vulnerable to user enumeration via API endpoint |
| CVE-2024-50633 | IN Indico CERN | 7.5 | Jan 16 | A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted POST request to the component… |
| CVE-2024-45399 | IN Indico Cern | 6.1 | Sep 4 | Indico has a Cross-Site-Scripting during account creation |
| CVE-2023-37901 | IN Indico Cern | 5.4 | Jul 21 | Indico is an open source a general-purpose, web based event management tool |
| CVE-2021-30185 | IN Indico Cern | 7.5 | Apr 7 | CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link |
| CVE-2017-1000203 | RO Root Cern | 8.8 | Nov 17 | ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon resulting in remote code execution |