KA
Vendor
kalcaddle
26
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104081 | KO KodExplorer kalcaddle | 8.1 | Oct 9 | KodExplorer < 4.55 Path Traversal via unzip_pre_name() ZIP Extraction |
| CVE-2026-18721 | KO kodbox kalcaddle | 4.3 | Aug 4 | kalcaddle kodbox SSO API Login apiLogin redirect |
| CVE-2026-18720 | KO kodbox kalcaddle | 5.3 | Aug 4 | kalcaddle kodbox msgWarning Plugin action improper authorization |
| CVE-2026-8753 | KO Kodbox kalcaddle | 6.3 | May 17 | kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection |
| CVE-2026-5618 | KO kodbox kalcaddle | 5.6 | Apr 6 | kalcaddle kodbox shareMake/shareCheck server-side request forgery |
| CVE-2026-4831 | KO kodbox kalcaddle | 3.7 | Mar 26 | kalcaddle kodbox Password-protected Share auth.class.php can improper authentication |
| CVE-2026-4830 | KO kodbox kalcaddle | 5.6 | Mar 26 | kalcaddle kodbox Public Share userShare.class.php add privilege escalation |
| CVE-2026-4592 | KO kodbox kalcaddle | 5.6 | Mar 23 | kalcaddle kodbox Password Login index.class.php tfaVerify improper authentication |
| CVE-2026-4591 | KO kodbox kalcaddle | 4.7 | Mar 23 | kalcaddle kodbox fileThumb Endpoint app.php checkBin os command injection |
| CVE-2026-4590 | KO kodbox kalcaddle | 3.1 | Mar 23 | kalcaddle kodbox loginSubmit API index.class.php cross-site request forgery |
| CVE-2026-4589 | KO kodbox kalcaddle | 6.3 | Mar 23 | kalcaddle kodbox fileGet Endpoint editor.class.php PathDriverUrl server-side request forgery |
| CVE-2026-4588 | KO kodbox kalcaddle | 3.7 | Mar 23 | kalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key |
| CVE-2026-2560 | KO kodbox kalcaddle | 6.3 | Feb 16 | kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection |
| CVE-2026-1066 | KO kodbox kalcaddle | 8.8 | Jan 17 | kalcaddle kodbox Compression zip command injection |
| CVE-2025-11016 | KO kodbox kalcaddle | 4.3 | Sep 26 | kalcaddle kodbox index.class.php fileOut path traversal |
| CVE-2025-10233 | KO kodbox kalcaddle | 4.3 | Sep 10 | kalcaddle kodbox editor.class.php fileSave path traversal |
| CVE-2025-9414 | KO kodbox kalcaddle | 4.9 | Aug 25 | kalcaddle kodbox Download from Link serverDownload server-side request forgery |
| CVE-2024-51037 | KO Kodbox Kalcaddle | 5.3 | Nov 15 | An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function |
| CVE-2023-6853 | KO KodExplorer kalcaddle | 9.8 | Dec 16 | kalcaddle KodExplorer app.php index server-side request forgery |
| CVE-2023-6852 | KO KodExplorer kalcaddle | 9.8 | Dec 16 | kalcaddle KodExplorer app.php server-side request forgery |
| CVE-2023-6851 | KO KodExplorer kalcaddle | 9.8 | Dec 16 | kalcaddle KodExplorer ZIP Archive app.php unzipList code injection |
| CVE-2023-6850 | KO KodExplorer kalcaddle | 9.8 | Dec 16 | kalcaddle KodExplorer API Endpoint unrestricted upload |
| CVE-2023-6849 | KO kodbox kalcaddle | 9.8 | Dec 16 | kalcaddle kodbox app.php cover server-side request forgery |
| CVE-2023-6848 | KO kodbox kalcaddle | 9.8 | Dec 16 | kalcaddle kodbox index.class.php check command injection |
| CVE-2022-4944 | KO KodExplorer kalcaddle | 8.8 | Apr 22 | kalcaddle KodExplorer cross-site request forgery |
| CVE-2022-46154 | KO KodExplorer kalcaddle | 7.5 | Dec 6 | Arbitrary file access in KodExplorer |